Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4ca96ec5-842d-300a-ab65-22e441610120.roa
File:                     4ca96ec5-842d-300a-ab65-22e441610120.roa (raw, json)
Hash identifier:          iRdS2XyGGUFO7qdT2yvY6dMuG+4hQDXYC/0Lzldoxis=
Subject key identifier:   D0:5F:8C:DF:38:35:A0:93:A8:32:1D:1D:90:BB:B1:BE:A1:D7:61:22
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FF2772DACF1BF51B5D58A1E40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4ca96ec5-842d-300a-ab65-22e441610120.roa
Signing time:             Thu 17 Nov 2022 12:00:00 +0000
ROA not before:           Thu 17 Nov 2022 12:00:00 +0000
ROA not after:            Fri 23 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        54.55.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f2:77:2d:ac:f1:bf:51:b5:d5:8a:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 17 12:00:00 2022 GMT
            Not After : Dec 23 05:00:00 2022 GMT
        Subject: CN=657b3260-8158-4f69-bcca-c6e94076762a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e7:e8:9d:ee:a1:18:26:3e:68:09:f3:73:4a:
                    33:9a:9f:dd:8a:3f:68:5b:70:0d:b0:70:67:22:9c:
                    0a:3f:ec:79:9d:dc:8b:58:17:f4:95:5b:0b:e3:5d:
                    ee:39:35:3f:70:f1:0f:6b:db:50:b1:5f:8f:3d:0d:
                    e6:78:34:1e:a4:09:fe:c5:77:b0:51:84:d2:ed:f0:
                    b0:72:b5:31:a7:1e:de:92:e8:3e:7b:d8:2b:be:d7:
                    2b:a7:77:0b:b2:55:f3:75:ab:e4:61:e4:60:01:24:
                    e2:60:2b:0b:f3:25:fc:6c:5b:cd:6a:bd:e5:80:99:
                    62:e2:0c:0b:dd:24:35:06:be:38:4f:81:11:64:4c:
                    f5:58:96:c2:8b:14:7b:f5:2c:da:ba:fb:63:b4:f9:
                    21:82:ae:dd:c0:39:6c:b8:e1:cc:0d:b5:a4:e3:a3:
                    7c:5e:8c:4f:60:c5:18:c2:c5:ee:b0:87:fe:a8:ef:
                    47:60:ac:b3:27:df:16:09:1b:0b:13:70:d8:ba:c9:
                    c5:95:48:95:57:63:3a:ec:bf:a5:62:82:ae:b6:f7:
                    84:bc:c9:83:ce:2c:f2:fc:ec:72:9a:f3:f4:e5:f9:
                    a1:f5:ea:57:3a:cd:9b:3d:f0:ea:03:20:08:b9:bd:
                    bc:47:15:5d:d7:84:bb:fd:bc:f9:d3:60:f9:a3:45:
                    84:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5F:8C:DF:38:35:A0:93:A8:32:1D:1D:90:BB:B1:BE:A1:D7:61:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4ca96ec5-842d-300a-ab65-22e441610120.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.55.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:67:6e:d5:c9:41:40:21:55:9f:3f:3f:d3:40:5e:b1:14:d8:
         e2:7d:db:9a:66:93:19:51:c0:65:4f:4d:16:83:96:b7:fb:0f:
         64:a2:1e:b3:41:89:04:95:f8:44:00:14:3a:03:cf:61:b3:bf:
         55:49:17:bd:54:7b:7c:04:8d:37:54:ef:40:cf:38:60:4e:19:
         09:ca:68:5b:6e:84:fe:d1:41:6e:de:b7:85:36:ff:cb:68:3e:
         fd:ef:c3:c7:50:d9:79:d3:f7:84:60:f1:29:71:39:74:29:5e:
         de:34:a7:04:c3:d0:73:5e:a0:1d:e6:b4:b2:5e:7a:ee:3d:e6:
         00:d4:fb:e1:43:55:8c:58:27:e3:39:87:70:57:34:79:94:d3:
         4f:80:0c:63:58:e5:e5:25:7c:66:b6:1d:da:28:fd:77:66:32:
         1e:c7:ca:de:6b:b8:4f:ce:ec:b2:67:45:db:d0:a7:e1:66:a3:
         2e:1e:3c:42:c3:0c:d9:38:38:e9:fc:1a:50:73:32:be:80:f4:
         bb:be:f0:d9:8c:39:69:63:ff:16:e3:9f:b1:18:79:01:68:b9:
         84:65:c6:87:c0:22:6a:c7:b6:80:b7:a7:6d:89:7e:0f:1f:20:
         81:fe:bc:7e:7e:c1:36:d7:17:62:d9:5b:9b:1c:d1:88:20:da:
         c9:05:ed:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:26:01 2025 by rpki-client