Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9e9da862-8153-3f4a-96a0-8addc681085a.roa
File:                     9e9da862-8153-3f4a-96a0-8addc681085a.roa (raw, json)
Hash identifier:          sNJruRK1tG5JumX9gQ28VhqFx2Q+FYOmbNXaYewvdUM=
Subject key identifier:   D1:36:97:A1:3E:E7:7A:F3:A7:7E:C2:88:B0:21:2D:86:6F:B5:45:07
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F7DFF5E87A255783CA07C8A40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9e9da862-8153-3f4a-96a0-8addc681085a.roa
Signing time:             Fri 07 Oct 2022 14:24:07 +0000
ROA not before:           Fri 07 Oct 2022 14:24:07 +0000
ROA not after:            Fri 11 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        54.7.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:7d:ff:5e:87:a2:55:78:3c:a0:7c:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct  7 14:24:07 2022 GMT
            Not After : Nov 11 05:00:00 2022 GMT
        Subject: CN=6761a734-3604-4622-8bb9-92ff51d113db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4e:ce:ea:a1:cf:f4:11:b6:68:cb:db:85:42:
                    7a:9d:60:c3:96:7a:28:38:da:ac:3c:d6:16:31:d4:
                    d2:94:43:b6:91:4a:6b:76:47:3d:d9:50:de:fd:13:
                    a4:0b:15:77:67:7c:ab:24:0f:23:5d:26:84:98:e4:
                    86:44:cd:b4:ac:10:4e:7e:6a:4e:98:22:eb:71:37:
                    56:5e:79:4d:a7:e5:18:fd:f1:fd:04:4d:4d:1f:0f:
                    cd:71:db:72:b5:26:8b:aa:5f:c0:12:a5:5e:85:06:
                    c0:b8:99:83:d9:8c:0f:78:f7:2e:d1:b2:01:0a:75:
                    a5:fd:5a:2d:4d:15:85:08:5a:03:08:50:9e:9f:af:
                    44:36:37:ea:80:3b:24:a2:9e:90:15:e6:97:98:b6:
                    5e:9a:61:98:82:e8:ca:9e:8d:a6:bf:c3:3a:37:2e:
                    6c:9f:f6:cb:80:a4:8b:cf:c5:7d:d7:02:28:04:c1:
                    20:2b:4d:64:9a:3b:ac:84:0e:12:93:85:d2:82:3c:
                    db:f0:cd:8c:c6:b7:04:27:4a:ae:e2:2d:31:79:a9:
                    d2:a5:7a:c2:ca:06:f4:71:0a:c4:ce:b6:f4:13:06:
                    14:82:96:81:9d:c1:57:47:ae:de:21:10:35:f8:09:
                    6c:e9:d1:c3:43:cc:58:37:ab:85:29:3f:1f:34:cc:
                    e5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:36:97:A1:3E:E7:7A:F3:A7:7E:C2:88:B0:21:2D:86:6F:B5:45:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9e9da862-8153-3f4a-96a0-8addc681085a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.7.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:f3:f2:7d:6f:c8:6c:cc:d7:b8:bf:f4:94:5a:13:98:80:41:
         a5:e0:b3:49:79:42:69:49:ec:a5:1f:f1:e2:f4:5b:c3:bd:c0:
         c4:85:7d:4a:c5:7a:c3:74:9a:f6:aa:bf:cc:8e:19:61:3e:d5:
         f2:dc:2f:1c:97:32:ab:0d:8a:37:a8:4f:99:8f:37:a0:9d:a7:
         27:8c:33:d0:e4:40:f0:7c:77:85:2b:ac:3d:06:98:a5:04:a1:
         b8:e1:c2:e7:52:92:01:fe:29:ed:04:aa:f8:39:95:60:47:6e:
         5e:ee:4c:cb:e7:24:46:2f:19:c0:e3:b6:22:ba:01:10:64:c6:
         5c:43:e5:de:9e:be:48:1f:a4:af:cf:20:30:ee:6d:ef:35:93:
         33:ba:9a:6f:7d:25:f8:33:e5:55:5e:66:13:fb:4b:12:b9:7c:
         5b:a0:79:b3:60:87:29:31:5c:c4:68:be:51:50:8d:eb:ef:80:
         af:f4:cd:58:ef:20:93:b7:b0:9a:64:8e:34:40:02:08:a3:80:
         a6:f6:aa:7d:43:ac:9f:83:3d:36:0c:b6:6a:0a:6e:79:da:bd:
         ae:13:33:e5:e9:70:d1:cd:a2:e5:08:fb:7c:31:58:a5:86:e3:
         bd:ea:bf:1e:e0:d4:97:ad:fc:a4:72:35:05:46:22:6d:1c:2d:
         a1:fa:8d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:59:04 2025 by rpki-client