Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c5167417-7ecd-3d28-945c-d4782979f946.roa
File:                     c5167417-7ecd-3d28-945c-d4782979f946.roa (raw, json)
Hash identifier:          tWCsNKtV4kemK27PYPWUDCfUol56C2tH1JraOu3cdfk=
Subject key identifier:   4E:22:7B:F5:E2:C2:E2:B7:34:7D:3B:2F:BF:2B:4F:5A:8C:4A:CB:24
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E943F62A6E6F1EEB6209F6E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c5167417-7ecd-3d28-945c-d4782979f946.roa
Signing time:             Thu 14 Jul 2022 21:12:08 +0000
ROA not before:           Thu 14 Jul 2022 21:12:08 +0000
ROA not after:            Fri 19 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        54.35.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:94:3f:62:a6:e6:f1:ee:b6:20:9f:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 14 21:12:08 2022 GMT
            Not After : Aug 19 04:00:00 2022 GMT
        Subject: CN=016dcfb7-f130-4065-9ef4-5195929ea4f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:19:ae:7d:41:ad:e3:2b:f9:c2:46:a1:e1:22:
                    5f:87:2f:13:2c:4e:0e:e9:d5:32:34:71:47:8a:4b:
                    5b:1e:43:6c:c8:08:13:0e:5b:ed:ee:02:7d:a1:ab:
                    2c:19:99:ef:8e:2a:e1:81:63:fc:4c:fe:29:f7:c7:
                    33:03:fe:98:63:4e:19:42:42:00:ab:86:38:d2:e4:
                    f4:2b:ac:51:05:a4:14:97:82:0f:f2:c9:d3:50:d3:
                    c5:a1:19:ad:bc:2b:91:d7:15:7f:ec:ea:02:67:01:
                    e6:6e:92:a0:51:80:cd:f9:b4:75:ec:fe:eb:e7:06:
                    72:84:f9:2e:67:cf:d7:e4:36:0f:5d:46:4a:9a:07:
                    11:98:30:2c:75:cd:b6:c2:87:98:26:61:67:7c:91:
                    5d:c1:98:9c:16:5f:50:36:c7:41:44:ec:c0:12:32:
                    52:43:19:04:38:a9:8a:0a:e0:ae:6a:4f:17:74:9b:
                    78:be:a7:75:b2:c9:1a:b0:bb:af:c0:ba:18:48:4c:
                    26:73:f3:6f:9b:9a:9c:9e:c3:51:b8:5f:07:2f:75:
                    a1:c2:b7:bb:c8:51:5e:e1:fe:5a:40:2f:a1:5b:d0:
                    38:ab:22:f1:ca:d4:57:bd:09:f5:7a:32:a9:4a:8b:
                    b6:1a:f8:1b:a2:ad:7f:ee:b1:b4:b6:b5:d7:33:54:
                    65:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:22:7B:F5:E2:C2:E2:B7:34:7D:3B:2F:BF:2B:4F:5A:8C:4A:CB:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c5167417-7ecd-3d28-945c-d4782979f946.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.35.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:42:5a:1f:6c:b6:99:d9:d8:f8:7a:69:23:17:56:32:ee:ae:
         b9:24:f3:8d:91:dc:5e:49:e0:2c:61:3d:67:76:4d:a9:17:7f:
         96:c4:bc:4c:50:76:55:ee:fb:5c:b1:64:47:75:25:ed:aa:49:
         98:d8:37:bf:0b:c3:2e:24:80:98:0b:00:91:f9:50:df:d4:08:
         05:77:dd:fb:8a:a5:aa:c5:8f:fa:d3:26:09:e4:fb:2b:d4:41:
         19:6c:a8:c9:90:8b:88:3f:3f:41:56:33:4a:9e:27:bd:13:c5:
         67:f5:97:a9:51:64:cb:c4:6c:34:07:09:37:e4:b0:28:94:64:
         09:65:6a:ab:7f:3d:8a:13:45:e5:30:4a:b5:7c:87:1c:ab:c6:
         a9:c4:18:c2:2e:c4:21:75:2a:f1:2d:bb:00:52:78:17:97:c2:
         ce:6a:5a:7f:d9:58:80:e3:7a:7c:da:dc:1f:31:84:80:8b:bb:
         ba:02:36:1c:d3:30:2b:c8:e7:3d:4b:e3:ad:e5:a0:e2:05:3a:
         56:e3:33:6c:f2:14:7b:0f:c5:44:b0:50:54:aa:de:83:bb:b5:
         f6:c9:cf:0f:1b:d1:36:5c:8e:c6:f5:30:1d:af:92:63:45:9d:
         4e:c1:8e:ff:d8:9b:a4:35:62:99:77:74:18:cd:c5:37:54:63:
         83:3d:8f:a3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD6UP2Km5vHutiCfboAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcxNDIxMTIwOFoXDTIyMDgxOTA0MDAwMFowLzEtMCsGA1UEAxMk
MDE2ZGNmYjctZjEzMC00MDY1LTllZjQtNTE5NTkyOWVhNGYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixmufUGt4yv5wkah4SJfhy8TLE4O6dUyNHFH
iktbHkNsyAgTDlvt7gJ9oassGZnvjirhgWP8TP4p98czA/6YY04ZQkIAq4Y40uT0
K6xRBaQUl4IP8snTUNPFoRmtvCuR1xV/7OoCZwHmbpKgUYDN+bR17P7r5wZyhPku
Z8/X5DYPXUZKmgcRmDAsdc22woeYJmFnfJFdwZicFl9QNsdBROzAEjJSQxkEOKmK
CuCuak8XdJt4vqd1sskasLuvwLoYSEwmc/Nvm5qcnsNRuF8HL3Whwre7yFFe4f5a
QC+hW9A4qyLxytRXvQn1ejKpSou2Gvgboq1/7rG0trXXM1RlDQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFE4ie/XiwuK3NH07L78rT1qMSsskMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYzUxNjc0MTctN2VjZC0z
ZDI4LTk0NWMtZDQ3ODI5NzlmOTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMANiMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAJUJaH2y2mdnY+HppIxdWMu6uuSTzjZHcXkngLGE9Z3ZNqRd/lsS8TFB2
Ve77XLFkR3Ul7apJmNg3vwvDLiSAmAsAkflQ39QIBXfd+4qlqsWP+tMmCeT7K9RB
GWyoyZCLiD8/QVYzSp4nvRPFZ/WXqVFky8RsNAcJN+SwKJRkCWVqq389ihNF5TBK
tXyHHKvGqcQYwi7EIXUq8S27AFJ4F5fCzmpaf9lYgON6fNrcHzGEgIu7ugI2HNMw
K8jnPUvjreWg4gU6VuMzbPIUew/FRLBQVKreg7u19snPDxvRNlyOxvUwHa+SY0Wd
TsGO/9ibpDVimXd0GM3FN1Rjgz2Pow==
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:58:35 2025 by rpki-client