Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4261ac98-0c77-3447-8c1b-408089835142.roa
File:                     4261ac98-0c77-3447-8c1b-408089835142.roa (raw, json)
Hash identifier:          n2Rr92d0IOqHPOJ8oDYFaoCwmeB2j3mDsI10q4wrQzw=
Subject key identifier:   C1:6F:B6:28:15:5A:0F:3F:A8:01:69:20:1D:78:FF:8D:45:5C:45:E2
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E46057A6BA21BBFE97DE92F40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4261ac98-0c77-3447-8c1b-408089835142.roa
Signing time:             Thu 16 Jun 2022 12:00:00 +0000
ROA not before:           Thu 16 Jun 2022 12:00:00 +0000
ROA not after:            Fri 22 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        54.35.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:46:05:7a:6b:a2:1b:bf:e9:7d:e9:2f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 16 12:00:00 2022 GMT
            Not After : Jul 22 04:00:00 2022 GMT
        Subject: CN=46908865-d256-403b-9aff-c8dcde4fd404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:66:4f:96:46:96:9d:de:95:4f:ea:cc:de:c9:
                    8e:57:98:e8:5d:80:86:b1:73:08:4b:b3:77:ad:83:
                    01:50:b7:59:23:bd:a3:f9:be:05:36:a6:d0:6f:0a:
                    00:ed:16:94:61:0b:24:34:c5:f6:81:86:19:d2:cf:
                    90:8a:6f:c7:27:25:0b:09:f3:ef:de:76:8e:85:e4:
                    bc:59:c1:c0:0f:d5:35:e2:7f:cc:3c:b7:64:4c:9d:
                    09:90:ce:c6:c1:f5:cf:f6:3b:f0:48:fb:34:df:03:
                    27:5a:75:91:20:d2:34:14:56:86:06:4c:a5:43:81:
                    f7:ae:ee:e7:72:1f:20:9b:53:1a:6f:1a:67:19:85:
                    6e:26:7b:86:74:15:0c:08:90:c2:80:50:ea:0a:e5:
                    40:35:e5:91:43:0a:65:66:65:2d:48:5b:b1:a7:51:
                    c2:79:0c:35:e9:eb:99:06:fd:8e:c9:b6:a0:1c:5c:
                    7a:7e:d4:c6:bd:fb:ad:d3:f7:ca:59:38:0d:a9:8b:
                    4f:34:1b:e8:cc:10:86:d3:6b:1a:c5:e5:cb:ce:f8:
                    9f:88:b0:0f:ad:9d:cc:e6:51:52:16:76:b0:36:5e:
                    f1:d5:f9:5c:8b:83:8e:97:0b:26:a8:50:78:c9:c8:
                    25:9f:ab:35:87:31:ba:4b:bd:88:81:6e:e2:27:27:
                    e7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6F:B6:28:15:5A:0F:3F:A8:01:69:20:1D:78:FF:8D:45:5C:45:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4261ac98-0c77-3447-8c1b-408089835142.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.35.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:7e:13:84:21:2b:92:9c:47:4d:f7:7f:c5:4e:36:e3:34:88:
         6d:a3:73:32:7d:05:7a:10:d1:1f:c3:85:ab:ee:1e:c7:e2:bd:
         1d:09:99:45:b6:c2:ea:e4:a4:1a:4f:1a:25:ec:01:ec:7a:d2:
         86:82:83:dc:b4:26:77:fe:f2:b2:38:07:40:a9:e0:cd:a2:bb:
         a2:7a:ed:a8:bd:c4:4f:d6:bd:70:a1:c9:fe:4d:b3:38:51:6f:
         a3:96:e7:a4:d3:24:70:db:63:ea:b1:9e:10:7d:38:41:24:da:
         3d:21:7b:19:3e:db:74:3f:5b:9a:d0:5f:ed:e7:74:46:cb:1d:
         2a:7e:ca:84:6e:6b:b0:18:a8:7f:76:e1:76:4a:89:31:00:57:
         83:09:d5:03:6a:b8:ea:31:96:9b:a4:a9:2d:12:9c:ad:8a:b2:
         80:5a:bb:87:30:3e:c4:0c:85:34:1e:74:3d:fe:28:ec:8f:f1:
         e6:8d:26:09:f7:af:48:ae:de:d4:15:9b:07:d3:9e:e2:0b:e5:
         f3:ec:09:7b:11:8e:f2:79:6a:67:20:0a:1c:e3:08:9e:cc:be:
         f9:70:98:7d:a1:a3:74:51:2f:0e:79:3f:d1:72:06:0a:a2:21:
         84:b0:fd:ce:c1:cf:94:e4:e3:cc:49:36:5c:86:90:f9:cd:51:
         6a:98:85:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:33:07 2025 by rpki-client