Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/39d400ed-d6e8-34e8-923c-3eb76a495558.roa
File:                     39d400ed-d6e8-34e8-923c-3eb76a495558.roa (raw, json)
Hash identifier:          mKE4uy0ciqLna0/Azj+W4qTACjyq8JsPOPSeStwCR8M=
Subject key identifier:   FC:8D:47:15:C6:27:BE:92:5E:A9:88:71:37:EF:24:A6:AC:30:A3:C5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EBB5C88852DFC2064DA0F42C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/39d400ed-d6e8-34e8-923c-3eb76a495558.roa
Signing time:             Thu 28 Jul 2022 12:00:00 +0000
ROA not before:           Thu 28 Jul 2022 12:00:00 +0000
ROA not after:            Fri 02 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        54.35.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:bb:5c:88:85:2d:fc:20:64:da:0f:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 28 12:00:00 2022 GMT
            Not After : Sep  2 04:00:00 2022 GMT
        Subject: CN=ef6f70de-6f9c-4f54-8bf0-44b805011d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f9:20:df:ec:54:fc:7c:30:74:d4:ea:65:0f:
                    fe:be:ca:44:73:0f:f2:1c:7b:34:e8:62:ec:a2:f4:
                    d1:ec:8e:8e:e2:ba:8e:4c:89:c3:e9:a1:ad:51:0e:
                    cc:8b:e3:95:69:c2:fe:20:c4:fd:58:34:e4:50:f9:
                    2e:5d:49:a3:51:4d:b2:fa:b3:01:2a:d7:c0:63:8b:
                    65:11:4b:e6:81:59:75:7f:de:20:6e:88:7b:97:ca:
                    8e:29:77:0f:6e:05:9b:82:ae:bd:26:33:6b:84:fc:
                    c4:91:35:8c:6e:2f:ac:25:d3:36:b2:ac:85:5a:3b:
                    39:e7:4c:b4:5b:cd:5d:86:3d:32:5a:ff:9d:79:b7:
                    46:6d:b9:62:0f:9f:1f:37:b6:50:57:07:16:28:4f:
                    03:03:e3:f0:60:a8:bf:8d:44:ea:08:ab:33:1d:4b:
                    43:7b:33:ee:af:ca:83:76:f6:7d:b4:d2:c8:e7:9d:
                    b4:c5:a2:ae:53:27:58:cc:61:64:3a:a9:7c:94:f9:
                    e0:8b:4f:3a:11:4e:87:c9:6a:0f:bc:9a:dc:b0:4c:
                    10:11:07:af:3b:fa:63:86:59:10:87:04:ff:ba:2b:
                    df:00:f1:46:7c:c6:cc:66:39:b5:1b:59:d4:14:f3:
                    71:4a:a3:db:d7:a2:28:1e:dc:88:84:d6:e5:48:fc:
                    d7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8D:47:15:C6:27:BE:92:5E:A9:88:71:37:EF:24:A6:AC:30:A3:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/39d400ed-d6e8-34e8-923c-3eb76a495558.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.35.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:f6:37:60:67:ba:14:46:b7:49:af:7b:1d:ec:9d:08:69:32:
         37:8b:39:f4:f6:6a:71:21:c6:78:63:66:84:e8:36:87:d1:78:
         ee:de:87:7b:fe:5d:9e:bf:a5:a0:6b:8b:f3:80:ec:0b:11:56:
         ee:09:14:72:0e:a8:40:2e:b5:28:6b:8f:bc:a8:5f:49:4c:cc:
         19:cf:7c:5c:f3:40:11:b2:df:3c:c6:6a:52:6c:38:e9:6f:f1:
         59:e3:2a:67:70:4b:d0:cc:6f:da:ba:e6:64:6a:1d:b1:5b:89:
         d2:4d:9a:3f:57:44:9a:38:8c:39:10:84:17:34:ad:9b:48:ee:
         86:ce:92:5e:de:d4:01:ff:b3:69:b3:7d:3d:a6:c5:ba:75:8d:
         86:79:c6:70:9d:80:2e:65:95:ff:c6:99:99:f9:cc:a1:54:12:
         18:1c:ef:e8:ff:9c:f5:59:30:11:1f:e2:c1:75:ac:0e:31:27:
         39:fa:f6:f8:e8:0a:4e:da:e4:b6:d4:4c:ef:c1:e2:4d:05:c5:
         a1:d0:87:4e:63:74:a8:e2:7e:76:5c:26:64:e6:d3:a3:b9:f4:
         19:97:2e:c5:26:7d:c1:64:b9:00:00:35:6d:dd:d7:e9:16:35:
         b1:65:3f:26:9a:f7:e9:86:0a:73:b4:70:da:48:ea:4a:53:8f:
         80:3a:9a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:04:09 2025 by rpki-client