Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/90ae5dda-b7c9-3d50-b87d-4d26e28a9cec.roa
File:                     90ae5dda-b7c9-3d50-b87d-4d26e28a9cec.roa (raw, json)
Hash identifier:          +44nJOzDwS9i1eVPjPA+lmQmEmy+3u0EwOCSk0hqj48=
Subject key identifier:   23:B5:54:21:3E:2A:97:80:6D:C5:28:0C:B5:09:A4:8A:C5:37:85:A3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D825DCAD94C847BAFFFA0EFE3
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/90ae5dda-b7c9-3d50-b87d-4d26e28a9cec.roa
Signing time:             Fri 08 Apr 2022 04:00:00 +0000
ROA not before:           Fri 08 Apr 2022 04:00:00 +0000
ROA not after:            Fri 13 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        54.47.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:82:5d:ca:d9:4c:84:7b:af:ff:a0:ef:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr  8 04:00:00 2022 GMT
            Not After : May 13 04:00:00 2022 GMT
        Subject: CN=4d382885-6361-4211-add7-02ac8bda33df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:06:d1:b0:57:b4:56:c6:40:d3:24:36:ed:dc:
                    21:d5:59:32:fb:39:6f:4d:3d:e5:8f:16:96:02:fd:
                    36:b1:5e:4e:49:49:a8:9a:04:19:02:31:71:7d:79:
                    8e:27:33:c6:3a:42:79:41:fa:bb:b4:0f:64:28:f9:
                    64:7a:99:fc:67:4d:13:72:66:e9:fc:ec:f5:b7:e9:
                    5a:52:72:31:c5:c5:78:c6:04:d4:b8:e7:3e:9a:f9:
                    e0:7f:62:7b:6e:d9:86:83:3d:c8:97:53:14:57:a6:
                    b6:87:d1:f7:07:e4:57:d8:7c:37:ba:81:d5:92:61:
                    b5:06:9a:55:60:53:8f:98:5b:83:23:c2:8b:ff:4c:
                    d4:11:3f:26:14:f0:5a:a7:a9:e5:05:30:a7:69:cb:
                    d1:c1:d4:5a:ef:55:cb:dc:95:7c:c6:91:85:b8:3f:
                    80:86:84:93:c6:eb:01:5e:aa:00:dd:74:a5:c1:d7:
                    40:c2:a4:ed:92:f1:8e:06:1a:a9:6c:54:c5:b1:d9:
                    d2:89:cb:51:0f:39:a3:0e:58:3b:e8:ec:b9:45:0a:
                    22:a1:62:db:c5:d7:74:46:28:ae:c0:80:3d:47:6a:
                    28:4b:0c:eb:31:53:e7:94:4a:8b:0c:9f:73:6c:21:
                    35:ab:d4:60:d3:d0:72:79:7e:50:2e:3c:73:e9:34:
                    90:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B5:54:21:3E:2A:97:80:6D:C5:28:0C:B5:09:A4:8A:C5:37:85:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/90ae5dda-b7c9-3d50-b87d-4d26e28a9cec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.47.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:3e:bb:a7:d9:1d:83:c8:a4:14:c5:a0:7b:e6:0b:d7:41:f3:
         1e:c7:15:e4:b0:a4:0b:ca:19:04:23:5b:98:a5:3f:07:7a:21:
         43:10:2e:68:20:67:94:cf:88:39:b6:ca:6e:61:93:80:25:43:
         39:80:26:2a:50:e4:1f:d8:db:56:d2:78:e1:76:16:39:6e:76:
         b6:91:8a:65:6f:f6:32:54:07:20:07:82:29:f7:00:87:70:e8:
         8a:fc:dd:2f:c2:24:bc:1a:6f:43:90:04:30:2a:53:a2:87:1b:
         54:e3:cc:83:41:2d:68:54:90:71:80:0a:c1:59:3b:b8:ae:30:
         cc:1f:23:ab:fe:3d:72:5a:c1:74:45:d1:df:d6:d4:9d:00:12:
         1a:44:d4:2a:ad:1f:45:14:b0:02:8a:08:1c:6f:13:8c:72:aa:
         d7:4a:4c:45:b9:70:36:a4:a7:5e:ac:dd:b3:14:fe:91:85:43:
         06:c8:19:32:8a:90:76:c3:ad:3e:3f:2e:42:76:c7:b4:eb:6d:
         2b:e0:37:c4:60:59:ef:43:1c:41:c5:22:74:76:f9:03:03:54:
         a9:fc:55:8a:0c:b2:7a:c9:60:ef:ca:54:e2:af:b1:d0:3e:a7:
         b4:31:63:16:15:4e:0b:5e:02:c2:85:22:03:89:1a:6b:56:53:
         61:fb:44:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:42 2025 by rpki-client