Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c324b7c9-85b9-3bbc-b73b-e973676c85fb.roa
File:                     c324b7c9-85b9-3bbc-b73b-e973676c85fb.roa (raw, json)
Hash identifier:          lF/+5l4CCjvg5b5P0SoKCTyzhtQFIzgcwUAqBzhLG5c=
Subject key identifier:   37:79:F1:12:84:42:33:1C:57:4A:C1:4F:A7:CC:D3:B6:DD:7D:62:B1
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E946C0F2596FE8ABB11192200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c324b7c9-85b9-3bbc-b73b-e973676c85fb.roa
Signing time:             Fri 15 Jul 2022 12:00:00 +0000
ROA not before:           Fri 15 Jul 2022 12:00:00 +0000
ROA not after:            Sat 20 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        54.8.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:94:6c:0f:25:96:fe:8a:bb:11:19:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 15 12:00:00 2022 GMT
            Not After : Aug 20 04:00:00 2022 GMT
        Subject: CN=085c73a2-ace6-41dc-8174-4ff59fb68e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a2:de:e5:0c:58:fb:1b:86:9e:d5:75:85:eb:
                    d5:fb:75:27:90:dd:08:cc:11:75:23:58:94:da:f1:
                    17:8b:16:a7:1b:8a:18:f3:68:75:ae:18:34:38:46:
                    1e:fd:26:1f:f2:49:b1:a7:01:fc:ac:75:b7:34:7d:
                    87:a7:8a:30:b8:24:44:9a:0b:94:0a:5c:87:d4:2a:
                    54:3b:0c:f9:2f:17:54:8e:df:46:44:86:b9:5d:46:
                    00:67:6b:8c:2c:4c:dc:24:64:1b:ac:a2:08:49:06:
                    0c:01:36:07:71:75:35:21:ed:7a:d9:0e:4b:19:41:
                    62:c0:77:00:78:af:ff:b9:c2:a9:fd:ad:49:e5:df:
                    3a:7b:ca:cc:6b:31:2d:5e:f1:87:6d:b5:6c:6f:d5:
                    d6:1a:ed:14:0d:39:b8:aa:b6:b8:fe:1b:c4:6e:2c:
                    3a:c9:d8:85:f9:67:d9:20:81:a2:64:0f:05:6d:f4:
                    f9:79:f4:cb:95:26:fa:21:a8:f3:49:fd:ef:3e:14:
                    eb:ba:4e:c6:8a:75:40:5d:b9:97:fa:20:65:b3:af:
                    53:67:9d:42:48:b1:91:b9:55:1a:c8:f9:fb:69:5d:
                    8e:2b:23:fc:f7:95:06:9a:bb:28:83:77:5d:38:b9:
                    99:78:e4:71:00:c2:dd:b2:03:bf:e3:ba:df:f2:60:
                    3b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:79:F1:12:84:42:33:1C:57:4A:C1:4F:A7:CC:D3:B6:DD:7D:62:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c324b7c9-85b9-3bbc-b73b-e973676c85fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.8.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:cd:c5:2d:13:54:89:3d:f9:1e:4f:2a:9b:46:f9:ed:93:35:
         c6:4e:4e:20:94:25:63:a6:65:e5:59:c2:c5:39:1d:de:41:40:
         32:aa:e5:c9:d9:25:f1:3b:c5:ea:07:56:54:53:49:38:bb:79:
         98:ee:34:03:19:dd:68:c5:5a:16:dc:42:5f:8a:be:a4:f7:49:
         c7:58:99:dd:ce:8d:66:87:3d:ba:e5:12:7c:5b:af:50:74:dd:
         fc:fa:4f:81:4e:f4:9c:f1:3d:0d:69:1a:af:b0:d9:c3:cf:23:
         ee:1f:5b:d3:14:50:34:38:93:cc:59:3c:85:03:8a:f7:00:3e:
         e4:17:32:34:ab:47:81:35:88:33:70:db:42:08:4f:23:05:ed:
         05:fd:7d:cf:d6:01:32:30:02:2d:cd:2a:a2:db:5d:a8:28:1e:
         3b:58:36:5c:aa:29:2d:25:a7:09:06:fd:d2:94:52:dc:98:c2:
         ef:ee:66:3c:88:c2:97:6d:cd:40:b4:27:f2:15:99:2a:d7:0c:
         11:c7:a5:eb:da:8a:f6:73:e7:04:12:e8:8f:17:d5:5f:c9:88:
         e4:1f:c9:a9:b3:40:77:15:f1:c5:af:b9:6b:e3:79:29:33:38:
         86:ce:f1:3b:57:3f:21:6f:44:1b:8b:58:dd:4c:87:d7:25:08:
         03:c9:5a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:42 2025 by rpki-client