Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/81df72d0-04af-344e-b0bf-faec1192d7e0.roa
File:                     81df72d0-04af-344e-b0bf-faec1192d7e0.roa (raw, json)
Hash identifier:          ALyephac1dM9Fq+K+LS6CGO9qdZHppG1Tbbnv9aRE+s=
Subject key identifier:   3F:22:1C:AD:A1:67:EC:F0:CA:BD:75:D5:B0:76:5F:38:FF:CD:A0:B9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E9428F31402BE127E6AE5CE00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/81df72d0-04af-344e-b0bf-faec1192d7e0.roa
Signing time:             Thu 14 Jul 2022 21:12:08 +0000
ROA not before:           Thu 14 Jul 2022 21:12:08 +0000
ROA not after:            Fri 19 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        54.47.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:94:28:f3:14:02:be:12:7e:6a:e5:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 14 21:12:08 2022 GMT
            Not After : Aug 19 04:00:00 2022 GMT
        Subject: CN=6689cc92-ed0b-4bd4-af4c-e5c1b790d0ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ee:86:c9:02:7e:14:56:b6:60:b0:64:e0:df:
                    4f:0b:5a:37:45:7e:70:4c:8b:57:73:e3:df:46:29:
                    8b:26:35:68:fa:25:3b:99:6c:8e:e8:15:9a:f1:be:
                    a5:41:7c:02:41:e6:20:26:a0:2d:db:c7:5a:93:eb:
                    8d:0c:09:eb:25:2e:37:b8:23:9c:5b:7e:82:63:97:
                    cc:2f:97:d0:a6:7d:ae:96:c6:47:52:32:64:66:2c:
                    c4:24:82:37:a9:f5:4b:d3:73:93:cf:55:0e:88:ed:
                    e6:da:37:43:07:1a:03:c3:93:d5:86:3e:59:81:9f:
                    98:62:91:02:67:07:2e:86:ba:08:8f:2c:49:2f:6e:
                    73:54:22:da:ce:38:0c:ab:dd:bc:10:9b:d6:a3:c6:
                    95:b9:fb:12:b1:42:a5:81:04:70:3b:00:0f:99:2d:
                    d3:ae:c4:00:4e:6a:de:d6:ec:6a:69:86:fc:85:ec:
                    19:30:11:30:62:d5:4d:9a:61:88:40:9b:49:3c:0c:
                    b8:b2:cc:88:32:65:46:d5:85:9e:e8:5b:17:53:37:
                    fe:ce:e7:c5:93:fc:48:53:be:ef:56:3f:73:7a:4b:
                    39:57:82:a6:99:5d:00:bb:6b:ae:ec:c8:fb:3b:37:
                    ca:b0:84:be:9c:03:f6:63:32:4e:77:a5:30:79:af:
                    a1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:22:1C:AD:A1:67:EC:F0:CA:BD:75:D5:B0:76:5F:38:FF:CD:A0:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/81df72d0-04af-344e-b0bf-faec1192d7e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.47.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:2d:c8:08:90:ca:2c:79:c5:a0:77:24:61:4d:36:83:63:df:
         1c:70:4f:8d:3d:af:ca:b9:8c:13:cc:da:33:cc:35:8f:8a:28:
         19:a0:98:07:ad:93:e7:43:2b:32:f5:0a:5f:32:e6:9b:2d:84:
         9b:7b:1f:cc:6e:97:fb:b2:6b:80:37:80:b0:9f:b9:d9:8d:6d:
         1a:27:5f:97:01:fd:13:d7:4b:84:44:36:e1:24:65:1c:64:47:
         cc:54:81:15:86:18:84:c6:40:96:90:1e:d1:c3:83:4a:cb:0b:
         5c:b1:b8:ec:88:34:f7:51:c6:b3:4f:01:34:8c:51:d0:9c:05:
         ef:a1:e7:f8:ea:a4:a1:c0:b5:3b:81:4a:e4:62:f1:59:6b:1b:
         05:1a:23:5f:08:b7:ec:d3:c8:f4:d9:3d:ec:cf:06:59:33:c8:
         dd:dc:2e:f0:24:33:96:3e:4a:0f:76:f3:94:92:53:f3:33:ca:
         b8:7a:7e:46:f6:76:e8:28:c0:89:09:5e:b5:7b:73:66:e4:10:
         0e:9d:be:15:c1:d6:76:9e:37:c1:24:d7:54:74:a2:35:a4:4a:
         ed:29:dd:78:a6:5a:d1:72:8d:70:3f:11:88:d6:0f:5d:cb:45:
         92:aa:46:d2:62:d8:14:4f:95:9b:f1:43:e0:ff:e6:3f:fb:08:
         12:84:67:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:07 2025 by rpki-client