Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a5affee6-5e97-32a2-aedb-b6a4d3569a07.roa
File:                     a5affee6-5e97-32a2-aedb-b6a4d3569a07.roa (raw, json)
Hash identifier:          6hxTjOF5SMzitD9T06bibiYEWcbqd2ncfKOOKcn+vsk=
Subject key identifier:   BD:65:B9:23:18:67:E4:C6:F7:E5:E7:65:BE:B8:7B:68:78:E7:54:BA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FD10D1F2DD1CFF1A66DA8F680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a5affee6-5e97-32a2-aedb-b6a4d3569a07.roa
Signing time:             Sat 05 Nov 2022 12:00:00 +0000
ROA not before:           Sat 05 Nov 2022 12:00:00 +0000
ROA not after:            Sun 11 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        54.117.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:d1:0d:1f:2d:d1:cf:f1:a6:6d:a8:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  5 12:00:00 2022 GMT
            Not After : Dec 11 05:00:00 2022 GMT
        Subject: CN=a9524262-d957-4927-bcb2-d1428e384dc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0e:69:1d:a3:6b:1f:0f:6c:8a:c3:05:e8:51:
                    cb:bc:09:85:f4:dc:2a:fa:83:d4:28:b9:94:7d:b3:
                    a7:28:7d:19:cf:fa:1d:18:5e:05:2d:0a:95:da:22:
                    2e:05:e3:4e:ea:c2:b1:8e:9a:c9:49:e9:d3:f1:cb:
                    50:e3:02:d5:fd:4f:59:bb:c4:c9:20:ca:80:ea:1b:
                    45:59:2f:05:fd:23:f9:04:67:77:3f:57:92:9f:0a:
                    7b:9b:8e:ad:bf:ed:9e:ec:6e:55:c4:9e:f0:68:16:
                    65:9a:f2:10:5a:cb:dc:fe:67:4a:f2:61:07:53:cd:
                    1c:f6:e3:14:d9:ab:5a:2b:ad:e5:83:23:4e:25:4b:
                    76:50:2b:fa:16:2e:05:0a:fa:31:13:6f:41:3e:f5:
                    9f:93:72:6e:5f:4e:16:cd:25:8f:1b:c3:21:ec:a7:
                    35:d2:b6:39:33:dc:80:66:2e:b7:e4:37:84:dc:af:
                    25:9c:62:d2:6e:c1:c8:8b:5a:f7:86:a4:77:06:17:
                    f7:c3:17:d1:1c:35:db:61:85:ff:db:ac:91:53:b1:
                    7f:da:24:e2:9d:eb:37:fe:cb:a0:ca:1e:a4:05:4c:
                    d9:c4:59:10:a9:3a:c6:e8:78:b3:88:f8:8b:1b:65:
                    88:1b:e2:04:53:5a:d1:c6:5e:ff:b3:b4:2c:c9:63:
                    19:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:65:B9:23:18:67:E4:C6:F7:E5:E7:65:BE:B8:7B:68:78:E7:54:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a5affee6-5e97-32a2-aedb-b6a4d3569a07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.117.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:ca:fa:23:58:ea:8d:f2:02:96:d5:9b:e3:d4:0f:3f:94:54:
         84:f2:a0:c3:95:12:86:7a:40:c3:a3:51:dd:e1:3c:b3:fa:e4:
         a8:33:ac:d1:76:15:4e:e3:2f:08:fa:f9:db:d5:4e:0b:ee:e5:
         cd:54:4f:30:7a:09:cf:8a:da:c9:04:88:c3:32:f0:77:8e:ff:
         d3:df:c0:b1:60:1b:86:85:41:70:07:38:ee:75:51:20:ed:ba:
         9a:2f:f0:4a:7c:f6:f2:26:25:db:b5:6b:d9:6f:9c:fe:96:e9:
         b7:d6:cc:e5:62:3b:52:20:f0:e5:66:27:a7:7d:73:39:d7:91:
         68:97:72:7b:17:65:82:fe:81:7d:04:e4:a4:87:e7:81:c4:87:
         85:1e:46:1b:bb:4a:48:28:16:88:8c:a1:5c:81:fb:d8:bf:9b:
         ea:7b:c1:51:a6:b1:0c:dc:ae:0c:a7:1c:26:3a:a1:7d:83:f4:
         c0:53:e0:d1:2e:56:71:d1:c6:c1:53:97:f7:16:9b:3e:18:c1:
         64:32:e5:32:c7:12:d5:ff:71:90:7b:24:ea:34:df:9f:a2:b4:
         7b:d2:a2:4f:17:1e:29:6d:c1:86:2b:36:1e:f7:03:c1:5c:4b:
         ec:10:4b:3d:90:63:5e:c6:80:74:81:de:82:7c:39:80:5e:51:
         70:71:16:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:17 2025 by rpki-client