Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/b6b4e916-9a15-3140-9552-e4bbf7451372.roa
File:                     b6b4e916-9a15-3140-9552-e4bbf7451372.roa (raw, json)
Hash identifier:          3+s0Sw+SOOW8ZlPZpXcvEyVI6AfhibSd919eAhROcmk=
Subject key identifier:   F2:E3:28:D8:5E:45:1C:D4:2F:F6:A6:6D:FB:37:9F:B2:D4:37:8B:7F
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F43285848A13607B19D1D70965B014A80
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/b6b4e916-9a15-3140-9552-e4bbf7451372.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     210873
IP address blocks:        16.10.8.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:07:b1:9d:1d:70:96:5b:01:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=e034f156-b709-46b5-86de-389a6af4de41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:44:02:fa:aa:44:9a:38:e5:fe:f7:9f:ed:4f:
                    83:c8:a7:a4:7f:62:6e:7e:5c:b5:b2:81:c7:ff:d6:
                    13:8d:04:d1:52:2a:90:60:c9:92:42:b0:74:44:90:
                    53:2f:00:8a:ef:dd:58:db:5b:ad:b8:84:41:65:83:
                    e9:d4:49:23:d5:82:9e:48:04:66:42:7a:fd:87:8c:
                    13:6f:bf:66:22:03:fd:f7:eb:47:01:19:3b:b7:28:
                    58:0e:b1:71:21:1d:4c:e4:ed:75:15:bb:71:61:3e:
                    45:98:dc:7b:b5:a4:99:d1:86:c7:a8:6b:b6:36:0f:
                    58:51:dd:8c:41:4f:90:15:11:97:76:51:a5:26:ec:
                    fc:8c:dc:8f:44:ee:61:15:88:24:f1:b8:07:39:3d:
                    34:c4:11:2b:a2:e5:19:5b:49:b7:4f:6f:85:75:87:
                    a1:45:a7:6a:02:81:ef:1c:4f:d5:5e:d5:8a:9c:a6:
                    51:ba:4b:06:26:db:ae:a6:4d:d5:f5:2d:f6:5c:27:
                    87:93:c5:a3:54:ab:67:01:66:ee:70:7e:95:05:73:
                    b4:9a:89:03:09:cb:b7:15:27:fd:49:88:cb:2f:4c:
                    39:98:f3:b3:d2:23:7e:d8:2c:50:5d:25:73:28:1e:
                    02:61:42:b4:af:25:2d:bd:6e:b0:28:0b:93:fc:5b:
                    90:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E3:28:D8:5E:45:1C:D4:2F:F6:A6:6D:FB:37:9F:B2:D4:37:8B:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/b6b4e916-9a15-3140-9552-e4bbf7451372.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.10.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:ae:ca:52:66:40:bf:6e:4a:64:13:dc:b2:38:5d:f3:42:62:
         09:b5:a5:9b:69:84:fb:85:f6:4f:a8:b1:79:4d:b1:3c:ed:33:
         f1:69:85:8f:eb:da:6c:11:94:25:12:2e:33:ab:e6:eb:50:5b:
         7f:8a:28:ef:8f:03:5e:b9:03:cd:94:39:da:02:3e:11:9f:02:
         8c:28:77:37:40:12:d9:1c:2f:5e:de:ce:f9:4d:76:77:06:07:
         1c:59:40:e4:63:b6:e7:70:b2:cf:4a:21:11:08:9c:ed:72:8d:
         18:24:80:38:b0:bb:01:76:da:a0:8c:b7:98:f1:5f:f1:9e:d8:
         61:a8:a4:a7:e7:46:3d:03:ad:4c:84:57:d5:13:b3:8e:57:1e:
         1a:1f:22:5e:c3:e8:35:c0:94:d1:99:a6:8b:f5:85:d8:38:12:
         20:78:69:89:e8:b6:4f:9f:a3:97:45:3e:b2:a5:65:e8:07:8d:
         d4:76:e1:75:52:fd:bc:37:45:9f:0a:75:ae:99:40:dd:68:84:
         7a:94:3d:37:37:6a:eb:ca:5a:45:ae:5c:49:76:20:5a:9f:eb:
         15:47:33:dc:2e:e1:76:9b:d6:75:89:c8:4d:a7:91:5b:7a:a4:
         a1:3f:24:30:b5:ab:33:db:40:e2:a9:e4:80:4e:ae:d2:8a:37:
         a4:aa:f6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----