Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/27744df0-30d2-37bc-a74d-8a28c4da9027.roa
File:                     27744df0-30d2-37bc-a74d-8a28c4da9027.roa (raw, json)
Hash identifier:          UVZdDPIBnxceIyyEanHFg+xfimHtj2BfhAQt+DJw4l0=
Subject key identifier:   18:42:F8:47:0A:B2:0F:BC:E4:85:16:B5:0D:AB:34:14:E1:A0:17:DE
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E45D89B84CBA008EDC79D6B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/27744df0-30d2-37bc-a74d-8a28c4da9027.roa
Signing time:             Thu 16 Jun 2022 12:00:00 +0000
ROA not before:           Thu 16 Jun 2022 12:00:00 +0000
ROA not after:            Fri 22 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        54.6.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:45:d8:9b:84:cb:a0:08:ed:c7:9d:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 16 12:00:00 2022 GMT
            Not After : Jul 22 04:00:00 2022 GMT
        Subject: CN=0b288afd-37fd-452c-bf3e-e58fce09bbb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d8:7e:d7:55:84:d5:6c:c3:db:82:22:21:94:
                    3e:3a:47:95:18:62:79:13:d2:93:08:df:7c:cc:03:
                    88:ee:d3:95:0d:6d:50:52:01:20:2f:59:a9:e3:17:
                    96:47:54:72:c1:a5:4e:56:e4:9c:ea:20:fd:e2:be:
                    9c:7f:d9:6c:1b:6c:47:1d:2f:a6:be:77:07:0c:3a:
                    64:1d:82:93:73:61:fd:e0:86:f6:a3:6e:04:d4:d8:
                    32:d7:e1:64:6d:6e:b8:77:64:98:e8:b2:67:a1:64:
                    7d:d4:dc:66:19:6a:fd:6e:2e:f3:fc:a7:24:cc:6f:
                    59:bd:67:38:25:2e:70:3e:77:e6:8f:06:b4:94:eb:
                    04:e8:49:02:a8:eb:62:43:e2:71:7d:6b:3e:eb:87:
                    08:0b:8e:3b:85:ef:3f:7d:a6:1b:b7:46:7a:1f:fd:
                    19:98:e0:f8:2e:95:67:01:68:2a:94:56:e5:45:8f:
                    58:d5:d3:3e:f2:51:6f:e9:36:ff:b0:77:27:a1:f1:
                    0b:f1:a1:27:ea:36:a4:f4:d2:94:01:19:a7:08:ba:
                    7f:05:49:f4:9a:8c:d7:dd:68:2a:18:29:d9:92:ba:
                    5f:0b:12:37:3f:cf:4b:04:b0:45:c8:ad:1f:ae:81:
                    96:e3:e2:ca:d8:a1:15:fd:34:ec:dd:7b:34:f6:c2:
                    c6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:42:F8:47:0A:B2:0F:BC:E4:85:16:B5:0D:AB:34:14:E1:A0:17:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/27744df0-30d2-37bc-a74d-8a28c4da9027.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.6.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:d5:7e:e9:f5:83:4c:74:1f:76:10:c3:2a:00:7e:e8:34:88:
         e6:73:d8:91:62:8f:87:93:3c:9e:c8:8b:cd:ed:36:5f:0a:cc:
         f1:fd:da:dd:a5:81:06:dd:23:c8:e0:61:4e:39:3e:84:28:94:
         4e:c7:23:76:b3:57:0f:7a:eb:d9:5c:ab:3b:71:02:21:33:a8:
         68:f1:ea:da:63:07:a5:59:0a:d8:bc:76:d9:13:7f:fe:4a:e6:
         e0:f1:b2:54:f6:5b:22:68:d3:57:a8:50:26:37:8d:72:7e:f5:
         6e:3a:c4:f5:83:a3:9b:ce:6e:41:9a:09:f8:d1:64:d9:76:4a:
         03:96:14:7d:55:34:14:7b:fc:26:9e:e2:fb:30:51:b6:29:b0:
         ad:26:cc:c5:9b:f5:0a:f8:dc:d2:61:7a:e9:d3:9e:f2:aa:31:
         3e:1f:50:b8:da:98:80:ce:37:28:20:9e:7a:05:20:ca:db:94:
         ad:4d:ec:d1:c2:ab:78:f7:7f:e0:df:01:6a:25:78:57:61:9d:
         df:8c:f4:29:59:bb:7a:c1:96:d8:3f:a3:d0:4e:35:cb:16:60:
         ab:0d:66:85:06:30:30:04:f9:44:2e:ff:58:25:3a:65:ab:c5:
         6d:dc:b6:9b:54:6a:72:55:d3:69:e2:8e:65:3e:a8:ae:3a:2e:
         47:01:23:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:44 2025 by rpki-client