Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/9cd3f317-bab9-3e24-87ca-d8e7602bc9df.roa
File:                     9cd3f317-bab9-3e24-87ca-d8e7602bc9df.roa (raw, json)
Hash identifier:          R+DYmoNxfP9/+gxOc+85L7KGynmNHKgj9fvpezcoJPQ=
Subject key identifier:   6C:28:01:21:0D:92:66:2A:1F:B4:BA:FE:7F:04:0D:4F:FF:81:7B:9C
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F432858487B85B7E8BB86072720B40400
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/9cd3f317-bab9-3e24-87ca-d8e7602bc9df.roa
Signing time:             Thu 09 Jan 2025 02:00:40 +0000
ROA not before:           Thu 09 Jan 2025 02:00:40 +0000
ROA not after:            Wed 09 Apr 2025 01:00:40 +0000
asID:                     399185
IP address blocks:        16.0.56.192/27 maxlen: 27
                          16.1.121.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7b:85:b7:e8:bb:86:07:27:20:b4:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Jan  9 02:00:40 2025 GMT
            Not After : Apr  9 01:00:40 2025 GMT
        Subject: CN=2e7902fe-b149-43e5-bce9-acbc4cb0d750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:dc:c3:13:6f:aa:6e:d0:a8:b4:d8:66:d3:d1:
                    11:2c:5d:be:4b:46:36:a4:e3:bb:98:5b:79:56:9b:
                    89:db:88:c3:9b:80:96:8f:b2:33:0d:6e:19:4d:dd:
                    66:06:d5:fc:32:41:14:89:dd:1b:24:b1:94:36:80:
                    2f:37:0f:c1:aa:ee:df:3e:d0:b2:2a:2c:b5:72:46:
                    3d:91:9b:8c:23:98:44:41:24:39:f5:c3:cd:63:dc:
                    53:26:d8:40:45:8f:42:57:96:37:f0:46:65:de:2a:
                    5a:79:a9:59:4c:ce:fc:bd:ee:b4:cd:04:2e:ee:23:
                    68:c9:42:ed:1c:80:1e:31:e6:72:a7:f6:0a:d3:c9:
                    85:0d:e1:c7:74:55:66:10:98:8f:8b:af:bd:70:0c:
                    96:47:1f:86:d5:68:9a:70:3d:dd:c1:07:18:de:ae:
                    a9:18:97:46:04:96:6b:16:7c:d5:22:3c:5c:4d:91:
                    ce:a1:fb:a2:cb:b4:ca:3a:cf:3f:6c:b6:4a:e3:f3:
                    13:90:24:d3:e2:03:2c:03:1b:fd:e1:9d:24:00:50:
                    23:cd:e8:1c:24:0f:2a:eb:20:e2:f0:70:8f:67:35:
                    0d:38:6a:3e:30:a5:72:d9:12:36:6a:b6:e4:82:47:
                    8a:c4:4e:c5:c8:13:b2:ce:a7:9e:a6:17:69:5e:9f:
                    dd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:28:01:21:0D:92:66:2A:1F:B4:BA:FE:7F:04:0D:4F:FF:81:7B:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/9cd3f317-bab9-3e24-87ca-d8e7602bc9df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.0.56.192/27
                  16.1.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:db:c7:c3:5c:39:96:8b:cb:bf:e2:13:5d:b4:82:64:70:b6:
         61:a0:b2:cc:9c:4f:e1:07:0c:a7:91:36:15:53:f4:11:bb:87:
         91:35:ac:a5:79:9f:58:ad:26:1e:3e:89:a4:e1:39:12:e9:1d:
         af:49:9a:fe:1c:74:b0:74:da:e1:5a:43:5e:99:76:c3:a5:58:
         f7:3b:aa:ea:a9:7e:8d:18:ef:ba:62:98:db:6b:00:8a:e4:e7:
         4d:5e:78:9c:94:c1:cf:b4:05:8e:78:e6:bb:6a:ec:8b:5b:a6:
         52:ab:c5:e5:3e:27:38:dc:c1:73:c0:c3:73:1c:b4:69:16:16:
         41:d1:44:c9:07:22:bd:56:c4:e5:54:e8:20:68:9f:08:d4:dc:
         0a:f9:4c:ce:d9:37:98:7f:dc:81:df:da:48:c6:c1:19:0b:d1:
         f5:39:a6:30:45:2b:1f:64:ed:ed:74:f9:d3:bf:77:12:b1:47:
         57:31:6d:41:f3:d4:c6:3e:e7:97:dc:4b:19:d8:ec:b5:2a:e4:
         af:12:c1:fc:51:51:77:e3:ae:77:e6:64:4e:c9:ba:a2:8e:22:
         fc:c5:3d:58:92:c4:07:38:d1:f7:89:ef:93:3f:8d:8e:39:70:
         c5:88:41:8a:60:18:99:c2:cc:28:cb:81:35:90:d7:6e:1e:a0:
         7a:ec:32:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:06:17 2025 by rpki-client