Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/202c0b7e-5efc-3ed7-b351-4c4b3fa42e6f.roa
File:                     202c0b7e-5efc-3ed7-b351-4c4b3fa42e6f.roa (raw, json)
Hash identifier:          kyaIapMuVDwlUyR+/+d4v359s2azmt0Gthkk1d4cqmI=
Subject key identifier:   FB:43:29:E8:6D:11:A7:7D:47:0B:29:8D:DD:A3:25:80:E4:82:BF:02
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EBB372B399CA936D2BFD73B80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/202c0b7e-5efc-3ed7-b351-4c4b3fa42e6f.roa
Signing time:             Thu 28 Jul 2022 12:00:00 +0000
ROA not before:           Thu 28 Jul 2022 12:00:00 +0000
ROA not after:            Fri 02 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        54.116.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:bb:37:2b:39:9c:a9:36:d2:bf:d7:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 28 12:00:00 2022 GMT
            Not After : Sep  2 04:00:00 2022 GMT
        Subject: CN=b64f0052-7c96-4d7a-ba3e-4e5f128b00c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:77:d3:38:2c:cb:a5:4d:f4:42:ac:89:ec:db:
                    8c:bb:d3:c6:0c:c8:fc:93:4a:8c:ad:a7:a0:95:29:
                    15:4a:7c:07:f5:33:13:4b:68:a7:f0:7d:53:ee:9b:
                    0c:f9:e9:c4:07:78:29:b0:7a:d9:42:48:c4:ef:15:
                    0a:46:49:d8:f7:f1:cd:ff:72:5e:82:c3:e7:48:f5:
                    71:5b:a8:bd:45:48:4f:97:99:7e:31:8a:61:7d:76:
                    7f:f7:7b:8c:c9:88:ee:7a:d3:2e:d9:10:a0:6d:ca:
                    ae:79:ff:5f:8a:db:08:ac:7d:f7:77:bc:e7:9b:ca:
                    5b:45:f3:74:53:d7:69:dd:e8:e4:27:c1:9a:25:ad:
                    4e:9f:0c:a4:66:10:10:92:28:ab:14:4d:39:ca:ad:
                    ce:08:d5:d4:86:ce:54:2f:2c:01:bc:b8:3a:0e:3f:
                    51:cb:6d:6b:8f:d5:52:ad:0b:c5:24:92:9a:b1:3d:
                    13:b0:d1:5a:13:54:d1:4d:0e:53:b2:e3:3b:81:48:
                    6b:33:62:1d:82:49:13:f0:1c:b8:3f:6d:76:eb:41:
                    94:0a:32:a7:81:d8:e3:2e:0e:8c:e2:41:1c:38:46:
                    6c:1d:a7:7c:55:0f:8e:27:a0:59:9b:2c:59:bb:15:
                    9f:7c:74:29:d9:c7:9a:7f:d5:f9:c9:55:a7:b3:72:
                    b0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:43:29:E8:6D:11:A7:7D:47:0B:29:8D:DD:A3:25:80:E4:82:BF:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/202c0b7e-5efc-3ed7-b351-4c4b3fa42e6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.116.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:19:21:6b:e7:45:4e:1c:a9:d4:d8:89:ee:00:4b:61:75:61:
         6d:32:be:b9:e8:d4:9a:79:04:27:56:3a:c0:3f:d7:60:76:8a:
         b5:ec:ce:47:5d:6b:eb:77:79:9a:7d:f9:45:d2:8b:85:c1:a6:
         6c:1d:e5:0b:fd:50:a4:f5:51:ae:4a:41:ee:4d:45:65:4d:21:
         0a:4b:24:b0:70:db:7e:20:28:b1:2c:04:bc:c2:cb:6e:82:14:
         98:b4:1e:1c:c2:a4:59:4e:37:02:5a:ff:28:8b:e7:90:5d:c7:
         ce:ea:35:5e:e8:7e:ab:49:3f:7c:9e:da:ea:53:f7:d1:92:bf:
         f1:2c:4d:6c:cb:07:5d:ce:dd:26:18:78:21:0b:87:a8:ab:e2:
         76:43:71:78:81:d3:55:86:a0:4b:ba:43:60:06:c5:a9:8a:2a:
         48:54:57:97:4c:83:c9:aa:e9:cf:8d:5b:2f:b1:31:6b:2b:8f:
         82:4c:ef:39:62:cf:7c:31:e7:31:19:ca:e6:c8:fd:9e:d0:dc:
         fb:22:4e:8c:f1:dd:c1:34:4b:72:73:b1:52:b6:06:74:c4:14:
         95:32:0e:83:6f:f1:11:4c:52:6a:30:6a:9d:04:9d:06:7f:92:
         34:5a:fe:49:f6:28:ce:14:dd:2f:58:4e:30:2e:a7:82:2b:6b:
         c5:37:17:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:26 2025 by rpki-client