Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/98354bd5-366a-3681-b7ed-157503cbcbef.roa
File:                     98354bd5-366a-3681-b7ed-157503cbcbef.roa (raw, json)
Hash identifier:          /mDsb496jMsT2M6+cDz5WrxELigP1kYKcQD0sNL4vvY=
Subject key identifier:   2F:32:3C:A8:B1:4A:74:44:32:3C:69:88:71:74:BE:85:9F:56:AB:8A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D0D1607C4EE9839D5E39E7240
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/98354bd5-366a-3681-b7ed-157503cbcbef.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Fri 01 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        54.35.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0d:16:07:c4:ee:98:39:d5:e3:9e:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Apr  1 04:00:00 2022 GMT
        Subject: CN=604874a9-f88a-4a1f-832e-8ca1070d378d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b8:75:fa:9f:0f:c9:a1:01:90:ae:56:13:8b:
                    06:67:e4:8f:8e:8f:e9:85:21:ad:09:fb:6c:87:5b:
                    c7:d2:f0:d9:2f:bc:54:f0:8d:e8:54:9d:6b:82:e5:
                    6a:66:7d:26:b7:f4:9f:57:0e:3a:fc:aa:d3:d6:8e:
                    0d:3f:f5:44:d2:7f:7a:5c:9f:67:f8:c6:c3:fe:be:
                    1f:27:5e:e8:7f:7c:39:25:69:15:43:21:e8:02:39:
                    68:37:82:26:b3:2a:b5:97:a3:ce:08:d8:c0:bb:60:
                    19:da:67:10:4e:92:2e:f9:98:eb:7b:c5:e9:1d:17:
                    4e:4c:03:14:62:0f:bd:b3:00:7a:58:b2:8b:72:25:
                    d5:4d:10:95:38:bd:88:16:e8:70:3e:3f:57:be:26:
                    a6:e8:16:d3:7a:b2:1a:ae:74:fd:41:5d:ae:10:f1:
                    c1:92:e1:b8:f3:b5:41:f1:42:f6:ad:87:2f:af:73:
                    c5:88:7f:e0:7d:1b:18:1d:86:41:a5:1c:d0:76:3b:
                    02:4e:5a:f2:41:7f:d7:77:7e:ea:47:17:ca:45:0a:
                    42:5b:ec:d1:b9:b3:99:4a:b4:b7:eb:4c:09:b4:da:
                    31:1e:ba:63:a7:71:b1:6f:52:e5:83:b7:c0:78:09:
                    f4:b5:d9:3a:3a:ba:a2:2f:87:45:ce:cb:ed:eb:f2:
                    70:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:32:3C:A8:B1:4A:74:44:32:3C:69:88:71:74:BE:85:9F:56:AB:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/98354bd5-366a-3681-b7ed-157503cbcbef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.35.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:2b:08:5e:82:b3:07:61:dc:eb:fe:32:7f:ea:a0:61:a5:2d:
         bd:6b:b4:4d:e4:03:a8:29:78:ab:6e:33:50:d7:4c:0c:91:8a:
         c6:a5:28:8c:18:e3:ee:32:ed:75:40:6a:1a:ad:f5:01:3b:ad:
         f6:71:9d:db:be:a0:26:97:60:2f:aa:e5:38:61:d3:4a:97:18:
         98:94:d6:c8:47:62:21:da:6f:2f:1a:74:07:ca:41:9b:70:eb:
         24:17:39:08:0e:c5:b0:8c:ed:10:fe:00:2b:11:ac:91:92:3c:
         78:36:49:88:50:b8:0b:c4:99:4b:72:2d:c6:4e:a9:bc:d3:ee:
         2d:b6:e1:7b:c6:4e:5c:46:cf:28:5b:ed:8b:5b:9c:5a:ff:f7:
         84:05:85:b4:91:7e:a7:42:b1:72:16:3a:a4:9c:bf:ef:24:01:
         12:b2:77:c8:8c:cf:bf:72:fe:62:fb:b1:c1:29:ab:ad:93:eb:
         9f:80:77:16:d6:3c:17:26:c1:d3:51:7b:b6:6f:3e:ed:91:3c:
         e2:65:09:9d:8a:9d:73:7d:1c:4d:a3:97:92:c2:c6:32:c1:34:
         be:b5:97:09:1b:a4:52:eb:9f:cc:ac:c1:fd:be:16:86:6b:68:
         fe:e0:ee:65:8c:58:09:11:e4:c2:8e:b3:50:d1:9f:aa:75:91:
         5a:22:77:29
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0NFgfE7pg51eOeckAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDIyNTA1MDAwMFoXDTIyMDQwMTA0MDAwMFowLzEtMCsGA1UEAxMk
NjA0ODc0YTktZjg4YS00YTFmLTgzMmUtOGNhMTA3MGQzNzhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbh1+p8PyaEBkK5WE4sGZ+SPjo/phSGtCfts
h1vH0vDZL7xU8I3oVJ1rguVqZn0mt/SfVw46/KrT1o4NP/VE0n96XJ9n+MbD/r4f
J17of3w5JWkVQyHoAjloN4Imsyq1l6POCNjAu2AZ2mcQTpIu+Zjre8XpHRdOTAMU
Yg+9swB6WLKLciXVTRCVOL2IFuhwPj9Xviam6BbTerIarnT9QV2uEPHBkuG487VB
8UL2rYcvr3PFiH/gfRsYHYZBpRzQdjsCTlryQX/Xd37qRxfKRQpCW+zRubOZSrS3
60wJtNoxHrpjp3Gxb1Llg7fAeAn0tdk6OrqiL4dFzsvt6/JwaQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFC8yPKixSnREMjxpiHF0voWfVquKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOTgzNTRiZDUtMzY2YS0z
NjgxLWI3ZWQtMTU3NTAzY2JjYmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMANiMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAnCsIXoKzB2Hc6/4yf+qgYaUtvWu0TeQDqCl4q24zUNdMDJGKxqUojBjj
7jLtdUBqGq31ATut9nGd276gJpdgL6rlOGHTSpcYmJTWyEdiIdpvLxp0B8pBm3Dr
JBc5CA7FsIztEP4AKxGskZI8eDZJiFC4C8SZS3Itxk6pvNPuLbbhe8ZOXEbPKFvt
i1ucWv/3hAWFtJF+p0KxchY6pJy/7yQBErJ3yIzPv3L+YvuxwSmrrZPrn4B3FtY8
FybB01F7tm8+7ZE84mUJnYqdc30cTaOXksLGMsE0vrWXCRukUuufzKzB/b4Whmto
/uDuZYxYCRHkwo6zUNGfqnWRWiJ3KQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:06 2025 by rpki-client