Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6992c398-95fe-317b-98fb-3e5eb693eb0c.roa
File:                     6992c398-95fe-317b-98fb-3e5eb693eb0c.roa (raw, json)
Hash identifier:          Gbqn4x1M3rtyY7a+wYfX6XzKEZw1YWqmgVDvhjmiu3U=
Subject key identifier:   94:16:73:E2:0A:62:A0:27:7C:50:C8:3E:7D:09:71:1D:C9:D6:68:63
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858401A6493830312BBDFCEB443C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6992c398-95fe-317b-98fb-3e5eb693eb0c.roa
Signing time:             Thu 01 Dec 2022 12:00:00 +0000
ROA not before:           Thu 01 Dec 2022 12:00:00 +0000
ROA not after:            Fri 06 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        54.138.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1a:64:93:83:03:12:bb:df:ce:b4:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec  1 12:00:00 2022 GMT
            Not After : Jan  6 05:00:00 2023 GMT
        Subject: CN=ed729ff9-f332-43a8-96a3-b4f3be520ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f2:d0:bf:86:2e:b8:e3:a4:04:ee:7f:e2:82:
                    80:9b:7b:06:22:06:05:f5:ec:95:ac:c2:94:d1:3c:
                    63:65:1c:e8:95:5e:41:d0:46:42:fa:a0:55:48:a7:
                    2c:82:12:1e:ed:f6:94:d0:c0:c2:45:cf:91:f5:7e:
                    4c:1d:ca:57:1e:f9:f8:d2:c3:b6:05:d0:d1:f1:dd:
                    5c:fe:b8:5d:51:1f:15:ce:4d:be:c6:14:e1:32:92:
                    91:74:ca:a7:9e:dc:b7:2f:e5:10:42:c2:ff:97:5d:
                    a0:62:85:e4:63:86:60:e7:71:41:89:a1:26:32:f4:
                    2c:a4:bc:10:2d:cc:a1:f5:d2:02:cb:fd:30:49:93:
                    e3:bd:67:fa:a6:85:01:0d:e0:b3:e0:12:2e:b1:52:
                    1c:b5:6f:0f:75:cf:29:d7:ec:0c:0f:6e:d8:ee:e9:
                    da:31:ce:5b:02:9a:15:7c:72:b3:45:57:d5:98:0d:
                    bc:64:db:44:e0:f8:25:6d:fa:0a:83:f9:a2:53:65:
                    d7:81:5d:b4:a6:6e:4e:be:92:50:24:36:f1:09:c6:
                    f3:c2:7f:ba:6e:57:20:e3:c4:4c:d6:66:f2:26:d5:
                    5a:de:18:98:92:25:5d:45:db:76:96:b9:54:5f:3b:
                    4a:68:47:75:d1:bb:42:39:93:f8:1e:6c:29:7b:bf:
                    fb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:16:73:E2:0A:62:A0:27:7C:50:C8:3E:7D:09:71:1D:C9:D6:68:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6992c398-95fe-317b-98fb-3e5eb693eb0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.138.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:5e:5d:66:0d:9c:8b:90:f1:40:a2:cc:b0:80:b5:5f:4b:47:
         00:0b:f0:49:7b:dd:2f:fc:9a:6a:c8:5d:8e:ae:05:45:33:56:
         d4:9a:4c:23:cb:9b:69:7b:f6:31:7d:7a:27:b8:ba:de:88:8a:
         b7:8b:c7:f7:f5:7a:b1:ff:b8:4a:8a:f5:ca:d0:9b:48:ef:85:
         ed:05:5a:11:74:98:a5:0c:62:e5:0c:22:46:47:b1:fd:95:0a:
         60:2f:51:1b:fe:47:22:35:ed:fe:01:b4:8d:da:93:86:99:54:
         02:68:04:23:15:f9:af:48:11:1b:12:54:c1:3a:56:2e:83:ef:
         46:eb:59:77:24:79:9d:32:01:72:e5:bb:74:db:5a:7c:99:0c:
         d4:96:a7:96:16:c6:75:17:a1:4b:b8:4a:06:12:37:19:1f:e7:
         66:97:f8:94:61:0d:6b:38:0c:c7:34:f7:9b:5b:ad:f6:3e:c6:
         97:5a:a2:78:c1:9f:ef:65:e9:8f:2c:be:93:5f:c0:07:b9:f5:
         b0:50:3b:c6:98:e5:3c:bb:c2:ba:9d:67:6e:7e:25:ba:53:db:
         99:b5:ef:50:3c:ad:bf:aa:0b:61:88:22:94:5f:a6:99:34:e7:
         27:65:de:55:bc:fa:da:55:25:d0:6f:49:0f:b3:02:d3:ab:6d:
         0c:59:6f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:39:23 2025 by rpki-client