Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bddaebb3-f21d-352f-9e6c-e5e2d63a7faf.roa
File:                     bddaebb3-f21d-352f-9e6c-e5e2d63a7faf.roa (raw, json)
Hash identifier:          +f/i/4OYlQ2qCLCW0/hUb8G0ceoe/rLbehlHje4+rA4=
Subject key identifier:   1A:7E:FA:3F:46:D3:22:C8:BB:E0:40:56:20:07:C7:59:57:98:C9:1D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EBB6B2CE2F9178914939797A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bddaebb3-f21d-352f-9e6c-e5e2d63a7faf.roa
Signing time:             Thu 28 Jul 2022 12:00:00 +0000
ROA not before:           Thu 28 Jul 2022 12:00:00 +0000
ROA not after:            Fri 02 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        54.43.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:bb:6b:2c:e2:f9:17:89:14:93:97:97:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 28 12:00:00 2022 GMT
            Not After : Sep  2 04:00:00 2022 GMT
        Subject: CN=eb9dadd4-61ee-4c62-89f5-ad398a1905f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d8:a6:71:0f:d5:ba:f4:0c:13:7b:54:e5:3e:
                    73:86:71:6b:c6:b8:c1:fb:2e:bb:81:1e:ff:56:38:
                    45:ba:d3:ce:8f:1f:62:b7:5f:ef:4d:8b:b9:25:a0:
                    8e:f1:bb:ea:66:67:06:0e:9e:29:06:6f:eb:44:12:
                    27:90:95:b5:81:db:f1:f5:dc:1f:55:90:d4:36:0d:
                    78:02:f0:e6:29:80:45:e5:43:44:f6:26:76:33:37:
                    c0:c6:47:e8:9c:af:85:14:74:f9:a9:ce:ac:1c:67:
                    a8:e0:71:90:5a:16:f8:6e:b8:54:4c:3e:0c:09:c7:
                    f2:75:80:86:55:7d:d0:ab:53:8c:53:0b:11:ac:d4:
                    94:39:e2:9a:1b:76:c8:21:e0:dc:95:df:44:60:fd:
                    a4:aa:26:53:ab:24:28:6c:38:76:79:09:9a:07:c5:
                    0f:f4:7e:de:2a:7b:22:7e:0c:a0:c6:68:a5:03:a2:
                    ee:96:c8:04:6d:9f:bf:a5:46:13:93:a1:da:a9:27:
                    c7:2f:87:0e:da:0c:18:eb:e5:f2:fc:08:35:c9:55:
                    a7:e7:fd:d0:11:76:56:45:59:97:2c:38:e0:ee:a1:
                    0d:9c:dc:10:a1:1a:0d:b4:20:8b:c2:a3:5a:9c:01:
                    46:63:40:e9:f7:d3:36:22:cd:7a:79:cc:75:13:02:
                    9b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7E:FA:3F:46:D3:22:C8:BB:E0:40:56:20:07:C7:59:57:98:C9:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bddaebb3-f21d-352f-9e6c-e5e2d63a7faf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.43.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:48:92:02:cb:7c:0a:bf:5f:86:17:8a:b2:37:31:d9:0f:ea:
         cf:38:51:71:c5:5b:d3:f7:e5:55:94:3e:95:da:89:cb:00:4d:
         5b:66:9b:03:e4:34:79:04:a0:03:69:91:9a:52:65:bd:e7:11:
         28:0b:ac:2c:3a:2d:ed:33:9e:01:78:b2:89:4e:38:dc:eb:78:
         b6:f3:56:6c:e7:5b:d7:07:4a:3a:d1:ee:d2:22:02:4f:58:a8:
         09:75:34:dc:30:d3:89:3d:d2:c6:ca:d7:96:93:a8:c1:7d:54:
         60:21:14:69:f2:7f:eb:b4:cd:1b:98:6e:8f:83:ba:eb:f6:aa:
         3b:54:17:c6:5e:19:11:02:df:e1:52:ef:5d:95:82:cc:9d:a9:
         ec:21:ea:bd:2d:cf:bc:8d:be:2c:79:48:80:84:e5:ea:e7:1d:
         f1:2c:6e:15:a7:a5:8c:fd:0c:c1:f1:7d:1b:eb:cd:29:be:c6:
         b9:d0:e9:1e:19:c4:6c:eb:be:a8:be:12:23:de:da:b3:b1:73:
         28:e5:1a:b7:2b:37:81:55:87:2d:f3:08:95:89:10:9f:2f:ab:
         b8:62:2b:7c:72:d8:f6:30:38:4f:ac:5a:7b:fe:7f:db:30:06:
         f2:7e:a6:4a:74:86:8a:42:b1:b7:de:31:b7:26:08:6d:3e:ab:
         05:37:69:fe
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD67ayzi+ReJFJOXl6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcyODEyMDAwMFoXDTIyMDkwMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZWI5ZGFkZDQtNjFlZS00YzYyLTg5ZjUtYWQzOThhMTkwNWY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidimcQ/VuvQME3tU5T5zhnFrxrjB+y67gR7/
VjhFutPOjx9it1/vTYu5JaCO8bvqZmcGDp4pBm/rRBInkJW1gdvx9dwfVZDUNg14
AvDmKYBF5UNE9iZ2MzfAxkfonK+FFHT5qc6sHGeo4HGQWhb4brhUTD4MCcfydYCG
VX3Qq1OMUwsRrNSUOeKaG3bIIeDcld9EYP2kqiZTqyQobDh2eQmaB8UP9H7eKnsi
fgygxmilA6LulsgEbZ+/pUYTk6HaqSfHL4cO2gwY6+Xy/Ag1yVWn5/3QEXZWRVmX
LDjg7qENnNwQoRoNtCCLwqNanAFGY0Dp99M2Is16ecx1EwKb3QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBp++j9G0yLIu+BAViAHx1lXmMkdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYmRkYWViYjMtZjIxZC0z
NTJmLTllNmMtZTVlMmQ2M2E3ZmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMANiswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAiUiSAst8Cr9fhheKsjcx2Q/qzzhRccVb0/flVZQ+ldqJywBNW2abA+Q0
eQSgA2mRmlJlvecRKAusLDot7TOeAXiyiU443Ot4tvNWbOdb1wdKOtHu0iICT1io
CXU03DDTiT3SxsrXlpOowX1UYCEUafJ/67TNG5huj4O66/aqO1QXxl4ZEQLf4VLv
XZWCzJ2p7CHqvS3PvI2+LHlIgITl6ucd8SxuFaeljP0MwfF9G+vNKb7GudDpHhnE
bOu+qL4SI97as7FzKOUatys3gVWHLfMIlYkQny+ruGIrfHLY9jA4T6xae/5/2zAG
8n6mSnSGikKxt94xtyYIbT6rBTdp/g==
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:08:19 2025 by rpki-client