Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a156bf83-9d68-34c0-b8f7-53a0a01e8dfb.roa
File:                     a156bf83-9d68-34c0-b8f7-53a0a01e8dfb.roa (raw, json)
Hash identifier:          4cQ1RWAvEcsB5KZlGb574SeZDcMR+hI3+UwEUjLWfTA=
Subject key identifier:   0C:96:47:8C:F9:51:41:36:F4:4B:9A:49:DA:6A:C6:2A:1F:D8:32:62
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858405F1C63BFFBFBCAE02FCEC1B8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a156bf83-9d68-34c0-b8f7-53a0a01e8dfb.roa
Signing time:             Mon 26 Dec 2022 12:00:00 +0000
ROA not before:           Mon 26 Dec 2022 12:00:00 +0000
ROA not after:            Tue 31 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        54.26.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:5f:1c:63:bf:fb:fb:ca:e0:2f:ce:c1:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 26 12:00:00 2022 GMT
            Not After : Jan 31 05:00:00 2023 GMT
        Subject: CN=e3ebca8b-0518-4674-a0d9-b9013de7e80e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0b:09:e0:29:37:4a:d5:b8:dd:a3:2f:17:3e:
                    3e:2a:d9:5b:4b:f6:e4:f2:05:4a:89:2a:40:04:d8:
                    96:03:14:60:f8:95:37:62:15:aa:6a:f7:ce:72:9b:
                    11:a5:ef:5e:5a:f8:c2:ed:6a:fd:3b:b9:ff:0a:7b:
                    6b:fc:d0:ec:6f:d2:62:2b:6f:a8:20:f0:f7:43:ef:
                    40:ab:0e:dc:ad:22:82:23:3c:17:b3:59:95:42:02:
                    2c:c9:89:79:41:3e:01:eb:8a:6c:8d:7c:66:e2:7d:
                    57:d9:ef:da:fc:57:f4:98:10:31:4f:21:3b:52:a0:
                    59:ae:dd:38:71:83:a0:47:48:32:c8:29:f7:82:c7:
                    85:b2:53:e1:18:90:6e:a6:6a:49:65:d2:3a:da:3a:
                    40:31:ad:33:81:ac:be:fa:ba:a1:50:81:09:9e:be:
                    16:6f:d6:16:af:10:d3:5b:7a:41:c2:92:87:3b:a9:
                    ad:c8:1c:bd:e5:81:2f:f4:e8:95:67:5d:d5:56:99:
                    aa:c2:47:f6:4e:e0:4c:5e:6d:18:6e:57:f7:d2:eb:
                    68:e4:15:79:25:a1:b3:16:fc:3e:36:22:a7:78:23:
                    23:ed:a6:c9:cb:3b:2e:6a:9b:45:01:3c:d9:26:15:
                    1a:95:24:3e:dc:d5:d0:f6:27:a4:8c:f6:63:2e:b3:
                    20:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:96:47:8C:F9:51:41:36:F4:4B:9A:49:DA:6A:C6:2A:1F:D8:32:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a156bf83-9d68-34c0-b8f7-53a0a01e8dfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.26.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:01:4f:30:dc:ac:b9:de:62:fe:c0:7c:d2:46:eb:c7:c6:f0:
         93:eb:62:b9:21:86:71:8a:ee:61:ea:e7:7c:e2:df:f5:34:d4:
         fd:72:c3:c0:da:6c:58:da:d9:2d:22:3f:47:82:7e:3f:b5:ce:
         2e:ae:be:6a:fe:cc:b3:d3:36:65:0f:f1:6b:3d:46:2a:2d:da:
         92:db:60:ee:42:79:52:d4:59:e8:53:c1:b1:37:fa:a2:4f:61:
         ae:b0:95:e2:2a:0e:a6:04:1f:19:bf:5c:8c:14:6f:c8:35:2b:
         3d:82:c5:61:57:72:85:03:62:0c:8a:41:33:cb:4f:dd:1f:dc:
         d3:bc:f0:a6:d9:ee:bf:bb:72:16:d3:46:19:0d:9b:2f:07:26:
         01:53:4e:5f:7d:f4:44:f0:21:cc:18:67:a2:b9:48:09:e8:20:
         26:50:e3:5e:42:ec:86:cb:fc:9a:55:b1:fe:c9:34:cc:d4:87:
         af:60:9b:69:31:24:b1:88:57:d6:51:0c:50:1e:70:1c:77:82:
         27:45:d6:1b:c9:f6:1a:63:34:ca:19:43:14:0f:25:d4:c4:d2:
         64:5a:a6:05:2c:36:d5:15:21:3e:7d:a4:4a:50:80:48:3a:39:
         53:a0:87:b0:a6:b7:d0:21:e3:49:e6:4e:b3:e5:d7:db:34:96:
         6f:86:d6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:44 2025 by rpki-client