Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2b34f99b-9742-3302-920c-9fadb49ec740.roa
File:                     2b34f99b-9742-3302-920c-9fadb49ec740.roa (raw, json)
Hash identifier:          8+oqOTMsI1NTc2LOXi/qd9PMR6G77H1scSXtKc70W78=
Subject key identifier:   D3:DB:AF:D2:3D:1D:F3:57:07:6C:06:5D:51:FA:54:42:70:F7:1A:CF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DD090664C971FD1A3E7FE7000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2b34f99b-9742-3302-920c-9fadb49ec740.roa
Signing time:             Thu 05 May 2022 12:00:00 +0000
ROA not before:           Thu 05 May 2022 12:00:00 +0000
ROA not after:            Fri 10 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        54.134.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d0:90:66:4c:97:1f:d1:a3:e7:fe:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  5 12:00:00 2022 GMT
            Not After : Jun 10 04:00:00 2022 GMT
        Subject: CN=970fd256-0409-4508-ad31-37475accd193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9a:6f:dd:84:08:7e:ad:46:85:b5:5d:e5:12:
                    bb:12:39:42:b2:14:60:a4:d5:14:31:67:31:b5:f6:
                    3a:bb:1b:44:7d:1f:73:9c:07:3d:b0:40:45:3a:3c:
                    21:2d:fc:9a:27:b9:77:6f:65:7b:2a:1f:9e:86:dc:
                    84:5d:ae:9c:15:9f:f5:82:0d:84:6a:cb:66:bc:d9:
                    2f:30:cf:06:81:8c:0b:3b:4f:e9:15:4d:06:84:66:
                    74:db:44:b0:fe:d3:0f:74:34:aa:c5:59:0a:57:61:
                    31:29:9e:80:f2:00:55:25:be:ae:44:8f:41:97:f6:
                    d3:44:f3:a7:6c:3e:c8:11:18:12:98:26:f9:5d:a0:
                    b5:f1:ab:87:a6:df:c8:df:a2:24:3f:17:76:1d:25:
                    77:17:33:7a:b5:92:ef:02:a4:e6:95:d2:ee:d0:60:
                    b4:a0:f8:74:45:fa:28:00:72:95:c8:b3:8f:09:9e:
                    cc:ed:2f:bd:f5:58:25:df:57:29:e7:cc:3a:55:54:
                    ca:25:d9:f3:47:65:8e:92:81:6e:72:f5:53:79:92:
                    3e:b0:bb:71:7b:12:0b:69:0b:99:bb:37:01:0a:49:
                    9b:5a:62:52:9e:ba:9e:a6:7a:c0:33:13:67:7d:d0:
                    1b:93:32:6f:56:c5:25:77:db:f0:20:f6:ec:88:e7:
                    18:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DB:AF:D2:3D:1D:F3:57:07:6C:06:5D:51:FA:54:42:70:F7:1A:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2b34f99b-9742-3302-920c-9fadb49ec740.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.134.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:43:90:75:90:6f:8e:85:96:13:bf:8f:3a:a9:55:73:9c:31:
         d6:8b:3d:80:eb:18:a7:8f:36:8b:83:c7:93:3f:a7:49:3a:bd:
         52:d1:32:ab:b6:b3:ee:6c:2f:9d:8f:db:2d:c3:91:8f:1c:0c:
         3c:11:96:9e:20:a8:72:10:4f:b8:98:5e:26:1a:a3:63:02:32:
         33:9b:b6:09:f1:3f:75:53:b1:1b:82:c5:f9:53:8a:4e:83:3e:
         33:b2:cc:8c:16:f3:3a:ff:08:b8:6d:1f:fa:b3:73:77:f9:2d:
         92:cb:2a:f2:8d:4b:d8:ec:2f:9d:43:68:6b:e3:24:d0:60:e2:
         2f:a5:6d:e3:45:17:11:66:73:d6:89:43:2d:56:2b:6f:79:c5:
         50:ec:83:d5:ce:c4:6b:af:22:6b:7e:e5:fe:fc:45:fd:3b:47:
         e9:36:6f:ce:cb:2d:56:b7:1c:c4:8c:f6:88:c4:05:ea:15:ea:
         b1:70:2f:c1:8e:3e:60:dd:d9:22:ea:b5:76:b7:56:b1:d7:45:
         96:a8:3d:14:50:6d:75:1d:a4:01:cf:85:fd:99:b0:1d:6f:d9:
         ae:c0:b1:a8:52:f5:9d:88:7c:43:7a:a5:23:e0:e3:2d:16:8f:
         4b:16:b3:12:b8:25:9c:e3:7b:28:6c:ea:02:47:7e:2f:5e:d9:
         82:ad:e2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:43:53 2025 by rpki-client