Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fb886adb-c064-3aa3-980c-237be50b5562.roa
File:                     fb886adb-c064-3aa3-980c-237be50b5562.roa (raw, json)
Hash identifier:          PT0acU1JQ8ba0cGwTarsD384Tqu0jBkKMrwG7dIYHPU=
Subject key identifier:   9F:76:BD:FD:A2:9C:62:F8:72:3C:B9:13:7E:77:6C:57:FB:B1:66:01
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CAC3F6B0BEEFDD59131609780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fb886adb-c064-3aa3-980c-237be50b5562.roa
Signing time:             Sat 22 Jan 2022 05:00:00 +0000
ROA not before:           Sat 22 Jan 2022 05:00:00 +0000
ROA not after:            Sat 26 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        16.16.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:ac:3f:6b:0b:ee:fd:d5:91:31:60:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 22 05:00:00 2022 GMT
            Not After : Feb 26 05:00:00 2022 GMT
        Subject: CN=f4cde79d-cd84-40f4-bc36-7373731107cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c0:cd:4a:e1:4d:ec:a7:98:52:a8:a6:ac:8d:
                    a3:a4:0a:94:5e:5c:9e:5c:f8:b6:39:e7:5e:19:09:
                    6c:63:d3:8d:d6:0d:61:c4:20:b9:5f:87:3c:f5:c5:
                    ea:76:61:9e:ce:d8:55:65:d1:77:5b:fb:da:d7:50:
                    8a:9f:85:99:5b:91:82:d0:72:53:27:f0:9f:47:55:
                    4e:01:b1:d4:dd:32:e2:b6:41:a2:bf:7f:cb:6e:2b:
                    4a:00:94:69:93:f8:f6:d5:5e:2a:a6:00:25:29:a6:
                    3b:f6:31:fa:0d:f3:ae:28:3e:53:a9:75:68:79:79:
                    02:3f:0c:f3:5e:a6:2d:8f:42:38:61:15:5d:3e:0f:
                    6b:16:b5:44:dd:36:12:9b:cb:bf:d9:f7:b6:9a:b8:
                    4a:dd:32:48:29:f5:d4:3b:f1:21:59:a6:70:71:48:
                    23:e1:de:3e:2f:d5:c3:a0:72:94:36:59:05:75:ba:
                    52:13:d6:b1:35:02:55:bb:17:1f:34:d9:85:78:e9:
                    62:c7:8e:c7:12:f3:36:c2:00:31:ae:7d:98:1b:4d:
                    47:c2:5a:98:5c:23:c6:40:be:28:28:4d:19:f5:bf:
                    7a:40:6a:35:61:e1:12:d4:39:ce:9b:56:63:98:0a:
                    fe:73:05:58:6c:42:31:e4:78:16:bc:ef:90:a5:55:
                    09:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:76:BD:FD:A2:9C:62:F8:72:3C:B9:13:7E:77:6C:57:FB:B1:66:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fb886adb-c064-3aa3-980c-237be50b5562.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.16.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:2f:04:4a:39:4b:70:58:6d:13:cf:e5:62:37:b5:9f:08:65:
         bc:c7:90:b3:ae:72:10:64:26:d1:35:28:4f:2c:93:b0:9a:bb:
         ba:90:61:1a:37:a3:65:b4:77:6e:e5:c3:70:2a:60:8e:4f:66:
         d3:38:8f:17:d2:13:eb:4d:28:c7:f5:99:09:e2:6a:31:e6:10:
         1b:a8:2d:e6:f3:3d:89:1b:bd:74:f7:75:7b:f5:9e:9f:83:e9:
         d3:a7:24:3a:7d:c6:09:5f:6e:e5:0b:7b:ed:49:f9:97:59:0a:
         0a:0c:61:3b:f4:ba:8e:1e:7c:d3:7b:e3:eb:a0:86:e0:90:af:
         3a:a6:de:56:b2:1f:ac:43:2c:8a:d1:0e:2d:69:9d:b3:d5:b7:
         fd:73:0f:cf:3c:31:92:ff:76:d1:55:61:d3:db:07:d2:e0:57:
         38:87:41:6e:b9:ec:3f:06:7d:4e:54:fd:0c:7e:82:0e:1d:68:
         3d:92:48:f5:7b:72:a2:83:d7:53:c5:d5:96:1d:88:1d:4c:14:
         c4:92:15:0c:20:20:27:91:63:1e:97:71:02:3f:c1:45:80:2f:
         1d:4e:27:b8:e3:d9:0e:b3:c6:2b:45:11:40:61:e2:0a:32:ec:
         96:62:e7:eb:2d:c1:5e:b4:bc:df:b0:22:04:0d:68:dc:46:fc:
         71:35:f9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:32 2025 by rpki-client