Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ab2d36cf-edd5-3b98-859b-dfda36d7f73b.roa
File:                     ab2d36cf-edd5-3b98-859b-dfda36d7f73b.roa (raw, json)
Hash identifier:          aLpafYEwk4w4Q4xjorjJ8EsWAbR3mo4niljOAbSj22s=
Subject key identifier:   8D:6C:28:33:63:0C:CE:89:25:FC:45:E9:0B:06:2B:45:78:B0:4C:60
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D5B4FFA959FF5F345FB47CC00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ab2d36cf-edd5-3b98-859b-dfda36d7f73b.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Fri 29 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        54.35.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5b:4f:fa:95:9f:f5:f3:45:fb:47:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Apr 29 04:00:00 2022 GMT
        Subject: CN=6b38cbd5-d904-47f8-be5c-8097b9a4db74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:91:d1:b9:ba:99:82:06:af:8f:23:b9:1e:e7:
                    dd:4d:11:30:3a:88:ec:63:3e:1a:be:8b:10:fb:2f:
                    de:cd:c1:18:4d:ac:fc:12:57:b4:47:ca:62:a1:ee:
                    01:2a:b5:4c:60:5b:cd:23:81:25:a2:29:06:16:cf:
                    7b:94:fc:8f:a4:4d:f6:30:a8:f1:75:18:c5:c2:03:
                    f5:d2:ec:3e:27:08:ce:ef:95:6a:ac:c4:d5:d8:d2:
                    a3:dd:fe:a7:a2:10:58:7d:54:e1:23:3a:b0:e6:39:
                    be:57:10:29:92:15:c1:93:d2:16:d0:cb:cc:74:e8:
                    ea:25:7e:c8:05:06:72:1c:50:22:e6:18:2c:d5:a5:
                    14:78:64:8e:0f:be:bc:20:e5:4c:69:65:33:3a:34:
                    46:78:65:c5:a4:8e:35:8c:d8:5e:f7:04:b7:1e:09:
                    58:38:ab:10:72:f6:13:b1:8a:9a:da:45:4f:b7:71:
                    8f:01:f9:fc:b2:02:9d:ae:fd:a7:98:f5:37:e5:f1:
                    55:29:c0:32:d3:59:8e:e1:aa:08:12:6e:af:df:8d:
                    ad:d5:b7:ce:1b:2b:72:fd:59:98:02:5a:48:37:f2:
                    a6:54:a1:0a:3e:e6:2f:c8:38:38:e3:cd:23:93:cd:
                    03:6c:1d:29:3e:5b:cd:f2:41:3b:52:cb:21:b4:5e:
                    ee:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6C:28:33:63:0C:CE:89:25:FC:45:E9:0B:06:2B:45:78:B0:4C:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ab2d36cf-edd5-3b98-859b-dfda36d7f73b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.35.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:96:d2:b5:a7:80:2a:e4:b0:38:1e:fb:e8:13:25:1e:c5:92:
         e2:d3:98:49:a5:1b:9e:42:4a:2e:24:23:ff:a5:84:84:f5:60:
         e0:90:fa:00:f3:1f:43:51:5a:ec:4a:31:18:3b:c6:e2:9a:ca:
         1d:08:31:57:de:13:19:5c:fb:98:0c:a4:f1:ee:87:ff:38:c7:
         f7:3b:25:54:db:66:62:89:15:97:69:9f:5a:25:8f:50:33:ec:
         19:34:7d:29:0b:bd:fa:49:6c:cc:34:6f:68:90:d7:63:f7:06:
         b4:27:bc:4d:28:f2:fe:7e:d4:39:f5:68:2e:53:cb:47:48:6d:
         08:27:36:ce:f5:87:88:2f:62:e1:90:89:2e:58:5d:5b:24:2b:
         b7:fe:84:fa:ed:f2:95:46:cb:eb:40:81:34:2f:f2:0b:60:69:
         7a:3e:a7:8a:6f:12:25:fd:15:dd:c0:44:39:56:0d:f7:5f:0a:
         6b:e1:b6:1c:99:84:80:5a:bb:57:69:ad:f3:0e:cc:65:f4:49:
         34:16:87:35:6e:fa:38:f7:2d:40:0d:c6:37:dd:6b:b7:43:0b:
         c9:0d:60:61:1e:28:f5:c6:5d:8c:02:dc:71:6b:8d:74:ec:d5:
         d4:8c:8b:cb:a8:bc:81:2d:6e:ea:cc:f8:38:0d:87:f8:21:1d:
         39:ef:a5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:09:13 2025 by rpki-client