Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/97ac07ad-8625-3ca3-821f-9d863290b914.roa
File:                     97ac07ad-8625-3ca3-821f-9d863290b914.roa (raw, json)
Hash identifier:          t+chQXLzA9ZR5q2pPq5weDP+K8c3BCYN8yVY6UW/428=
Subject key identifier:   51:7A:5D:84:DA:6D:04:75:DA:80:9F:35:56:92:6F:94:29:73:4A:99
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F309D2D3D818EC94C81525080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/97ac07ad-8625-3ca3-821f-9d863290b914.roa
Signing time:             Thu 08 Sep 2022 12:00:00 +0000
ROA not before:           Thu 08 Sep 2022 12:00:00 +0000
ROA not after:            Fri 14 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        54.47.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:30:9d:2d:3d:81:8e:c9:4c:81:52:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep  8 12:00:00 2022 GMT
            Not After : Oct 14 04:00:00 2022 GMT
        Subject: CN=b6125959-405d-416e-b45b-b8d1ab325f05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:97:cd:41:6c:9d:91:49:d3:61:87:80:c4:e8:
                    4e:36:03:32:26:0d:62:7b:77:13:ab:82:55:ce:31:
                    b5:07:83:71:1f:00:b2:98:c9:e3:81:fa:85:ac:35:
                    5a:7e:a2:85:24:5f:a4:51:51:db:0e:ff:25:38:99:
                    bd:ce:ab:a1:55:40:f2:0a:79:bd:9f:6a:b8:49:47:
                    a0:74:99:39:a2:fb:24:59:9d:6a:d9:7f:78:7d:d3:
                    e1:77:7c:51:dd:7d:73:d7:b6:a7:6c:a1:fb:01:e9:
                    fd:3f:b6:79:98:06:bb:33:d7:47:cb:8d:05:de:00:
                    62:01:03:36:c9:f2:d0:78:06:8c:fc:ee:48:bb:24:
                    7f:70:7b:89:45:42:88:1e:c1:9b:c1:b6:b4:57:80:
                    7d:38:d6:08:87:60:4e:8d:33:25:94:89:71:81:76:
                    d2:7d:0a:f2:3e:21:c2:ef:bf:f6:94:67:5e:13:6b:
                    7a:0a:3f:8b:1c:64:92:d4:76:3f:d4:8b:29:38:1c:
                    71:1b:f5:12:64:20:37:ab:bc:d0:70:05:e2:22:16:
                    14:09:98:25:34:f1:fe:02:49:f9:9c:be:35:86:d2:
                    87:a6:49:3e:a7:ad:7d:a7:50:17:81:f5:9b:54:e1:
                    22:ac:62:5c:d5:07:8d:db:dd:ec:23:fa:ed:ee:eb:
                    d4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7A:5D:84:DA:6D:04:75:DA:80:9F:35:56:92:6F:94:29:73:4A:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/97ac07ad-8625-3ca3-821f-9d863290b914.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.47.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:11:9d:8a:e2:fd:ef:31:e2:dc:ea:5d:ae:b6:57:ea:dd:9f:
         64:43:20:fb:3c:57:b7:42:43:e3:e7:7b:72:ca:3e:32:9b:bf:
         49:9a:ef:70:af:40:9f:7c:35:6c:13:07:e3:c2:d6:79:09:b7:
         59:37:da:90:b4:28:15:12:67:c6:6d:e5:86:0a:e0:34:0c:e4:
         66:a6:e6:d6:9c:c0:ea:5d:92:30:db:5d:8c:b0:f1:b0:45:dd:
         61:bd:3f:06:c6:01:98:fe:01:14:34:e5:89:94:e0:80:e7:a2:
         53:63:4b:12:18:43:67:50:84:5e:61:68:96:82:f4:a8:66:b5:
         6d:7d:d7:54:b4:03:a5:05:61:33:ec:83:5b:0f:21:f0:67:57:
         bb:48:42:63:3f:43:56:6b:14:f7:32:e2:20:a9:6b:03:af:4a:
         65:71:58:6f:9c:7d:0e:b9:cb:ee:2e:cd:9f:9b:f1:08:99:a9:
         a9:33:14:b5:37:7a:a5:a3:20:cb:a2:0f:d9:8d:5c:04:34:c4:
         24:92:c1:8b:11:8b:85:02:3e:e3:91:e0:61:cf:d0:16:3a:e9:
         9b:82:32:89:36:ec:9f:18:ae:33:06:64:ed:7a:75:3e:cf:7a:
         9c:0e:30:ba:23:6a:ac:bb:eb:89:eb:aa:bc:82:27:0d:7a:d5:
         75:d2:9f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:23 2025 by rpki-client