Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0eb9942a-4932-3d3e-80b2-d3855e2c244a.roa
File:                     0eb9942a-4932-3d3e-80b2-d3855e2c244a.roa (raw, json)
Hash identifier:          ygz9IWUPuip/uuxK0ZgUNKLG6iEgTb/IrSKdaSjuvOI=
Subject key identifier:   DA:FF:B8:E4:E8:D7:AE:6C:28:4C:CE:0C:AB:9F:A3:2C:29:A5:1F:12
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FCD9ED97FF71A8EF0F221DF80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0eb9942a-4932-3d3e-80b2-d3855e2c244a.roa
Signing time:             Fri 04 Nov 2022 12:00:00 +0000
ROA not before:           Fri 04 Nov 2022 12:00:00 +0000
ROA not after:            Sat 10 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        54.46.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:cd:9e:d9:7f:f7:1a:8e:f0:f2:21:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  4 12:00:00 2022 GMT
            Not After : Dec 10 05:00:00 2022 GMT
        Subject: CN=c06dd78b-2ba9-4313-99b3-2c6e66254a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7e:9e:02:71:6b:9b:dc:3c:4d:82:94:6e:c2:
                    fb:97:93:ba:9e:9f:b7:e3:c3:0c:b0:46:78:dd:1d:
                    1d:60:af:db:14:11:c6:93:e8:e3:38:04:9a:6f:a5:
                    63:04:fd:3a:35:99:68:26:7f:96:bf:19:58:fc:b0:
                    c2:48:00:50:f0:1d:36:81:c4:18:3a:82:30:ae:93:
                    75:6c:6e:5f:3d:ee:68:cb:ec:3f:b7:75:51:ca:c5:
                    99:e7:f8:43:35:9c:69:41:80:bf:97:9b:e2:ee:1c:
                    d1:7c:cf:18:47:f1:7b:6f:b8:b5:a1:bc:18:a4:18:
                    6c:a2:bb:60:4d:04:86:00:6f:eb:d4:2c:79:8d:31:
                    8e:4c:01:5e:d9:c4:8e:d7:f5:29:fb:6d:15:28:71:
                    24:c3:65:2a:9c:ef:48:43:05:6a:c0:39:9b:49:45:
                    f2:65:ef:9e:2a:b6:b8:e3:b9:3f:18:ea:4b:14:e5:
                    65:55:d2:b6:e5:09:35:da:e0:8b:20:d0:8b:39:31:
                    75:d4:d6:a1:2a:6f:e8:4d:99:b2:ad:a3:4f:b6:8f:
                    1e:66:01:90:e4:7a:1d:c3:fa:b2:79:81:cf:1d:9f:
                    c1:2c:ae:83:b0:9b:c7:e8:d5:17:d3:fb:dd:2a:0d:
                    14:ab:52:31:b9:a4:39:47:03:81:c0:25:51:94:13:
                    e0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FF:B8:E4:E8:D7:AE:6C:28:4C:CE:0C:AB:9F:A3:2C:29:A5:1F:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0eb9942a-4932-3d3e-80b2-d3855e2c244a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.46.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:37:12:ed:00:82:22:31:b9:43:9b:74:bd:f4:0e:40:f9:98:
         62:2c:d7:7c:f2:c9:da:5e:35:19:47:6c:bb:3f:e4:12:7a:7e:
         27:8f:27:66:fb:4a:0c:b1:d5:b1:20:24:ea:24:59:eb:02:6a:
         48:49:40:b5:5d:e0:e7:88:c0:e8:8b:8f:e2:39:bc:09:33:30:
         1d:4d:eb:72:e8:20:be:e3:7e:27:9c:50:64:7f:21:52:74:61:
         17:6a:49:94:9b:a8:2f:9a:e8:93:99:b9:a7:3b:fc:1c:6a:ea:
         da:04:69:d6:c2:f5:e8:b5:c9:39:40:b7:7d:ea:1b:9d:df:7c:
         82:72:42:b2:b7:d2:03:b6:52:15:40:2b:e9:fe:c6:db:37:b5:
         26:fd:5a:81:09:cc:2a:c8:43:08:5f:d2:ba:24:2f:88:c5:ee:
         f2:4f:f3:d5:c3:7e:16:6f:c3:ed:41:f6:ad:a2:00:3d:aa:f9:
         bd:d0:1a:71:3b:e6:b0:9c:68:c2:2e:d8:c4:b2:6c:7d:84:6a:
         44:ad:8b:19:c5:ad:ef:2d:f4:e0:c5:dc:82:1a:bb:97:0f:09:
         2e:6c:6d:c7:a3:a3:40:96:3d:a1:81:c0:e6:0d:65:ed:cd:6e:
         d0:b7:3c:15:cc:cb:de:c4:04:72:78:26:2d:9e:d5:5b:4d:8b:
         ad:68:5b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:44 2025 by rpki-client