Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/30eb1d21-04f9-337c-9670-a19329b76e06.roa
File:                     30eb1d21-04f9-337c-9670-a19329b76e06.roa (raw, json)
Hash identifier:          GFN8ltLbExNbMu9Xfsy5dfQZRNo4KPoINXf5Na13KYw=
Subject key identifier:   5C:0D:42:8D:42:49:77:BF:B4:12:DC:DF:54:7A:F0:F0:55:27:A3:4F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FF2771F06B4B49809BE4C5A40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/30eb1d21-04f9-337c-9670-a19329b76e06.roa
Signing time:             Thu 17 Nov 2022 12:00:00 +0000
ROA not before:           Thu 17 Nov 2022 12:00:00 +0000
ROA not after:            Fri 23 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        54.55.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f2:77:1f:06:b4:b4:98:09:be:4c:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 17 12:00:00 2022 GMT
            Not After : Dec 23 05:00:00 2022 GMT
        Subject: CN=3ea25b38-ab7d-4c25-a90b-8d2992d5dff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:07:2d:f2:86:60:c2:c8:c6:52:c6:37:df:66:
                    aa:04:a6:1d:00:9b:92:28:38:55:9d:68:b8:64:e7:
                    26:aa:fb:1e:6f:2d:21:99:9d:6a:3b:f4:8c:e3:8a:
                    f3:d1:47:60:2f:db:fd:8d:8a:f0:c1:ec:9e:87:ee:
                    58:8b:1f:d2:9c:53:33:5f:71:a2:6c:79:fc:62:a6:
                    47:9b:24:2a:89:cb:ff:23:c1:65:d5:3d:5a:a5:b3:
                    7c:99:36:b8:dc:83:a6:2e:c6:a8:5e:da:a9:0e:fd:
                    e5:21:b9:55:74:0d:d0:a5:ba:bd:3f:3a:be:ff:4a:
                    6d:4c:b4:dd:ae:6f:b2:56:21:8a:29:0c:c4:48:ce:
                    7d:97:1e:10:2c:6d:e5:73:c9:ec:c5:85:47:46:f4:
                    69:df:b8:30:28:77:1e:15:1f:ea:4d:a5:3b:8a:6d:
                    9a:ad:1d:7e:24:b3:94:a2:7d:78:3f:50:b4:2b:c4:
                    c2:fe:9a:c3:6c:24:5c:a0:46:be:8a:f0:5b:63:3d:
                    05:9f:c9:44:c6:ef:95:34:96:b9:c4:4c:49:bf:ad:
                    fb:3e:37:61:5d:7f:4c:ff:ce:54:85:27:7c:59:d7:
                    b2:77:74:76:a9:95:a9:06:f3:c4:ca:41:c5:44:e7:
                    68:dc:78:90:eb:5a:f1:ab:a3:a2:c4:cd:e6:09:59:
                    f3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0D:42:8D:42:49:77:BF:B4:12:DC:DF:54:7A:F0:F0:55:27:A3:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/30eb1d21-04f9-337c-9670-a19329b76e06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.55.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:93:71:6f:69:30:39:d1:4e:1d:cc:8c:fc:46:f3:e6:8b:55:
         8b:ba:e2:1c:f2:49:8c:c0:4d:d7:ea:ae:cd:b9:d9:ff:7c:a8:
         ac:57:0f:81:02:88:d4:17:54:28:e6:9d:ef:7a:74:a6:1c:04:
         ce:22:ad:89:a3:4d:ab:c3:02:be:05:b3:97:6b:22:74:2d:1a:
         14:2d:85:15:c0:29:ba:83:3e:dc:1d:20:58:92:87:1f:c8:4a:
         b3:48:af:e8:54:71:aa:5f:34:05:39:39:2a:78:e8:45:23:59:
         ed:5c:2c:07:32:5d:07:01:28:42:d6:d4:bb:0b:d7:8d:94:43:
         ca:25:cb:3a:09:f6:62:9f:0a:00:08:dd:4d:44:c3:fb:3f:bd:
         10:57:09:eb:59:02:d0:30:8d:b0:fc:5e:21:1a:ca:05:15:98:
         2d:b9:cd:04:ee:9b:ac:81:de:11:03:30:7f:4f:ad:54:2d:0f:
         26:f4:2c:f4:ed:39:b8:29:e1:6b:57:c2:47:d3:bd:d3:1d:bc:
         c0:11:43:83:c1:38:ae:27:0e:ee:64:92:c9:11:11:e0:cd:de:
         16:66:68:ab:77:37:4d:03:35:35:c4:ff:6d:8a:b0:cd:b2:9e:
         8f:60:21:e3:e1:38:f6:1f:ce:4f:eb:4d:f8:00:0c:44:c8:b9:
         63:fe:55:46
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/ydx8GtLSYCb5MWkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTExNzEyMDAwMFoXDTIyMTIyMzA1MDAwMFowLzEtMCsGA1UEAxMk
M2VhMjViMzgtYWI3ZC00YzI1LWE5MGItOGQyOTkyZDVkZmYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQct8oZgwsjGUsY332aqBKYdAJuSKDhVnWi4
ZOcmqvseby0hmZ1qO/SM44rz0UdgL9v9jYrwweyeh+5Yix/SnFMzX3GibHn8YqZH
myQqicv/I8Fl1T1apbN8mTa43IOmLsaoXtqpDv3lIblVdA3Qpbq9Pzq+/0ptTLTd
rm+yViGKKQzESM59lx4QLG3lc8nsxYVHRvRp37gwKHceFR/qTaU7im2arR1+JLOU
on14P1C0K8TC/prDbCRcoEa+ivBbYz0Fn8lExu+VNJa5xExJv637PjdhXX9M/85U
hSd8Wdeyd3R2qZWpBvPEykHFROdo3HiQ61rxq6OixM3mCVnz7QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFwNQo1CSXe/tBLc31R68PBVJ6NPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzBlYjFkMjEtMDRmOS0z
MzdjLTk2NzAtYTE5MzI5Yjc2ZTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMANjcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAJ5Nxb2kwOdFOHcyM/Ebz5otVi7riHPJJjMBN1+quzbnZ/3yorFcPgQKI
1BdUKOad73p0phwEziKtiaNNq8MCvgWzl2sidC0aFC2FFcApuoM+3B0gWJKHH8hK
s0iv6FRxql80BTk5KnjoRSNZ7VwsBzJdBwEoQtbUuwvXjZRDyiXLOgn2Yp8KAAjd
TUTD+z+9EFcJ61kC0DCNsPxeIRrKBRWYLbnNBO6brIHeEQMwf0+tVC0PJvQs9O05
uCnha1fCR9O90x28wBFDg8E4ricO7mSSyRER4M3eFmZoq3c3TQM1NcT/bYqwzbKe
j2Ah4+E49h/OT+tN+AAMRMi5Y/5VRg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:43 2025 by rpki-client