Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a8dd807b-e8cc-352f-a2f3-4079b4763f20.roa
File:                     a8dd807b-e8cc-352f-a2f3-4079b4763f20.roa (raw, json)
Hash identifier:          8VvhRHcIorAjY1TGYr/qVT1ktvQevMQjchhY2J4BeL0=
Subject key identifier:   C8:04:75:51:A0:B6:53:14:54:50:17:1D:FC:8A:16:80:73:AE:94:3A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584042FD4BDD6947206CE752CD00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a8dd807b-e8cc-352f-a2f3-4079b4763f20.roa
Signing time:             Fri 16 Dec 2022 12:00:00 +0000
ROA not before:           Fri 16 Dec 2022 12:00:00 +0000
ROA not after:            Sat 21 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        54.46.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:42:fd:4b:dd:69:47:20:6c:e7:52:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 16 12:00:00 2022 GMT
            Not After : Jan 21 05:00:00 2023 GMT
        Subject: CN=4336ff4c-0899-4a5f-b3cb-493417a4635b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b1:e1:03:56:0c:f2:3e:76:50:d4:33:62:3a:
                    1f:84:ea:da:39:51:fe:69:cc:03:91:4c:a0:17:ff:
                    7e:63:9c:d0:30:7c:6d:a2:91:cc:e6:bf:4b:35:1b:
                    31:93:93:7a:bf:44:7f:64:a0:cf:a8:e2:ec:2b:e7:
                    ec:67:31:cd:4e:c9:9c:a6:20:17:e7:e0:17:9d:5d:
                    18:f8:d7:9a:89:b2:37:a2:af:07:57:13:46:3d:d8:
                    b3:a9:fd:8c:80:68:27:8b:0f:a6:51:75:67:8b:61:
                    50:1f:11:bd:e7:9f:3e:2f:e8:12:9b:27:f3:03:fb:
                    58:13:86:de:f7:16:0c:8b:5b:54:56:ad:cf:81:0b:
                    48:82:4e:35:df:31:ca:93:32:13:f8:04:a6:fb:40:
                    75:ab:aa:13:dd:ec:49:fd:9a:de:ab:ed:39:5f:69:
                    43:e2:f7:cd:3b:d7:f6:2d:1b:32:36:9c:80:3b:8d:
                    70:41:44:4c:10:18:30:5b:eb:e1:fb:c3:7d:79:a7:
                    e0:87:d7:1c:ed:5f:b1:8a:22:31:52:08:e8:27:02:
                    42:0b:24:e5:e3:82:92:5c:37:0c:57:de:10:f9:bb:
                    db:d7:72:02:fb:17:49:68:11:5b:86:c4:c4:dd:29:
                    7f:17:69:a9:6e:1f:df:4f:cd:3a:e6:84:21:91:e1:
                    5b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:04:75:51:A0:B6:53:14:54:50:17:1D:FC:8A:16:80:73:AE:94:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a8dd807b-e8cc-352f-a2f3-4079b4763f20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.46.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:9b:76:0b:8c:ae:18:d3:ec:e8:83:fa:dc:aa:c1:ff:95:e6:
         f3:b4:b9:cb:75:7c:96:9b:bd:3f:b4:02:cf:4d:9a:d1:33:9c:
         97:89:8f:e2:2d:8d:6f:3d:a0:a7:7c:57:b2:50:b1:52:f8:04:
         34:e7:75:1b:3d:bc:31:5b:cf:83:04:2f:e6:8d:b0:e5:27:ca:
         d1:cf:7f:3c:49:e1:80:2c:7b:55:dc:ea:4e:72:36:fe:82:9c:
         ad:3c:f2:4c:55:72:52:03:9f:a3:b0:ab:27:66:c0:1c:ea:2a:
         0c:d5:23:33:86:b2:d9:a8:4e:3f:c3:da:7b:8a:a1:8c:09:5c:
         58:69:68:33:b3:86:ad:62:7e:70:09:07:8b:d3:cd:9f:6d:75:
         f4:ae:2f:85:a4:b0:43:db:e1:b0:3f:02:5f:a5:85:9b:23:74:
         31:54:be:ad:6e:83:88:92:77:f8:5c:10:5d:2a:02:89:cc:e1:
         eb:f9:d3:b2:44:b4:83:aa:15:0f:16:4a:d1:28:35:cb:8c:47:
         37:18:d8:1b:07:53:79:b6:ac:54:f7:eb:ac:fe:2d:dc:63:0e:
         a4:0c:37:66:1a:29:cb:0b:77:a2:ca:22:11:90:be:41:b1:b0:
         5d:55:ad:7a:46:c4:a3:0a:e5:cc:16:2e:49:ff:fc:da:1a:0c:
         d3:12:b4:ee
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBC/UvdaUcgbOdSzQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxNjEyMDAwMFoXDTIzMDEyMTA1MDAwMFowLzEtMCsGA1UEAxMk
NDMzNmZmNGMtMDg5OS00YTVmLWIzY2ItNDkzNDE3YTQ2MzViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7HhA1YM8j52UNQzYjofhOraOVH+acwDkUyg
F/9+Y5zQMHxtopHM5r9LNRsxk5N6v0R/ZKDPqOLsK+fsZzHNTsmcpiAX5+AXnV0Y
+NeaibI3oq8HVxNGPdizqf2MgGgniw+mUXVni2FQHxG9558+L+gSmyfzA/tYE4be
9xYMi1tUVq3PgQtIgk413zHKkzIT+ASm+0B1q6oT3exJ/Zreq+05X2lD4vfNO9f2
LRsyNpyAO41wQURMEBgwW+vh+8N9eafgh9cc7V+xiiIxUgjoJwJCCyTl44KSXDcM
V94Q+bvb13IC+xdJaBFbhsTE3Sl/F2mpbh/fT8065oQhkeFb2wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMgEdVGgtlMUVFAXHfyKFoBzrpQ6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYThkZDgwN2ItZThjYy0z
NTJmLWEyZjMtNDA3OWI0NzYzZjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMANi4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEARZt2C4yuGNPs6IP63KrB/5Xm87S5y3V8lpu9P7QCz02a0TOcl4mP4i2N
bz2gp3xXslCxUvgENOd1Gz28MVvPgwQv5o2w5SfK0c9/PEnhgCx7VdzqTnI2/oKc
rTzyTFVyUgOfo7CrJ2bAHOoqDNUjM4ay2ahOP8Pae4qhjAlcWGloM7OGrWJ+cAkH
i9PNn2119K4vhaSwQ9vhsD8CX6WFmyN0MVS+rW6DiJJ3+FwQXSoCiczh6/nTskS0
g6oVDxZK0Sg1y4xHNxjYGwdTebasVPfrrP4t3GMOpAw3Zhopywt3osoiEZC+QbGw
XVWtekbEowrlzBYuSf/82hoM0xK07g==
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:10:42 2025 by rpki-client