Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/61523a37-1e2e-3a99-95fb-5d3dc41aab59.roa
File:                     61523a37-1e2e-3a99-95fb-5d3dc41aab59.roa (raw, json)
Hash identifier:          nQE92+DqeE4YoEaI0ugwE8KsPi910jctgyhBa5jN1Qw=
Subject key identifier:   AD:5B:C0:07:72:51:E4:91:CF:7B:02:73:06:F9:E9:04:5F:BB:78:EF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DD0A6E4334C32E915702B86E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/61523a37-1e2e-3a99-95fb-5d3dc41aab59.roa
Signing time:             Thu 05 May 2022 12:00:00 +0000
ROA not before:           Thu 05 May 2022 12:00:00 +0000
ROA not after:            Fri 10 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        54.102.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d0:a6:e4:33:4c:32:e9:15:70:2b:86:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  5 12:00:00 2022 GMT
            Not After : Jun 10 04:00:00 2022 GMT
        Subject: CN=e13c3c4d-3102-4afd-890f-47df6a4631b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:09:9a:4e:39:f5:74:ad:5a:f7:11:c3:d3:d7:
                    4b:e4:f7:b7:60:05:2e:c4:a8:e8:12:13:f2:1b:93:
                    ef:f9:ea:1c:75:f8:67:82:58:1c:06:7a:38:d6:03:
                    fb:03:0e:cf:85:f0:ec:0c:00:fb:0f:13:1a:71:64:
                    83:54:a6:b0:7e:11:13:20:b3:a1:63:dd:04:1a:60:
                    e1:c3:48:49:c6:86:8b:13:05:5f:2b:81:d6:0c:18:
                    9e:71:e1:ef:0b:80:87:c5:9a:7e:dd:b5:0d:38:5a:
                    8a:30:17:77:b0:41:d9:8a:c2:57:28:98:76:96:8f:
                    13:ab:4f:83:9c:44:5e:64:a1:97:9a:2c:2d:64:d2:
                    69:ea:fe:b3:48:88:19:15:bf:9f:2f:51:d8:fe:06:
                    d7:0e:06:46:18:bb:1d:63:e5:eb:3a:08:a1:cb:dd:
                    9f:8b:67:ad:d9:b2:40:de:ef:10:8d:e1:94:80:bd:
                    09:5e:3b:df:cb:00:0a:5e:28:12:ba:f3:5b:ad:c6:
                    74:cb:6a:b7:39:06:29:9d:e9:66:c1:43:d1:82:b6:
                    50:73:0c:7e:b6:3b:23:60:28:dc:1e:b4:41:7c:f5:
                    3c:14:c0:a9:0d:9a:f8:12:b0:75:68:b4:a0:a3:c8:
                    6a:38:ed:61:46:ac:ba:ae:30:2d:69:be:4f:43:f0:
                    3b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:5B:C0:07:72:51:E4:91:CF:7B:02:73:06:F9:E9:04:5F:BB:78:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/61523a37-1e2e-3a99-95fb-5d3dc41aab59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.102.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:d2:76:a0:df:f5:6c:fb:e3:8c:a8:29:87:bf:aa:e4:95:49:
         1b:07:eb:ba:16:ca:58:67:96:67:b5:4b:e8:04:ab:3c:6e:fb:
         a1:11:26:df:27:b4:05:14:7a:a4:1c:20:09:00:59:08:64:29:
         87:9f:38:97:89:73:9d:06:d9:1d:0d:7f:9c:27:6a:f3:7a:a9:
         70:86:1c:8d:3f:05:65:60:5a:6d:d8:3b:f6:4d:1f:6f:e4:2d:
         84:40:71:5d:51:97:d3:56:cc:95:2d:b2:51:ac:64:9e:26:5b:
         bf:a8:fb:93:8b:4d:95:b8:4d:6c:66:c8:35:1a:09:d0:ea:ea:
         03:0e:1e:aa:dd:63:22:fe:c5:de:45:8e:97:3c:60:23:bd:6e:
         46:a7:a0:c0:c2:9d:ab:ae:68:b1:26:86:84:f1:ca:ba:81:96:
         ca:29:5b:ca:e0:8a:0d:84:57:4e:94:14:60:1d:0f:dc:2b:41:
         9c:33:52:19:87:64:a5:ea:0a:e6:1f:b4:07:80:6c:1d:ab:94:
         81:2c:ef:af:a3:84:95:ff:87:00:a6:9e:6f:a0:95:c9:2b:9b:
         9a:d4:d8:56:4f:8e:9a:dd:be:75:69:23:72:f4:66:21:33:d2:
         c9:68:af:00:a2:21:7b:c3:da:7b:c7:e0:3d:a5:e0:f4:b0:81:
         44:6a:86:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:35 2025 by rpki-client