Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6af364bd-8822-38cc-849e-e7ead64f9321.roa
File:                     6af364bd-8822-38cc-849e-e7ead64f9321.roa (raw, json)
Hash identifier:          JP+ir2/1/Xa9K2hj0PfXCGb/JC1gEp4IWzBwMkBKpFU=
Subject key identifier:   9A:C9:79:84:2E:14:85:0D:61:AC:ED:92:86:0D:AA:51:68:76:9C:9C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DA9B665D5FBC64714661D2100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6af364bd-8822-38cc-849e-e7ead64f9321.roa
Signing time:             Thu 21 Apr 2022 12:00:00 +0000
ROA not before:           Thu 21 Apr 2022 12:00:00 +0000
ROA not after:            Fri 27 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        54.112.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a9:b6:65:d5:fb:c6:47:14:66:1d:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 21 12:00:00 2022 GMT
            Not After : May 27 04:00:00 2022 GMT
        Subject: CN=76fa6dde-65b6-4526-a75b-79896a929169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ac:1e:37:95:b0:0a:e1:44:a0:03:b5:69:0e:
                    0a:4c:92:83:30:0b:b2:24:52:53:75:98:18:16:18:
                    91:71:34:d3:9d:b0:5e:eb:4c:c3:ae:87:e6:60:00:
                    9e:8e:c6:8e:52:4f:59:d6:a8:a4:f3:8c:bd:90:10:
                    4a:0c:57:40:ca:05:30:92:c5:61:69:49:50:3b:06:
                    5e:2f:89:76:30:b5:9c:49:f2:31:7b:0e:d2:1c:d0:
                    83:a5:2a:2b:40:c6:7f:7a:e1:bf:7a:61:90:a5:9f:
                    47:ba:9f:96:a2:c9:9e:55:55:0d:50:d8:42:f3:e4:
                    0e:60:8a:68:66:e8:39:76:ec:21:75:58:10:0a:e9:
                    39:b9:a3:3c:d3:3d:72:4e:e7:84:65:3b:88:cc:64:
                    6a:8e:c2:f1:d9:d5:62:82:52:b0:08:9b:0a:40:62:
                    35:ab:71:61:4c:a1:a9:4a:92:81:55:f9:e8:ca:0e:
                    aa:52:ee:e3:d6:7e:29:30:f7:96:f9:d5:e5:fa:4b:
                    8b:e8:35:05:2b:db:03:e8:e2:a0:66:ef:b3:0e:0f:
                    70:3d:87:31:d9:43:70:2e:1b:9b:12:68:ec:f4:c2:
                    60:9b:73:24:0c:a6:47:fb:ec:36:56:b1:49:c5:55:
                    bd:b7:49:c6:5b:57:db:4b:d2:8e:d0:c0:f7:e5:14:
                    ee:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C9:79:84:2E:14:85:0D:61:AC:ED:92:86:0D:AA:51:68:76:9C:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6af364bd-8822-38cc-849e-e7ead64f9321.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.112.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:51:c0:4c:5c:7c:4a:10:bd:89:df:d5:05:a4:d8:88:b0:be:
         93:4e:1b:ba:b7:fa:ad:d7:bf:43:40:01:1a:09:e6:ce:67:13:
         e7:b9:83:8c:35:18:7c:37:c8:18:37:f3:e8:b7:f4:f3:61:02:
         7e:28:3e:36:e9:89:b2:e1:c8:3d:33:fc:d2:ee:4b:73:0a:9e:
         8f:da:05:ea:0b:1e:03:53:76:58:33:83:94:35:c7:17:4c:aa:
         db:37:a6:bb:91:2c:bc:8e:69:16:b1:6b:29:2a:2b:53:c1:27:
         51:71:96:20:48:5f:80:b1:a1:cd:6b:ca:38:e5:e8:52:3e:cb:
         f0:58:11:81:b5:53:f2:fe:18:15:71:70:13:60:c2:69:cb:a0:
         12:e1:96:46:a0:4a:76:d6:8a:b4:01:e9:77:35:0e:ad:4c:c1:
         16:ed:b0:de:9a:fa:41:b3:43:3a:fd:a3:a3:36:ba:53:1e:a8:
         20:9b:47:02:09:ef:93:d5:fe:01:52:ce:17:74:d8:a0:dc:0d:
         9e:97:97:ee:57:d8:bb:d2:2f:c8:d8:33:74:96:92:83:34:57:
         7d:4e:df:93:c5:cf:30:72:c9:37:34:fc:c8:ac:74:84:d0:0d:
         67:58:15:7e:08:40:67:0c:e5:a4:57:7a:8c:bc:25:6b:f1:87:
         0e:53:1c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:11:02 2025 by rpki-client