Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d0bddc0-d37a-3c89-9592-7f28ca9fa630.roa
File:                     3d0bddc0-d37a-3c89-9592-7f28ca9fa630.roa (raw, json)
Hash identifier:          FAjetQwSC3DeJHbhHCi7/uc+AZhZJUKBgdBnmMNjJxM=
Subject key identifier:   B9:88:EE:EF:4A:FC:51:84:83:F5:C7:4B:7E:65:28:1B:A9:ED:8C:E4
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DA9BDFBC2AB19AEC26DC15720
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d0bddc0-d37a-3c89-9592-7f28ca9fa630.roa
Signing time:             Thu 21 Apr 2022 12:00:00 +0000
ROA not before:           Thu 21 Apr 2022 12:00:00 +0000
ROA not after:            Fri 27 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        54.46.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a9:bd:fb:c2:ab:19:ae:c2:6d:c1:57:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 21 12:00:00 2022 GMT
            Not After : May 27 04:00:00 2022 GMT
        Subject: CN=4245f484-cd93-4342-aef1-e19da7745dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f5:99:00:94:81:3e:eb:3f:4e:98:9f:90:da:
                    52:e0:b1:3d:22:0e:ad:ec:dc:d6:e6:94:e7:05:4d:
                    e8:8b:4a:f6:e0:9a:27:c5:b2:85:ab:f0:1b:d1:85:
                    55:ab:07:3f:d2:3c:04:ab:d5:21:13:ef:d6:0d:19:
                    0a:dd:fc:83:c2:bd:92:73:2f:51:a5:f6:90:69:dc:
                    29:b5:a6:9b:4f:43:af:8a:d0:05:40:bd:fd:d0:55:
                    03:58:02:c7:b3:f8:b5:c6:56:20:89:e1:55:51:48:
                    50:da:0f:45:4e:b4:64:47:57:43:e4:42:e3:d0:7f:
                    24:dd:63:d6:ab:25:cf:4e:55:8d:ab:94:57:aa:9a:
                    77:74:76:f1:d2:e9:c6:64:ef:46:3f:10:67:8b:a9:
                    0e:71:76:a5:14:61:c2:ae:a7:37:57:6d:1e:be:10:
                    b5:a2:55:0e:1e:00:07:29:58:78:83:3c:e8:72:d0:
                    d7:99:fb:a8:10:e2:30:3a:bc:56:b0:a0:3a:29:ed:
                    c4:c2:ad:fa:c4:83:44:b3:ad:36:51:4d:bf:0a:ee:
                    ac:72:1a:9b:0d:b1:fe:f2:61:24:0f:75:85:be:bb:
                    db:f4:4d:65:cd:b2:15:8f:47:46:0a:55:82:2c:36:
                    d2:da:90:46:de:89:72:d6:b1:0a:45:ca:a7:06:22:
                    7a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:88:EE:EF:4A:FC:51:84:83:F5:C7:4B:7E:65:28:1B:A9:ED:8C:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d0bddc0-d37a-3c89-9592-7f28ca9fa630.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.46.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:8c:2f:47:ba:45:47:c5:3d:0d:ca:ea:fa:52:49:12:55:76:
         da:52:20:52:e0:88:bc:3f:f3:a6:cc:ab:49:bc:8e:6f:1f:41:
         f0:05:61:ea:20:be:eb:a4:e2:31:15:81:e4:c3:72:61:7e:ed:
         57:33:19:1e:d3:c7:09:01:6c:a0:cf:ce:ff:c2:7b:ea:55:da:
         38:68:47:9c:89:22:f6:38:95:e2:5d:09:4c:67:35:a5:9a:34:
         ca:77:5a:a2:f5:94:34:c8:20:9f:14:23:10:ad:72:1a:86:c5:
         fd:6a:92:7f:e6:2d:1e:83:8f:d2:4d:0e:ec:70:1d:24:6a:0a:
         7a:d4:ba:49:46:3b:28:63:0e:cf:cf:e0:f2:29:eb:00:3d:94:
         3d:6e:8a:22:06:48:8a:21:97:c1:9d:d4:a4:99:2e:0c:74:20:
         87:d6:a3:90:f7:d5:35:7a:e3:c6:55:f7:10:01:28:2b:49:b4:
         fa:67:b6:15:8c:59:af:79:80:da:fd:fc:d4:44:99:8e:df:7a:
         e8:d7:7a:9e:9f:6c:a7:0f:da:cc:d5:5f:ed:50:52:a5:e2:6b:
         29:73:3f:e0:f3:42:87:5d:18:00:ba:da:e2:bd:0b:2c:29:93:
         e5:b1:7e:4f:71:6d:a2:b0:21:ca:e8:ea:7d:7b:32:2c:df:62:
         aa:b6:23:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:24 2025 by rpki-client