Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b3a2995f-50dc-30b4-a157-984cf7681e05.roa
File:                     b3a2995f-50dc-30b4-a157-984cf7681e05.roa (raw, json)
Hash identifier:          dkyPZLsvSE9lF1kAp9qs2SLUIIvd6cb1NgYhcl+P3Aw=
Subject key identifier:   FF:AA:28:B9:FF:F7:E1:64:BE:C2:F6:CC:1D:1E:89:71:AB:92:E3:A8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F56CC0540ADAC48F989451B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b3a2995f-50dc-30b4-a157-984cf7681e05.roa
Signing time:             Thu 22 Sep 2022 12:00:00 +0000
ROA not before:           Thu 22 Sep 2022 12:00:00 +0000
ROA not after:            Fri 28 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        54.102.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:56:cc:05:40:ad:ac:48:f9:89:45:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 22 12:00:00 2022 GMT
            Not After : Oct 28 04:00:00 2022 GMT
        Subject: CN=852935ed-22b5-4a6d-9649-a9a2db6d56ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3a:0a:ae:c2:bd:7f:f8:22:fc:7a:4c:b2:e0:
                    13:9e:33:76:03:18:17:ed:08:78:58:01:79:45:ea:
                    b0:81:08:54:00:ca:d0:61:19:89:cd:58:82:6a:49:
                    a7:d8:3e:31:c2:36:8b:ce:e8:55:c6:4e:fa:f2:85:
                    fc:b7:a4:26:36:b7:b9:57:06:93:0c:21:03:94:74:
                    c2:79:0a:58:67:b5:5c:3b:f5:0e:f3:b4:34:d2:0f:
                    fb:57:84:b0:10:8a:9a:0b:ca:69:2d:f6:c2:6d:c1:
                    70:f5:35:05:bb:29:d3:f0:1a:04:0a:e0:a3:82:c1:
                    d8:3f:67:4c:7d:6d:3e:11:df:0f:e8:1a:e0:22:1c:
                    73:5e:fd:9b:64:4b:50:8f:fb:7f:03:89:98:7b:a1:
                    64:5c:ea:78:fe:09:31:0b:ba:cb:38:1e:6d:ca:64:
                    e9:03:17:f3:2b:ac:e0:8c:b3:d5:9d:30:b7:e1:50:
                    53:06:2e:3e:7f:45:f5:e9:c7:ae:3c:d9:a9:f7:87:
                    dc:67:50:a4:d5:10:5c:12:3d:1b:e8:c5:de:07:9a:
                    be:96:d6:7e:27:00:ef:52:96:9c:6c:0b:89:a8:87:
                    68:af:1b:f8:84:a3:f9:3f:0a:5f:31:6a:17:80:cf:
                    16:e7:13:b6:62:6b:57:20:56:c1:e1:c1:8c:37:72:
                    c1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AA:28:B9:FF:F7:E1:64:BE:C2:F6:CC:1D:1E:89:71:AB:92:E3:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b3a2995f-50dc-30b4-a157-984cf7681e05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.102.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:d3:aa:44:71:25:f9:53:68:02:d3:13:63:fe:28:bf:15:a9:
         34:2e:e6:9d:70:57:9c:aa:6b:2d:42:de:97:ba:c2:e2:8e:44:
         f9:07:59:a3:f5:91:8a:41:6e:dc:75:49:a9:57:b7:97:b4:21:
         94:6e:32:92:22:b1:19:58:d1:b7:b5:af:37:d7:10:f0:69:7f:
         15:d3:f0:92:6e:03:86:2f:6a:65:7f:83:6c:5e:bc:f3:d7:f0:
         ed:ba:5f:51:95:6a:3e:bc:9e:2d:fb:01:4b:c1:ee:49:58:03:
         fc:e6:21:17:03:eb:17:e6:2e:c2:cc:c5:27:74:f7:b6:c2:d8:
         98:48:97:74:04:86:e2:4a:00:77:e1:31:5c:c4:a0:93:56:4b:
         16:e1:44:a7:05:bd:38:19:94:82:94:2e:d5:65:64:bc:ee:af:
         75:0b:8f:eb:41:5d:3c:89:8a:eb:e7:13:6d:3e:e9:fd:c7:cd:
         7d:96:29:e3:f6:c5:49:f0:37:08:68:ac:6c:b1:61:10:08:58:
         cb:05:35:ee:30:00:47:61:aa:32:e9:05:ce:8a:50:6d:09:47:
         4e:cd:42:f2:1c:84:c3:28:31:9a:82:0d:59:12:18:1e:64:27:
         7b:01:3d:f3:0b:df:8b:93:c5:4c:d7:2f:59:00:71:10:ec:d0:
         94:56:71:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:50 2025 by rpki-client