Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/029fdc42-e9b0-311d-8235-45c2db6cc44f.roa
File:                     029fdc42-e9b0-311d-8235-45c2db6cc44f.roa (raw, json)
Hash identifier:          S5tJFOwS8dQCJSZmsqLWCO7/56Nhl6or7fBQ+stc3rk=
Subject key identifier:   D1:2F:A9:19:C2:DC:0E:C6:E0:49:14:1F:DA:E8:97:8D:21:8A:EF:20
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840912880458B42C2E951F19D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/029fdc42-e9b0-311d-8235-45c2db6cc44f.roa
Signing time:             Fri 13 Jan 2023 12:00:00 +0000
ROA not before:           Fri 13 Jan 2023 12:00:00 +0000
ROA not after:            Sat 18 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        54.46.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:91:28:80:45:8b:42:c2:e9:51:f1:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 13 12:00:00 2023 GMT
            Not After : Feb 18 05:00:00 2023 GMT
        Subject: CN=338d6cfd-9699-42c6-ad84-1b47a993a503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:20:8a:93:00:2f:3b:c1:6a:de:19:4e:7c:2d:
                    d2:fc:77:bc:f1:91:bb:dc:de:85:db:95:ff:1e:91:
                    4c:a7:ca:70:0f:a0:18:7b:c7:71:f1:fa:67:80:c1:
                    03:39:a4:55:7c:d8:fc:f0:b8:a9:bf:83:f4:2c:40:
                    d3:34:d6:d3:6c:83:ec:87:ed:cc:05:bf:cd:6a:af:
                    cf:19:5c:bc:b1:6a:28:3d:73:89:c3:a8:c1:04:f6:
                    6f:1b:c8:8e:5d:2b:97:6f:2d:c1:23:e2:03:19:83:
                    1e:df:7c:a2:d2:ae:a1:a2:fe:01:9a:01:17:36:84:
                    e0:89:a0:bc:2a:e4:12:6a:f0:bc:3c:fe:ec:9f:9d:
                    eb:be:19:2f:f0:92:f7:df:58:2f:ec:15:1b:61:1b:
                    20:fb:e7:9c:02:29:b1:17:84:e5:5c:fb:89:5e:58:
                    d1:4c:d7:51:0f:06:9a:d4:be:62:45:11:ed:b0:3c:
                    61:6e:f5:36:e3:5e:cf:1e:33:0e:71:c7:84:37:3e:
                    40:db:b7:ef:cf:00:07:68:e8:77:6c:c3:37:c1:19:
                    4e:c7:bb:f2:fe:54:20:e2:c9:4d:76:cd:b8:4f:22:
                    af:94:16:f6:ca:80:05:60:2b:97:c6:34:28:2d:ec:
                    a5:ba:71:f2:eb:12:ce:14:4c:fb:76:14:fc:10:8c:
                    1e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2F:A9:19:C2:DC:0E:C6:E0:49:14:1F:DA:E8:97:8D:21:8A:EF:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/029fdc42-e9b0-311d-8235-45c2db6cc44f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.46.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:6f:7e:ce:5f:88:fb:2a:f0:86:e9:02:c1:e9:74:f2:1d:52:
         cf:d1:9d:c0:e9:da:9c:5b:ab:ea:b8:ab:05:61:5e:58:6b:56:
         b8:cc:96:8d:f5:99:81:42:3b:26:f7:e5:dc:23:88:a4:0b:c6:
         2d:8b:78:25:89:17:21:06:6e:63:c7:26:53:ea:26:81:9a:71:
         8a:6b:b1:b4:a3:1b:7d:6f:ae:dc:3e:94:3f:d4:3e:1f:92:ca:
         70:50:e2:a1:7b:41:0e:6c:7a:65:82:28:9c:c2:8b:02:77:92:
         bd:17:f3:aa:11:2c:3d:43:ea:35:5e:f3:a2:15:75:54:ea:05:
         2f:bf:84:bc:2f:fa:ac:9b:10:09:8f:ee:6d:e5:d1:b6:43:49:
         4c:95:21:a8:2a:e5:53:ee:48:01:7b:94:d2:e5:12:51:24:3a:
         a6:b5:13:fa:aa:33:0b:7a:63:91:f8:c1:12:3d:74:87:99:b2:
         7e:02:57:0b:f6:6d:d0:3f:53:3f:fe:6a:54:64:5e:ee:02:ae:
         6a:b1:ed:16:76:ed:75:c7:68:14:34:e3:7a:0b:5d:80:d4:4b:
         34:25:4d:a4:76:19:98:a6:24:95:23:c5:38:e9:94:4d:75:9b:
         63:62:29:29:8d:c9:f3:96:69:65:e7:25:2b:1d:43:02:21:71:
         e1:f9:bf:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:11:23 2025 by rpki-client