Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aebab5c7-955e-35f3-b3a3-e879a7f03df0.roa
File:                     aebab5c7-955e-35f3-b3a3-e879a7f03df0.roa (raw, json)
Hash identifier:          6DTHYnYS22OnS8p59g5A+RdO4nBtq+0gVPmnubNvnVM=
Subject key identifier:   20:24:0D:89:F5:8F:0B:B7:1E:3E:F8:1A:11:C7:35:36:07:34:E5:55
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FF3CD931F65FD8DD6623F3780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aebab5c7-955e-35f3-b3a3-e879a7f03df0.roa
Signing time:             Thu 17 Nov 2022 12:00:00 +0000
ROA not before:           Thu 17 Nov 2022 12:00:00 +0000
ROA not after:            Fri 23 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        54.5.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f3:cd:93:1f:65:fd:8d:d6:62:3f:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 17 12:00:00 2022 GMT
            Not After : Dec 23 05:00:00 2022 GMT
        Subject: CN=5e036855-48b8-4f70-9a49-489611d74a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:48:24:98:6a:72:43:51:f5:e1:de:13:dd:6d:
                    4b:c9:eb:11:66:9a:2a:ac:d0:60:60:e4:78:f3:e1:
                    64:ad:97:0d:2e:78:34:5f:b8:a0:93:9c:da:8c:0a:
                    d3:90:e8:94:c8:f4:88:46:60:eb:40:d2:eb:e5:43:
                    f0:b5:e6:90:3a:80:21:2f:9f:57:c3:fe:8f:b5:fa:
                    ef:f2:53:aa:5a:57:dc:e1:25:02:7c:8a:46:93:90:
                    25:64:bb:16:75:54:90:83:8a:07:7f:e0:e1:96:97:
                    4d:4b:b7:ab:7b:cc:e3:7a:7f:e9:c4:6d:e8:d1:0d:
                    95:6e:88:e4:36:30:03:38:af:60:f3:80:65:9f:e2:
                    78:b7:a0:51:d9:69:24:78:e4:4e:ab:d6:a6:fd:8c:
                    bb:c8:71:b5:8e:ef:24:84:f4:e5:cc:84:4f:27:9d:
                    2e:34:79:0b:12:e5:14:f0:43:f9:e9:be:da:5c:eb:
                    e0:e7:66:84:5d:96:cd:53:c8:3b:7c:6e:6a:9a:d8:
                    5f:e8:84:e0:f5:b2:f8:01:c7:f9:ab:93:32:d4:5e:
                    9f:e9:5f:ee:03:fa:71:b6:91:10:74:21:b9:de:88:
                    ad:ab:cd:ed:e3:c9:f8:be:0f:42:62:a4:d8:ff:00:
                    dd:bc:85:0e:b9:98:53:b2:a7:98:c4:ba:03:86:90:
                    72:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:24:0D:89:F5:8F:0B:B7:1E:3E:F8:1A:11:C7:35:36:07:34:E5:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aebab5c7-955e-35f3-b3a3-e879a7f03df0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.5.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:43:52:6a:cc:28:31:e9:38:9c:5b:f6:93:d3:c6:de:0a:69:
         7d:16:a2:2d:d5:6d:30:18:c4:a2:b0:08:da:09:da:c1:8e:fc:
         83:b9:03:06:2a:3e:eb:a2:a0:75:8a:b0:05:ec:1d:d1:1e:8d:
         b4:f6:d0:a8:70:fc:76:60:d3:73:f5:55:81:c5:b6:10:76:69:
         1f:29:d6:dc:18:6f:12:98:63:64:bf:be:51:6d:e5:f6:ac:5d:
         19:cc:0d:91:72:42:54:c1:2f:42:7d:29:ed:fe:80:65:51:8a:
         f8:ff:e9:e5:f4:99:a8:cf:c5:ce:5d:10:6b:db:d8:1a:36:15:
         cf:2e:34:8f:0e:4d:ea:d3:e6:ab:3f:73:2f:03:92:c6:ec:36:
         91:53:cb:7a:2f:42:dc:c4:e9:95:be:46:24:e5:30:0c:ec:f3:
         a4:c4:73:3b:2a:24:f0:3a:e2:1b:ca:a6:91:b1:a0:52:84:d3:
         26:f8:9e:e4:e6:14:d0:17:f8:e9:09:46:01:4a:04:cc:96:c7:
         5f:44:36:37:1c:07:54:e2:35:c4:7e:75:42:8a:e1:9f:58:e3:
         ef:6d:fc:2f:f7:1a:ad:fa:12:73:1c:29:ff:b4:e3:5e:45:81:
         be:d7:36:45:ba:7d:6e:ca:bd:a7:ab:8b:61:5f:2f:42:62:7a:
         25:42:79:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:22 2025 by rpki-client