Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3a49dca1-b67f-3174-bbab-85b70f5cc3e1.roa
File:                     3a49dca1-b67f-3174-bbab-85b70f5cc3e1.roa (raw, json)
Hash identifier:          BAVnls8GpAar6zw56cnxJIpltqHcOuXlAdo6A7UI9X4=
Subject key identifier:   B9:B6:01:9D:EC:04:76:EC:29:D5:68:C8:F9:A3:18:2B:51:28:93:75
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F7E60006D00827F323AF8A280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3a49dca1-b67f-3174-bbab-85b70f5cc3e1.roa
Signing time:             Fri 07 Oct 2022 14:24:07 +0000
ROA not before:           Fri 07 Oct 2022 14:24:07 +0000
ROA not after:            Fri 11 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        54.116.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:7e:60:00:6d:00:82:7f:32:3a:f8:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct  7 14:24:07 2022 GMT
            Not After : Nov 11 05:00:00 2022 GMT
        Subject: CN=5f36f6bc-185c-4214-b5a4-c52e7643131c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7e:c6:32:12:1e:3c:bb:cc:20:c6:95:c4:51:
                    70:a1:d9:49:c2:45:a0:34:0a:63:ec:59:85:c6:1d:
                    36:48:6b:fa:ec:b2:01:03:ee:1b:18:b1:c2:8e:48:
                    db:9c:2f:3f:fe:3f:a6:5d:51:f2:16:f0:d4:09:5b:
                    48:e1:4b:f7:d6:85:5a:fd:23:ce:2a:56:7e:bb:63:
                    8b:88:f1:11:b0:32:f0:27:64:ef:c1:e1:5d:27:0f:
                    a7:0b:ed:1f:29:7c:ba:3d:3b:4b:83:bc:c3:4e:03:
                    1a:88:e4:bb:ed:fc:c1:b6:58:ff:ca:f7:3f:0c:ad:
                    2d:d6:ab:40:92:bc:8b:17:bf:85:ac:94:98:50:d3:
                    04:1a:9f:ef:b6:82:a9:07:78:26:ab:d9:7b:65:6c:
                    e4:e4:ec:7b:a9:6a:dc:54:7d:7f:60:23:39:a0:da:
                    90:25:ee:b6:f4:e2:90:cb:5f:ed:a3:ca:8f:b1:3b:
                    d5:6a:00:66:b3:b9:84:06:bf:57:e8:18:c2:dc:df:
                    e2:f6:ff:94:43:a6:14:9a:d2:70:ff:f8:07:e1:7c:
                    c2:3e:33:a3:85:ba:12:88:04:59:6d:c4:60:36:fe:
                    b4:fc:32:1b:23:ec:9d:d2:44:cd:bb:be:55:86:e2:
                    6f:86:c8:6d:ab:2b:3b:d2:24:67:0a:0e:8f:42:33:
                    84:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B6:01:9D:EC:04:76:EC:29:D5:68:C8:F9:A3:18:2B:51:28:93:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3a49dca1-b67f-3174-bbab-85b70f5cc3e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.116.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:1f:4f:17:19:3c:ff:f4:59:be:16:e4:9c:2f:82:12:97:32:
         41:32:91:4a:82:3b:55:ad:d6:b4:0c:0c:7c:89:51:3e:31:3c:
         80:79:2f:cc:20:f0:d0:65:6c:85:f3:cf:c1:ec:84:34:2e:9e:
         4f:04:c9:10:38:57:f9:f0:8d:c1:a6:b8:0d:29:31:a4:09:09:
         90:d5:e4:78:d3:1a:50:8d:ff:d0:23:03:26:5c:10:4d:e8:b1:
         ce:5a:fa:44:de:c1:92:fa:fe:50:74:46:e7:d8:3f:53:ae:6f:
         21:67:d9:69:1b:21:26:85:7e:cd:15:16:c2:59:92:10:84:85:
         5c:11:45:8a:61:1c:b5:fa:66:cb:d2:6d:53:7c:3a:0f:41:38:
         f8:e3:fa:f6:c0:38:b2:e3:7f:f7:82:e9:b3:50:48:79:18:c0:
         53:29:a9:32:19:9f:20:b0:b1:41:5a:a9:e3:97:66:54:3e:15:
         ce:5d:b9:32:29:83:e5:02:64:0e:5d:a0:ea:82:fb:2f:9c:8f:
         bd:b5:ad:01:26:69:04:fe:8c:2b:01:92:c3:23:24:e6:b4:13:
         37:f2:c9:5a:24:1a:ac:e4:88:d4:11:5b:82:3a:83:d7:07:d8:
         ee:d3:dc:3c:16:70:e3:12:16:15:36:df:4c:ae:8e:09:3c:c0:
         63:f7:87:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:23 2025 by rpki-client