Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/66c92011-5e3b-3299-bafa-e29cee7b48e0.roa
File:                     66c92011-5e3b-3299-bafa-e29cee7b48e0.roa (raw, json)
Hash identifier:          n3G/Ujpc3EhJ6XZwq3PfZqd9I2KxfoExI/8SfJgRUuk=
Subject key identifier:   C1:72:CA:EA:65:26:D9:5C:68:13:22:52:6C:42:8E:B7:59:E0:83:74
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858404119295A0EA7D7D3E5BA6440
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/66c92011-5e3b-3299-bafa-e29cee7b48e0.roa
Signing time:             Thu 15 Dec 2022 12:00:00 +0000
ROA not before:           Thu 15 Dec 2022 12:00:00 +0000
ROA not after:            Fri 20 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        54.21.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:41:19:29:5a:0e:a7:d7:d3:e5:ba:64:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 15 12:00:00 2022 GMT
            Not After : Jan 20 05:00:00 2023 GMT
        Subject: CN=6747063d-cbc0-412e-8153-73cf06b671c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ee:b3:99:e9:02:c8:94:8c:8e:40:a0:44:92:
                    d7:d6:11:74:b1:b8:65:87:74:6b:68:8a:57:51:36:
                    1b:15:bc:c9:f5:c5:4f:eb:69:aa:a9:8e:65:94:8a:
                    4b:f5:1b:35:0e:29:65:9a:91:11:01:ab:ae:c0:f2:
                    0f:f6:92:ac:6f:93:1f:46:07:95:d1:f4:21:f5:1b:
                    77:0a:a2:0a:e1:89:a0:25:d1:a4:54:81:77:a1:a4:
                    e8:f3:35:a8:f0:02:c7:b2:97:8e:51:16:39:d4:87:
                    14:fe:14:5f:3b:86:c0:83:08:75:5b:24:e4:24:a4:
                    a6:ec:ec:95:f3:8e:a3:7f:99:c6:b3:56:ef:4d:a2:
                    f5:5f:94:c4:b9:21:da:d4:2e:fd:9e:8f:40:2b:59:
                    bf:31:54:a8:29:b6:09:5a:75:f8:60:a0:ec:6e:c9:
                    da:a9:d8:ca:e3:99:a9:fc:81:15:4a:9a:2a:b9:ad:
                    ea:36:a3:19:f4:6b:b0:77:57:26:97:1f:f4:38:77:
                    05:4c:fd:f8:91:49:aa:63:1a:b2:5a:7c:06:46:58:
                    3e:b8:af:0e:c3:d2:4a:4d:8e:05:86:d6:ab:65:33:
                    14:0d:f1:96:47:0a:7b:e6:b1:0e:c0:e6:43:aa:4e:
                    df:69:90:c2:91:1f:f1:b4:2b:21:84:a4:a9:b8:b5:
                    dc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:72:CA:EA:65:26:D9:5C:68:13:22:52:6C:42:8E:B7:59:E0:83:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/66c92011-5e3b-3299-bafa-e29cee7b48e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.21.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:fb:26:f5:cc:6c:e3:93:66:6c:8b:87:78:c7:0c:02:ff:dd:
         fe:7f:b5:63:5c:36:c0:c7:8a:66:2b:dc:e7:38:48:b9:15:bb:
         af:f4:e7:30:ff:cf:0d:22:a6:89:fe:a4:f7:f4:de:f9:06:5d:
         5f:14:17:97:cc:cf:fe:45:ba:24:6b:8a:d0:e6:4c:e7:56:f8:
         86:9b:82:8c:e2:ba:a2:29:89:ba:23:bf:c2:23:4d:42:71:b4:
         5f:0f:df:50:63:50:bb:e5:d9:86:93:9e:f2:42:28:bb:6b:a5:
         a4:78:33:45:06:4a:54:d4:e0:a2:0b:a6:cc:b6:0c:82:aa:90:
         34:94:4d:05:05:c0:ce:d8:1d:9a:37:c3:8c:24:1f:c3:32:fd:
         41:b0:cb:46:e5:3d:b6:7b:27:f3:7c:0f:2e:41:a8:c6:2b:5f:
         f1:3e:a6:da:d4:2f:8a:8a:f8:63:11:e1:e0:b3:b1:18:f1:5f:
         aa:1d:e5:f3:d2:b1:6e:ce:6d:cd:ef:b0:4d:9d:bf:6e:a8:a6:
         e1:5e:be:cd:18:a5:55:bd:65:59:ef:5d:59:53:22:7f:75:35:
         50:63:c9:80:ed:31:3b:32:43:07:34:70:32:0e:13:5f:c2:2b:
         be:d5:3c:54:29:d5:de:56:74:81:8c:2d:03:00:1d:19:bc:c6:
         06:44:3c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:58 2025 by rpki-client