Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/02111395-9085-3a2c-90af-6898757efa5c.roa
File:                     02111395-9085-3a2c-90af-6898757efa5c.roa (raw, json)
Hash identifier:          zJ1B+YICMJqEiFyxK9HV8DJOb04KDst36bcl3/u5w6g=
Subject key identifier:   3D:1A:52:27:9B:9E:00:78:91:0B:60:E5:98:D3:F8:86:62:B9:F8:D6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FA557EE6529E1649E1E075E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/02111395-9085-3a2c-90af-6898757efa5c.roa
Signing time:             Fri 21 Oct 2022 16:30:08 +0000
ROA not before:           Fri 21 Oct 2022 16:30:08 +0000
ROA not after:            Fri 25 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        54.47.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a5:57:ee:65:29:e1:64:9e:1e:07:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 21 16:30:08 2022 GMT
            Not After : Nov 25 05:00:00 2022 GMT
        Subject: CN=4c166722-f988-4026-8e02-19c0812bea8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b2:34:85:ae:30:eb:bf:ec:ba:b0:3e:68:21:
                    b9:b8:b9:2f:11:50:15:04:50:e3:d8:46:51:82:63:
                    29:51:4f:fd:c8:01:0e:88:f4:15:a1:7b:70:be:3b:
                    1c:42:d8:c2:09:e7:00:af:5b:6c:e5:ab:c5:96:5c:
                    39:ea:c9:c7:a6:a0:40:03:0c:12:10:3c:ec:21:92:
                    20:db:ea:87:ee:21:c6:92:53:a5:de:77:1c:a7:4a:
                    29:64:e9:aa:6c:63:a4:42:e0:2b:3c:16:a0:33:27:
                    53:d7:1f:de:85:4a:fe:73:38:31:71:ac:cc:2c:be:
                    ea:15:65:d9:13:55:c5:72:89:5a:b3:6f:49:7b:e1:
                    cd:3f:b8:5d:f2:ff:3b:ff:d3:1f:b9:ae:9e:e6:58:
                    7a:54:ad:57:eb:2a:df:89:6e:35:7e:a5:d7:50:4f:
                    f3:ae:b6:ec:3b:24:e0:7c:1e:1e:72:e6:59:9a:28:
                    86:60:ef:e0:84:74:c3:66:66:a8:91:bc:11:30:78:
                    aa:a2:1b:ca:a9:8d:af:c7:d0:d6:50:ff:bf:c8:7c:
                    a8:6d:34:77:8d:ff:12:8f:79:70:81:98:ff:7c:e3:
                    87:35:45:80:74:4f:e0:4f:fc:21:a2:75:7d:14:d0:
                    72:90:7a:de:8f:29:7a:62:f4:b4:a0:38:ae:06:43:
                    fb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1A:52:27:9B:9E:00:78:91:0B:60:E5:98:D3:F8:86:62:B9:F8:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/02111395-9085-3a2c-90af-6898757efa5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.47.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:30:dd:89:6e:2f:57:6e:f0:49:67:be:6e:3a:7c:0a:05:2c:
         70:36:71:65:03:04:d5:28:0d:96:ab:99:7f:a6:88:c9:f9:59:
         8b:6b:4a:33:2e:90:e5:7a:5d:6a:2c:16:24:2e:c2:c9:69:5c:
         b7:25:53:c3:16:3a:67:4a:61:f5:4d:48:a2:7d:a3:4b:53:6d:
         4f:cc:f1:dd:22:b4:3f:82:9a:70:3d:bb:5b:21:71:a7:90:2c:
         d7:54:13:7a:9f:fc:ce:fa:7d:ec:43:83:7d:42:4f:69:6f:e3:
         bf:13:10:6b:59:66:08:a3:e1:b9:2c:a7:76:c6:89:0d:47:56:
         e5:b6:30:26:ec:2c:04:ef:f0:12:b9:ac:5d:60:55:59:28:a1:
         ae:dc:73:ce:9f:83:5c:5b:09:64:41:62:ee:00:cb:03:a4:ac:
         dd:14:56:45:40:db:15:8d:f3:d2:f6:cf:b0:98:b6:54:11:7c:
         39:dc:c6:99:56:65:70:96:25:76:76:34:67:ea:2d:a1:c6:4b:
         98:e9:f2:9b:b8:63:5e:dd:9f:d6:9d:06:1a:ff:05:ac:3c:b1:
         5e:a7:cb:0e:17:b0:a6:bb:5a:f3:6f:fa:1e:ba:f1:c6:83:b2:
         42:2e:e2:44:a3:18:29:da:bf:65:48:07:99:5e:9e:d6:e4:55:
         39:32:cb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:17 2025 by rpki-client