Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7986f7d9-2466-343f-b87b-387ce9a28cad.roa
File:                     7986f7d9-2466-343f-b87b-387ce9a28cad.roa (raw, json)
Hash identifier:          uffw0FigbEm6C5uU2xOnZn4AcxFf0WlgSKsbNkZaXKw=
Subject key identifier:   B3:31:95:53:AF:06:EC:9F:66:AE:F3:94:7B:BC:2F:BD:34:33:B0:DC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858401A98856DEC6EFF36E06BE000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7986f7d9-2466-343f-b87b-387ce9a28cad.roa
Signing time:             Thu 01 Dec 2022 12:00:00 +0000
ROA not before:           Thu 01 Dec 2022 12:00:00 +0000
ROA not after:            Fri 06 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        54.47.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1a:98:85:6d:ec:6e:ff:36:e0:6b:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec  1 12:00:00 2022 GMT
            Not After : Jan  6 05:00:00 2023 GMT
        Subject: CN=f26f9318-79bf-4a18-a56a-dcc8a44ff7ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:21:76:cc:0b:69:88:a7:3c:a4:1c:55:83:78:
                    93:7b:52:7e:3a:37:43:41:9e:95:52:a4:6e:e1:4a:
                    6f:58:d3:9d:bf:91:82:6c:79:cb:5f:1e:a6:fb:37:
                    41:aa:40:e9:3d:65:ca:c3:76:4f:98:36:19:26:a2:
                    58:92:c0:7c:8c:b5:1b:80:56:20:1d:6b:53:2c:69:
                    c6:e1:70:e6:e0:25:79:09:98:5b:32:2a:db:ca:62:
                    37:65:3b:f7:51:d5:c1:77:f3:84:cc:36:25:59:5e:
                    fb:9a:95:91:e1:58:58:1e:8d:87:56:39:15:4d:bc:
                    26:3d:81:22:d0:b4:62:70:18:f2:58:83:2f:22:94:
                    e7:f2:75:ba:6d:f0:89:4b:5a:88:29:e5:49:ce:a2:
                    68:cb:36:59:e2:87:c1:2b:f2:c2:bb:76:55:e6:12:
                    61:fe:97:71:91:8e:0a:35:f0:42:10:3c:14:85:23:
                    b3:1f:cb:cf:5d:60:04:b0:1c:30:90:8b:a6:fb:5c:
                    c1:03:78:66:34:1e:36:bb:8e:93:1d:93:9c:c3:51:
                    e9:26:b6:da:82:18:b7:44:5c:45:1d:68:80:67:80:
                    e7:9f:2c:64:85:7e:3f:45:0a:bb:e3:a0:09:c7:e5:
                    8b:f4:f9:3f:c5:0a:df:00:b4:71:38:9b:cc:fd:6b:
                    b8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:31:95:53:AF:06:EC:9F:66:AE:F3:94:7B:BC:2F:BD:34:33:B0:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7986f7d9-2466-343f-b87b-387ce9a28cad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.47.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:71:c4:f1:dc:fc:4b:47:23:7f:99:39:9f:87:30:c2:e4:98:
         9e:d3:60:99:a7:5e:4f:21:f5:39:1a:cb:35:56:dc:f3:eb:6a:
         cb:1a:39:fa:8f:10:a3:a1:7e:79:2a:de:83:f5:53:dc:4f:0a:
         92:ed:75:a8:fe:c3:3f:0d:41:ef:0d:e5:84:61:fb:39:48:0f:
         e2:15:14:d9:6f:8b:38:e4:cb:82:3d:b7:f0:8b:53:ac:30:e4:
         2a:41:ae:eb:13:dd:ed:18:af:93:77:af:5e:5f:a1:3f:00:b1:
         bf:cb:6b:12:8f:1a:a8:50:68:be:08:f6:ff:76:86:24:70:c4:
         b8:5e:85:9b:53:07:24:c0:a2:64:08:cc:a2:8a:df:dd:29:2f:
         1c:0c:20:47:fa:cf:e0:d4:60:f6:34:cf:47:b6:fb:f4:0e:26:
         a8:62:ff:e9:2f:54:2f:e5:27:6f:45:71:51:0c:01:35:7b:3c:
         9b:7c:6a:de:d3:d5:92:03:30:f2:c7:a4:9f:05:34:90:7c:28:
         96:81:dc:47:da:a7:6c:c4:c3:5b:2a:6c:db:87:bd:f6:c7:67:
         19:31:11:4e:df:a7:12:40:98:7a:88:01:08:89:da:93:c3:de:
         90:6e:0f:71:30:88:50:3f:ca:49:b8:7c:29:08:84:22:34:30:
         21:1d:80:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:09:54 2025 by rpki-client