Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3e357ba5-b748-3530-97be-f422abf56fb2.roa
File:                     3e357ba5-b748-3530-97be-f422abf56fb2.roa (raw, json)
Hash identifier:          JI8VNw3h8D8oUZa4FD80uL33OXD+l6YbefNxDPkhpJo=
Subject key identifier:   A1:D8:10:E3:E8:2F:9C:02:00:5D:E7:33:3A:33:37:3D:17:8A:27:21
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DA946D1BAA311847B0FE53BE0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3e357ba5-b748-3530-97be-f422abf56fb2.roa
Signing time:             Thu 21 Apr 2022 12:00:00 +0000
ROA not before:           Thu 21 Apr 2022 12:00:00 +0000
ROA not after:            Fri 27 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        54.5.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a9:46:d1:ba:a3:11:84:7b:0f:e5:3b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 21 12:00:00 2022 GMT
            Not After : May 27 04:00:00 2022 GMT
        Subject: CN=5269fda1-cfe1-48ed-a09b-eeec9c2698f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:17:f6:6d:17:bc:2b:0c:51:c8:a3:fd:c2:1b:
                    02:69:de:0b:ad:fb:6a:63:9d:be:ea:9c:86:62:53:
                    26:e3:fb:ea:0e:64:ca:56:88:15:54:f3:ea:23:8c:
                    fe:43:93:28:7b:14:21:4b:03:e9:7c:b8:12:b8:e8:
                    31:a4:e3:fc:10:ef:be:1b:33:d3:54:5c:6a:ff:17:
                    b3:0e:36:b3:f7:90:9f:fb:5e:26:b3:6c:cd:24:3e:
                    ee:48:12:3f:76:e1:ea:d4:35:b2:30:fa:79:8c:9a:
                    d1:52:88:e9:5b:1d:0a:cf:2f:92:a2:63:14:ad:53:
                    62:8b:c0:69:34:5b:11:4a:ef:da:b1:7c:ed:0e:99:
                    01:17:28:07:52:82:8c:f7:59:29:57:55:02:f8:8d:
                    57:3e:cd:13:bb:c1:47:b3:c4:54:16:83:8e:c5:15:
                    18:45:57:e3:84:3a:d9:1b:de:8e:f3:6f:b3:8b:5e:
                    ba:54:7a:aa:c1:83:62:d0:4d:83:2d:72:b9:77:e1:
                    38:4d:ee:47:70:ce:b6:24:33:ed:ec:fe:84:73:2b:
                    cd:60:14:74:3b:c3:7b:7e:a9:94:ac:60:05:70:f4:
                    82:d2:4d:74:23:8f:5a:de:4d:4e:61:79:1f:71:91:
                    12:74:3a:53:ba:4a:eb:43:c3:8b:d0:ee:08:82:f2:
                    ab:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D8:10:E3:E8:2F:9C:02:00:5D:E7:33:3A:33:37:3D:17:8A:27:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3e357ba5-b748-3530-97be-f422abf56fb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.5.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:22:b0:f6:0e:6b:66:4c:8c:58:c3:a7:b7:38:21:7e:93:fe:
         db:9a:36:d8:3b:72:72:4b:b8:c8:6f:a5:b8:f3:4d:aa:d2:8e:
         5c:bc:aa:d7:b6:77:4c:4c:04:35:d0:4f:fc:8d:b0:11:3b:b8:
         fa:fd:83:e4:78:42:3d:7c:3f:41:42:a4:60:31:bc:59:eb:e9:
         a1:0f:76:6c:ea:32:02:e2:cf:2b:e8:4a:c9:6b:4c:68:fb:ad:
         c8:fe:26:67:a6:66:ab:5e:55:78:55:d1:51:4b:e7:42:e4:8b:
         f1:96:cc:68:57:64:6d:ae:36:f9:20:0c:f3:2c:c9:05:39:8a:
         ac:af:01:8c:39:00:f6:e7:40:ad:8c:84:79:36:27:12:ed:47:
         09:27:15:2e:1a:ae:58:f7:e1:2b:bd:7b:a9:6e:64:04:44:4c:
         74:e0:fa:bf:60:4a:76:3d:59:41:88:ee:2c:81:15:13:81:05:
         54:ba:8c:ca:be:85:c2:5a:32:92:ad:03:51:d9:3c:98:93:56:
         0a:7f:9f:72:09:8f:45:61:6e:05:d9:0e:fe:ec:70:20:0d:ed:
         86:b5:6a:69:f7:5d:57:10:13:ae:4b:d1:04:70:4c:9c:97:dd:
         03:53:b2:cd:7d:4c:01:70:ec:50:38:14:75:92:ce:78:29:30:
         ff:10:c6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:51:58 2025 by rpki-client