Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/96946591-f2ba-3788-9660-59a025c24de6.roa
File:                     96946591-f2ba-3788-9660-59a025c24de6.roa (raw, json)
Hash identifier:          rDhGLf7REq6Zq8ZAkNn8CGEWrDCdRnbnJTtH1RiDoRk=
Subject key identifier:   96:5B:79:D8:F4:D8:71:0A:05:69:CB:7A:BC:D8:97:F0:34:0C:DC:CD
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CBF0FB64BA62DABDEA5D94C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/96946591-f2ba-3788-9660-59a025c24de6.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        54.112.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:bf:0f:b6:4b:a6:2d:ab:de:a5:d9:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=f1d12ffc-67db-4c89-b747-1404a20bd2f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1e:ea:1c:ae:f1:ba:51:fb:22:68:ab:af:e2:
                    c9:c0:8c:75:d3:ca:f1:0c:eb:94:44:09:c2:e4:82:
                    f9:15:d8:27:fa:5a:97:8e:92:6b:0e:db:d5:40:ef:
                    e8:bc:2b:47:3f:19:e6:5a:bc:db:f8:f3:bb:34:11:
                    de:a9:61:18:a2:1f:56:81:e3:ee:cc:15:53:a3:73:
                    9d:77:e0:ca:a7:ce:4e:dc:88:20:0d:0e:4f:19:b5:
                    79:24:02:68:7f:ee:43:08:2f:9f:b8:e0:4b:56:65:
                    8d:a1:aa:60:52:1e:cf:2a:f7:27:b9:25:be:2e:f3:
                    0f:f0:e6:cc:d7:e0:8b:d3:04:e8:51:23:2a:ed:23:
                    0b:64:50:ee:69:a8:2a:8c:af:08:6c:c4:1d:57:99:
                    16:a6:b1:40:54:60:92:23:45:1f:49:a3:42:b7:d2:
                    78:d4:a4:db:28:66:d3:9f:64:e2:0c:83:12:3e:7d:
                    3a:bc:1c:0d:03:60:fd:cd:e6:fd:92:97:b6:a9:cb:
                    bf:5e:05:84:03:42:a0:94:42:4b:a7:c2:fa:9e:dc:
                    e4:32:e2:18:39:43:53:ba:66:e0:28:c1:81:78:bd:
                    1a:32:ac:de:56:2b:3a:09:a9:84:d4:eb:42:d7:76:
                    4f:35:fc:ac:39:ff:4a:ce:d0:e1:e4:43:a3:6d:93:
                    c0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5B:79:D8:F4:D8:71:0A:05:69:CB:7A:BC:D8:97:F0:34:0C:DC:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/96946591-f2ba-3788-9660-59a025c24de6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.112.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:76:1c:9f:62:2f:ff:71:a6:6e:36:1f:07:24:8d:aa:00:4f:
         25:b4:7b:ab:a6:0f:e8:c0:38:02:30:62:9b:e9:69:12:66:74:
         db:1a:bf:12:90:0f:a6:74:1a:29:4b:00:8c:df:84:c4:c1:db:
         93:cd:2a:a5:7f:51:b1:f5:e5:84:91:ae:92:b2:50:6a:e1:5b:
         65:94:b8:14:ea:97:b6:f5:39:dd:83:c7:7f:c0:03:a6:27:3f:
         35:d7:64:0c:93:be:64:8e:6a:f1:a6:55:8f:53:35:59:67:02:
         5e:7e:55:8a:aa:ab:54:9c:6c:39:58:29:5c:4b:c0:e4:b3:0e:
         37:29:5f:34:51:66:b2:7a:62:22:1f:ca:90:47:e3:72:d7:88:
         53:5a:d2:01:45:e4:dd:8d:e2:c0:d4:44:9e:3a:44:8f:ce:28:
         89:dd:6a:95:89:d5:ff:3e:96:a1:dc:92:d8:a2:c0:b0:f0:b1:
         6f:c4:51:fb:80:fa:7a:e7:da:1a:52:b9:8d:a3:87:fa:da:86:
         09:95:c6:b8:23:af:8a:36:3c:7b:c0:ac:18:8a:b9:b5:f8:6f:
         a8:da:94:2a:d3:12:bb:a1:5c:89:ef:8f:73:b2:b8:fb:b5:8e:
         c7:3b:4f:af:da:ef:c7:f6:db:ca:8d:c9:11:9d:2e:7b:a6:3c:
         4e:90:3a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:56 2025 by rpki-client