Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/526ecf94-f530-338c-b4b5-72c45d8006ab.roa
File:                     526ecf94-f530-338c-b4b5-72c45d8006ab.roa (raw, json)
Hash identifier:          NE0xmvyyAzhyr9gIJawtY1BXoA0a0oxNGnsXbHMmcHI=
Subject key identifier:   85:92:C5:01:B8:AD:0B:0A:88:DB:5C:F3:7A:A7:C3:B7:8D:C3:A6:22
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840D4734499F6B9AC9349FE4B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/526ecf94-f530-338c-b4b5-72c45d8006ab.roa
Signing time:             Mon 06 Feb 2023 12:00:00 +0000
ROA not before:           Mon 06 Feb 2023 12:00:00 +0000
ROA not after:            Tue 14 Mar 2023 04:00:00 +0000
asID:                     8987
IP address blocks:        54.22.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:d4:73:44:99:f6:b9:ac:93:49:fe:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  6 12:00:00 2023 GMT
            Not After : Mar 14 04:00:00 2023 GMT
        Subject: CN=17644dfc-71f2-42a0-866c-f80ec7e41759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:04:1e:ad:6d:79:8b:0d:6f:91:d0:60:81:46:
                    69:86:da:f2:65:3e:59:55:28:94:69:f3:89:77:7d:
                    80:34:ae:28:7d:a6:c6:1f:bf:54:6d:03:d8:ef:b1:
                    8f:99:52:98:d2:6c:8a:fe:18:dc:81:dc:2b:a0:e6:
                    e2:c7:55:60:ea:6c:04:b1:5e:ca:42:b1:bd:03:53:
                    a2:28:97:58:d2:da:e3:3a:c5:c6:f4:f7:10:bb:bf:
                    0c:55:d2:5f:d7:05:0d:eb:11:63:e2:d0:15:f0:29:
                    e1:c4:bb:73:23:7b:80:45:34:37:4a:da:be:85:4c:
                    9f:23:f3:8a:1d:e3:e2:a1:cb:93:bc:41:9c:a2:ab:
                    3f:bc:32:65:8c:cf:30:bf:16:77:02:54:36:15:06:
                    cd:0b:2c:8c:5e:83:ad:0e:6a:9b:fe:42:65:f1:92:
                    2b:1a:7b:a4:00:f3:c6:7d:91:47:a7:af:f3:20:4e:
                    ae:0e:77:bd:f3:4f:06:69:4f:d3:8c:e4:04:a2:5f:
                    72:cd:37:25:93:8a:63:88:8e:99:24:36:ef:cd:2b:
                    20:7b:a5:66:ab:23:1b:dd:2a:02:ea:93:84:7a:36:
                    2d:3b:9c:ee:b4:71:91:61:c0:ce:b3:3b:7b:52:be:
                    2d:14:df:68:de:39:56:e4:7e:44:af:41:f6:c6:e4:
                    42:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:92:C5:01:B8:AD:0B:0A:88:DB:5C:F3:7A:A7:C3:B7:8D:C3:A6:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/526ecf94-f530-338c-b4b5-72c45d8006ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.22.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:04:7b:19:a3:b2:ca:c8:fd:9c:7e:25:21:00:e7:ca:6e:c0:
         9b:20:46:d5:02:b5:09:f0:4e:c1:12:2a:2f:eb:84:c8:de:7b:
         3b:e8:65:42:e0:86:2b:43:3a:81:d9:d9:13:62:aa:21:a9:83:
         b9:0f:38:60:01:ed:0b:87:11:47:79:ee:c6:9d:52:ed:e2:5b:
         72:b8:64:26:74:9c:01:1b:a6:99:8b:f5:e3:7a:64:b7:13:0e:
         a9:18:58:e1:c6:50:a2:3c:b2:dd:96:f3:f8:59:0c:4c:31:3a:
         14:fa:58:1f:6b:5f:fe:f7:ff:44:97:a7:1a:e8:80:d8:dc:37:
         f4:ff:6b:45:b7:aa:54:e5:48:be:4d:85:4e:db:28:af:55:38:
         cc:f2:e0:d9:51:3c:e2:95:c5:b3:2f:25:67:17:4d:63:eb:a8:
         42:64:e3:4e:7e:11:12:ac:a5:36:f3:3e:7f:2f:9d:43:cb:aa:
         2a:be:25:6b:e6:ff:fd:c7:d2:7a:75:d4:ff:61:d3:90:c7:47:
         5a:06:a0:cb:94:19:07:9f:ee:69:30:ad:bf:02:44:68:02:b6:
         b0:56:d5:93:96:50:2a:fb:3a:75:33:83:4c:96:45:19:78:e7:
         a6:29:ae:c3:b0:63:b9:7a:34:ab:a9:51:60:d8:29:00:0a:14:
         ab:a2:d1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:05:07 2025 by rpki-client