Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/24ed433c-e608-3e23-86f9-f37387abf619.roa
File:                     24ed433c-e608-3e23-86f9-f37387abf619.roa (raw, json)
Hash identifier:          GB8dwpKmT2RFfxw0Qzv13zPTiWXQ1RavJHwZDisgS8k=
Subject key identifier:   26:A6:14:96:60:77:97:2D:9E:73:67:C2:E6:AA:9D:51:5D:21:6B:4A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584068E16E397E23DDA808BCFEFE
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/24ed433c-e608-3e23-86f9-f37387abf619.roa
Signing time:             Thu 29 Dec 2022 12:00:00 +0000
ROA not before:           Thu 29 Dec 2022 12:00:00 +0000
ROA not after:            Fri 03 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        54.116.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:68:e1:6e:39:7e:23:dd:a8:08:bc:fe:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 29 12:00:00 2022 GMT
            Not After : Feb  3 05:00:00 2023 GMT
        Subject: CN=9fa19c7f-d1de-4cc6-96f0-429e1390784f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:44:47:cd:07:df:23:cb:0c:eb:9c:5d:25:ba:
                    5a:da:cc:ae:3a:db:ae:63:3f:14:8e:d3:55:1e:68:
                    f2:40:d3:f5:bc:37:9e:3a:e6:5e:d4:7e:3a:18:7c:
                    b0:bf:fe:bc:7e:9e:fd:97:33:13:aa:e2:48:c0:ff:
                    71:3a:a2:ce:21:b6:ba:23:59:ed:e0:1d:39:7a:c3:
                    72:80:17:ff:92:54:bc:3d:1a:28:42:61:cb:7a:16:
                    42:39:c4:b2:a4:d6:84:23:0a:d4:16:b5:4f:e2:e6:
                    90:8b:7f:60:ca:b4:43:9a:f4:21:6a:37:6a:e3:26:
                    cf:18:06:16:e8:35:56:50:d2:d7:2f:15:e7:6e:59:
                    e6:92:68:98:f7:39:8d:d2:6f:f3:f1:f5:65:23:8b:
                    1a:72:b6:a0:30:74:47:f4:ef:0c:be:45:ec:6e:0e:
                    6b:38:f1:72:f3:b1:88:da:92:47:b3:be:4f:80:75:
                    00:22:bf:12:f0:62:0d:a4:5f:96:c9:cc:dc:65:5f:
                    66:cd:94:14:98:c6:a7:ea:ee:e7:74:a8:83:6e:90:
                    e3:5e:c9:18:2f:3c:cd:38:6a:c9:cd:61:45:a1:d6:
                    83:6f:21:72:62:0c:51:ae:24:e4:e2:dc:07:f7:5c:
                    7a:28:65:19:06:0a:48:4f:f8:4d:6b:e8:ee:e5:e0:
                    e2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A6:14:96:60:77:97:2D:9E:73:67:C2:E6:AA:9D:51:5D:21:6B:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/24ed433c-e608-3e23-86f9-f37387abf619.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.116.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:a4:45:8b:c4:95:4d:16:1b:1e:2b:32:c4:87:ce:3c:47:37:
         c1:18:bb:09:9e:e0:70:0f:fd:1f:76:7b:1e:f8:a6:30:22:58:
         e8:87:76:04:6d:38:a5:96:f8:f0:df:99:59:8e:25:d3:4d:96:
         38:fc:5d:18:22:57:f4:3f:2b:1b:5b:74:c8:ae:d6:0c:d8:e8:
         3a:f1:ce:00:2f:b6:10:38:8b:e6:ae:23:ca:dd:79:c2:88:ab:
         4b:f1:b7:9b:de:4d:62:d0:df:14:fa:96:ba:7a:e3:75:2e:56:
         c6:49:e3:a7:b6:47:5e:93:d5:8f:b9:90:8c:83:ad:45:0d:00:
         67:1f:96:1a:33:fd:ec:5c:06:a4:16:1f:0f:a8:6d:cd:b5:88:
         2e:57:36:c1:22:f7:46:94:92:40:60:11:cd:67:85:aa:8c:a3:
         7b:c8:c8:ae:77:c9:c4:fa:0a:f5:1d:21:75:32:6e:23:32:bc:
         48:c9:fb:10:a7:51:f2:27:98:1b:b3:dd:e5:38:2d:35:8d:06:
         6f:2c:83:55:d2:27:e3:63:61:1b:21:f0:86:10:07:fc:58:4c:
         2a:e6:57:19:6e:8a:26:57:9b:4f:b6:64:20:15:e3:8e:2e:d6:
         70:d9:84:bf:b6:1b:4f:7a:af:94:27:d3:ad:3e:a2:37:49:12:
         fa:3f:76:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:34:50 2025 by rpki-client