Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/60a9f699-232e-3b76-8403-0ab397dd751b.roa
File:                     60a9f699-232e-3b76-8403-0ab397dd751b.roa (raw, json)
Hash identifier:          +D8FJwnCtOmFrqfj34RKammPDYNcu3e4oXjVLCBxpQ8=
Subject key identifier:   BC:27:F4:7F:D4:51:F9:1C:6E:C7:E0:66:09:37:DD:00:20:89:8A:D1
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EBB8915335C3CF90F66789980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/60a9f699-232e-3b76-8403-0ab397dd751b.roa
Signing time:             Fri 29 Jul 2022 12:00:00 +0000
ROA not before:           Fri 29 Jul 2022 12:00:00 +0000
ROA not after:            Sat 03 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        54.8.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:bb:89:15:33:5c:3c:f9:0f:66:78:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 29 12:00:00 2022 GMT
            Not After : Sep  3 04:00:00 2022 GMT
        Subject: CN=c4866328-6bf4-434d-8918-07821f781a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a7:bc:60:cd:53:f1:d9:7a:23:3d:28:06:ca:
                    46:03:b5:99:59:a7:7b:f5:af:d7:c9:fa:89:47:39:
                    b7:c0:ca:8c:95:96:42:45:e5:c0:9d:9c:c7:86:c9:
                    39:ea:68:03:fd:fc:ee:dc:3b:76:10:b6:02:ae:65:
                    33:94:1d:4b:68:b2:92:b0:ad:d4:a4:ca:65:71:d4:
                    8e:71:17:14:da:63:38:e4:00:ff:0f:17:88:60:2b:
                    21:be:54:63:15:2e:b0:0b:db:7e:d6:dc:e8:b7:67:
                    8a:bf:21:67:cf:b8:fd:66:0b:b0:81:b2:fd:51:27:
                    e1:89:25:7e:fb:81:6e:68:09:0f:1c:3e:6a:fd:5d:
                    3c:c5:40:22:36:f4:0c:04:98:ba:e2:0f:8b:ae:47:
                    10:21:ea:ab:bc:c8:41:d7:a1:37:c8:85:b3:65:cb:
                    a8:96:5c:dc:64:bf:a7:3a:d9:ef:41:34:33:b2:43:
                    ed:5a:0c:5a:dd:8f:f4:38:3f:bd:e1:38:16:5f:06:
                    2d:d4:5a:fe:14:e3:f6:f4:10:00:84:75:35:05:8d:
                    7d:c9:4f:f4:d2:57:f7:e7:a6:27:d8:dc:22:46:8d:
                    14:f3:cb:16:08:a9:56:cb:3d:95:fd:f4:ec:a5:a6:
                    1c:f7:65:c7:1e:8d:19:09:49:3a:df:fc:0e:f7:b9:
                    db:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:27:F4:7F:D4:51:F9:1C:6E:C7:E0:66:09:37:DD:00:20:89:8A:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/60a9f699-232e-3b76-8403-0ab397dd751b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.8.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:b2:70:da:c0:05:47:3c:0b:39:00:16:d9:90:7b:6f:7e:79:
         6c:32:94:7f:5f:c1:df:51:06:d8:17:ae:af:bd:cd:44:66:f2:
         7b:55:6d:22:f6:e2:ab:41:7b:54:17:08:63:3a:f1:3b:66:1f:
         55:b8:e3:81:fa:13:eb:34:b8:6b:70:45:59:c6:d7:83:4c:a9:
         71:76:43:11:ad:e9:e8:4b:91:bb:0f:00:31:ee:9a:b8:13:a9:
         07:94:32:e0:87:2c:92:ef:e9:1f:14:5e:eb:65:ec:36:0e:1c:
         75:42:45:f5:46:c8:69:08:61:0c:8c:8c:23:a0:4b:07:d4:7d:
         42:29:9f:6d:cf:63:33:13:c8:bd:3d:80:9d:f1:b4:44:8d:74:
         33:c2:46:38:d1:68:db:7b:9e:3b:34:f8:6a:b7:5b:2c:85:c0:
         ba:79:35:9c:eb:71:a1:8e:0c:a7:c8:3a:62:60:33:18:08:22:
         ae:00:25:d1:aa:15:28:a9:1e:da:a7:b7:d8:75:c1:64:b1:2b:
         26:b1:4e:18:a2:ad:30:94:6f:46:c0:fd:cc:19:c6:c0:d5:fe:
         00:c6:9b:e0:0b:ab:de:66:40:db:27:38:58:c6:ac:eb:a7:e1:
         7a:0c:9f:8b:33:fe:0e:c0:70:ef:3e:93:b4:b6:ee:d2:99:5c:
         e5:41:46:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:53 2025 by rpki-client