Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/05be0a0f-0841-38fe-af72-5b2d48370400.roa
File:                     05be0a0f-0841-38fe-af72-5b2d48370400.roa (raw, json)
Hash identifier:          JoLnxgIMP8ubenEFFvCLspAIZlyfUmiG4F6JRuYBKYA=
Subject key identifier:   17:69:BD:26:7C:17:1B:C1:62:58:12:B4:33:09:21:78:47:65:6F:F3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840ADC6065EAC951C3D686D8200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/05be0a0f-0841-38fe-af72-5b2d48370400.roa
Signing time:             Mon 23 Jan 2023 12:00:00 +0000
ROA not before:           Mon 23 Jan 2023 12:00:00 +0000
ROA not after:            Tue 28 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        54.113.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:ad:c6:06:5e:ac:95:1c:3d:68:6d:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 23 12:00:00 2023 GMT
            Not After : Feb 28 05:00:00 2023 GMT
        Subject: CN=17e0c99b-5fdb-420d-bb2d-e87c7d188495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:75:56:32:ad:79:b7:2f:84:c3:3a:4a:27:d9:
                    c6:05:57:11:e8:d6:f0:44:47:c6:fc:b7:04:d4:60:
                    2c:78:27:e7:72:25:5b:12:e3:45:21:68:53:5b:ea:
                    05:42:e9:04:86:19:95:3c:f2:0b:8b:48:1c:6c:c9:
                    1d:45:89:a4:9b:2a:35:35:10:0e:d4:4f:66:a6:6a:
                    a8:f0:7b:9e:f7:aa:0a:6c:3e:c4:7d:44:4e:c6:aa:
                    56:1f:ce:82:40:b4:b0:f8:1f:8a:69:6c:f6:40:bf:
                    77:46:29:49:0f:ca:4b:8c:10:1d:aa:2c:e7:ac:15:
                    e3:e1:84:13:be:b1:0e:d4:5e:3a:52:27:65:c8:77:
                    73:01:ef:bf:cf:b5:03:c8:97:dd:10:b3:90:80:b4:
                    09:dd:58:35:3b:b6:97:b4:1d:75:e7:b5:27:21:e2:
                    f8:4e:77:45:fa:93:32:ac:19:3e:9d:ed:00:c1:b6:
                    7d:31:8b:52:f2:c0:36:27:31:d5:a5:fc:88:88:a1:
                    09:6e:13:ff:4a:2d:42:7e:37:75:12:ce:5a:e9:59:
                    7f:5f:1c:46:ef:1c:75:da:04:f8:30:3a:51:09:94:
                    cf:d6:23:da:9b:e5:03:3f:97:7d:78:ae:18:27:4f:
                    25:d2:0a:0a:11:d9:75:4e:2d:3d:ef:d6:c8:64:bb:
                    a3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:69:BD:26:7C:17:1B:C1:62:58:12:B4:33:09:21:78:47:65:6F:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/05be0a0f-0841-38fe-af72-5b2d48370400.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.113.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:e3:fa:94:c1:3f:ed:96:b2:f0:f5:ca:43:ea:6c:3d:fb:b5:
         bc:b5:a7:ed:cf:78:f3:cd:2e:d9:20:1a:d4:39:45:41:4f:26:
         ec:cd:50:98:eb:ae:c3:b6:af:05:36:6c:a3:1f:47:37:5b:a6:
         37:fd:4e:d2:4e:a3:ea:e9:df:11:db:35:f1:f5:35:6a:13:88:
         d3:63:12:4b:6b:50:e5:01:5e:10:9b:d2:49:56:6d:d7:ea:df:
         c8:2c:65:c8:1b:02:81:14:18:fe:48:14:4e:0d:ae:c3:f4:79:
         23:2c:82:c6:ca:aa:73:63:7c:f6:98:43:d4:c6:30:29:98:d6:
         7a:75:57:9a:63:a5:ed:c4:eb:19:17:62:a6:92:f7:40:69:ea:
         da:c9:d7:65:ed:96:02:84:e1:12:9e:c5:f4:38:d9:d4:b5:73:
         8c:6c:a9:7a:ef:d0:14:94:0d:3b:fd:a0:9a:27:3a:65:2d:a8:
         ae:9d:35:cd:65:e8:28:55:32:ae:4c:24:85:dc:d0:ba:10:a2:
         94:71:7d:5d:b0:2b:8e:ba:f1:1f:4d:1c:f6:f3:69:95:7b:4c:
         fe:3d:c2:94:fe:b9:53:1f:c6:1e:5b:18:37:00:05:9c:e4:b0:
         2a:87:bd:ba:72:e6:39:cc:b1:ac:7c:9a:3c:8e:61:51:aa:e6:
         11:44:e7:4a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECtxgZerJUcPWhtggAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEyMzEyMDAwMFoXDTIzMDIyODA1MDAwMFowLzEtMCsGA1UEAxMk
MTdlMGM5OWItNWZkYi00MjBkLWJiMmQtZTg3YzdkMTg4NDk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXVWMq15ty+EwzpKJ9nGBVcR6NbwREfG/LcE
1GAseCfnciVbEuNFIWhTW+oFQukEhhmVPPILi0gcbMkdRYmkmyo1NRAO1E9mpmqo
8Hue96oKbD7EfUROxqpWH86CQLSw+B+KaWz2QL93RilJD8pLjBAdqiznrBXj4YQT
vrEO1F46UidlyHdzAe+/z7UDyJfdELOQgLQJ3Vg1O7aXtB1157UnIeL4TndF+pMy
rBk+ne0AwbZ9MYtS8sA2JzHVpfyIiKEJbhP/Si1Cfjd1Es5a6Vl/XxxG7xx12gT4
MDpRCZTP1iPam+UDP5d9eK4YJ08l0goKEdl1Ti0979bIZLujqQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBdpvSZ8FxvBYlgStDMJIXhHZW/zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMDViZTBhMGYtMDg0MS0z
OGZlLWFmNzItNWIyZDQ4MzcwNDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMANnEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAV+P6lME/7Zay8PXKQ+psPfu1vLWn7c94880u2SAa1DlFQU8m7M1QmOuu
w7avBTZsox9HN1umN/1O0k6j6unfEds18fU1ahOI02MSS2tQ5QFeEJvSSVZt1+rf
yCxlyBsCgRQY/kgUTg2uw/R5IyyCxsqqc2N89phD1MYwKZjWenVXmmOl7cTrGRdi
ppL3QGnq2snXZe2WAoThEp7F9DjZ1LVzjGypeu/QFJQNO/2gmic6ZS2orp01zWXo
KFUyrkwkhdzQuhCilHF9XbArjrrxH00c9vNplXtM/j3ClP65Ux/GHlsYNwAFnOSw
Koe9unLmOcyxrHyaPI5hUarmEUTnSg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:04:33 2025 by rpki-client