Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9c9b8139-ed25-32c0-b86b-c4ddc6e6b4de.roa
File:                     9c9b8139-ed25-32c0-b86b-c4ddc6e6b4de.roa (raw, json)
Hash identifier:          atUxGMJSVJjoIPYZTQwe6XoFwf9WW4MKqvHsGcQADGY=
Subject key identifier:   D3:02:4E:DA:E4:CB:5C:B1:63:78:24:43:DB:F4:F7:2E:11:D8:00:5E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858400DC58E95B3B6EBE68EA7E5F7
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9c9b8139-ed25-32c0-b86b-c4ddc6e6b4de.roa
Signing time:             Sun 27 Nov 2022 12:00:00 +0000
ROA not before:           Sun 27 Nov 2022 12:00:00 +0000
ROA not after:            Mon 02 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        54.116.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:0d:c5:8e:95:b3:b6:eb:e6:8e:a7:e5:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 27 12:00:00 2022 GMT
            Not After : Jan  2 05:00:00 2023 GMT
        Subject: CN=9451a91d-700d-4daa-9773-adb65c4b6650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1a:5d:10:b0:f9:87:7b:41:b7:45:e0:be:e4:
                    d0:0f:f8:b7:2d:a0:90:db:db:cf:a2:65:e9:bb:fd:
                    4f:9a:ef:76:f3:f2:8f:e4:82:61:13:93:23:de:42:
                    4d:17:2a:4d:8b:dd:b0:d6:c1:c3:b5:cf:da:43:27:
                    38:15:ba:4c:3c:31:a7:d3:99:58:3c:bd:93:a4:8a:
                    e0:3e:be:96:c1:c0:a3:61:4d:7f:7c:7c:3e:46:be:
                    81:a2:97:9b:fa:ce:9b:4c:34:3c:cf:5a:2f:8c:6b:
                    22:5f:13:91:de:32:e0:e1:77:71:f5:56:56:bc:e2:
                    bf:b9:d8:74:3c:2c:d5:16:9a:af:bb:f7:20:26:d1:
                    d4:16:f5:b1:a5:50:2f:8f:b3:99:92:b1:11:6c:ff:
                    f9:38:3b:09:28:a8:b0:e8:3d:02:82:34:05:15:85:
                    01:4d:21:df:b1:2b:e6:b1:04:5d:7a:a8:4b:f6:73:
                    61:3f:b8:48:df:10:78:57:7f:f3:d3:47:f8:35:96:
                    2b:9a:48:40:93:ac:d2:2e:4e:9d:20:f0:92:b5:b2:
                    1c:30:85:ae:40:a9:dc:6f:f0:68:f8:72:4d:68:b1:
                    64:60:86:0d:07:8c:8b:f5:39:87:dd:7e:d7:e5:b4:
                    bc:2d:08:67:d8:04:f2:cc:0a:1a:92:0b:be:82:0b:
                    42:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:02:4E:DA:E4:CB:5C:B1:63:78:24:43:DB:F4:F7:2E:11:D8:00:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9c9b8139-ed25-32c0-b86b-c4ddc6e6b4de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.116.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:66:29:e1:2a:70:d3:40:0d:42:43:91:4d:d7:dc:c8:71:20:
         b1:e8:be:0e:5b:e2:88:db:99:a5:77:cb:6a:78:db:da:47:e4:
         0c:fd:7f:43:ee:17:6b:32:8d:91:d9:12:3c:8f:c9:36:ea:4e:
         b9:fe:72:12:a2:d4:ae:5c:7f:d4:7f:6b:c5:52:52:7a:80:42:
         60:97:ad:f1:5b:3c:91:70:10:2e:8e:fc:24:f2:ed:a8:7d:d4:
         0a:45:8f:49:ed:50:48:d9:cf:87:56:23:ec:cd:0b:a8:57:a3:
         cf:4f:d4:48:a0:db:b5:11:2a:d8:6f:eb:a4:7e:89:fc:26:57:
         50:1a:ec:dd:3c:f4:74:89:e6:d4:5d:a1:fe:8d:a2:bf:08:2e:
         16:4b:ad:6f:62:e3:89:e5:d5:10:51:7e:2b:28:4c:db:9b:93:
         eb:d8:13:1a:14:2e:c6:4f:ba:4f:0e:1c:1b:fd:d3:4c:1e:2f:
         a1:e1:56:be:f7:b8:65:ad:96:01:a3:90:31:39:ea:ad:a6:ae:
         9a:c6:a3:fe:c0:50:5a:46:dd:0b:2f:a1:c9:6e:ad:84:a2:88:
         43:22:4f:90:d8:fb:f3:9c:01:9b:a1:7e:3b:1e:91:2f:eb:4f:
         7d:ae:ff:e0:7d:d3:6f:6a:a8:94:84:4d:76:31:0f:f5:5e:21:
         61:d8:a3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:09:28 2025 by rpki-client