Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/48573c21-097d-3232-a55c-1e03a645ce6e.roa
File:                     48573c21-097d-3232-a55c-1e03a645ce6e.roa (raw, json)
Hash identifier:          vkvBgaI49IwiW8oGPXy+Y8k4U9tzMEtHI40f8CTixEc=
Subject key identifier:   CD:50:09:35:D2:3A:19:D2:B0:F0:1B:B9:05:33:E4:37:82:CD:E5:65
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F09965417A7031E3983A64440
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/48573c21-097d-3232-a55c-1e03a645ce6e.roa
Signing time:             Fri 26 Aug 2022 17:36:07 +0000
ROA not before:           Fri 26 Aug 2022 17:36:07 +0000
ROA not after:            Fri 30 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        54.138.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:09:96:54:17:a7:03:1e:39:83:a6:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 26 17:36:07 2022 GMT
            Not After : Sep 30 04:00:00 2022 GMT
        Subject: CN=8ebb51a0-d79a-4ac8-b1ad-60a18568f854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b7:0e:99:fc:2d:7b:c5:50:e6:e2:68:b4:66:
                    8f:83:b8:7e:ab:4c:40:6e:ae:ac:44:aa:86:37:93:
                    9b:89:97:d9:75:e5:5f:10:62:fd:85:1d:85:65:1d:
                    e7:cb:26:a5:79:ea:7c:0f:67:0d:a1:a4:1a:be:54:
                    3c:4c:32:93:ff:bc:df:66:b7:85:a7:be:4e:d5:57:
                    01:39:f6:f1:ae:7f:d0:df:62:dc:ef:0b:a9:f3:50:
                    63:05:46:83:e1:c5:3a:e1:65:82:26:5f:66:d7:48:
                    69:09:28:63:87:45:ce:74:10:8c:10:a6:0f:ec:b4:
                    db:4e:9b:3b:f6:8a:45:aa:f2:89:2d:21:82:1b:21:
                    1a:45:6c:e3:08:f5:e4:86:94:24:81:dc:b0:7e:99:
                    7e:1a:1e:74:13:82:66:f6:3d:72:2b:d6:7f:66:a2:
                    1c:12:be:ef:1f:f9:d1:ba:6c:b3:5d:3f:82:a5:78:
                    5f:24:74:1f:ae:49:87:1b:e3:0f:e3:16:3f:09:84:
                    28:24:6e:27:6f:15:09:66:34:5c:0f:01:07:02:1e:
                    f2:48:47:b0:30:0b:a7:fa:41:4b:47:d6:a2:1b:48:
                    43:f8:7f:36:1e:d6:85:a9:f4:32:2c:9d:e1:d1:e4:
                    fb:13:f8:f7:98:59:32:86:44:a7:a2:01:23:66:a2:
                    57:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:50:09:35:D2:3A:19:D2:B0:F0:1B:B9:05:33:E4:37:82:CD:E5:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/48573c21-097d-3232-a55c-1e03a645ce6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.138.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:9c:ac:20:d7:25:8d:19:6e:1d:01:91:10:a6:b9:80:05:c9:
         65:e9:a2:bd:92:30:35:ca:59:ad:56:b4:64:90:f7:04:6d:eb:
         39:8e:8e:8c:de:a6:64:ee:94:87:8d:a6:c0:fa:ef:d2:f0:77:
         23:86:66:f1:c7:45:09:7d:d1:42:10:85:08:c6:0f:4f:12:27:
         40:42:fc:1b:46:91:ef:60:31:3a:d4:42:9b:5e:1a:34:c3:ab:
         d1:fc:4a:8c:29:a3:b5:b5:6d:d1:3d:04:9b:19:cb:89:d7:8a:
         2b:17:c8:48:1d:4f:93:63:f2:48:e3:91:ea:16:a9:fb:41:ee:
         73:d6:66:01:ad:a7:e5:24:ef:c7:29:34:d3:d2:0e:48:a5:bc:
         ca:1c:95:a6:b5:2c:a4:10:0f:71:bc:38:54:02:00:04:07:c0:
         9d:3e:89:7a:82:8e:c0:bd:e4:9f:98:f8:8f:a5:fa:49:d0:c8:
         b1:fb:ea:28:46:3d:0b:14:e0:84:5f:a1:5f:fe:7c:c9:32:dd:
         6f:8b:b3:0a:24:d7:50:af:1a:da:35:b9:22:81:42:4e:88:9a:
         4f:8b:57:29:e3:c9:a6:c9:2c:fd:60:a3:ec:12:e4:da:5e:c6:
         56:f7:84:39:4e:74:61:1a:bd:18:a2:94:98:83:c9:57:81:cf:
         39:6c:f8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 11:53:26 2025 by rpki-client