Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c866c64d-b6c6-34a8-bb90-eeaa2413712e.roa
File:                     c866c64d-b6c6-34a8-bb90-eeaa2413712e.roa (raw, json)
Hash identifier:          2FjX05ga6pqeOsHYj4sjBWxVhDRDz+HAOaE/O63DMgU=
Subject key identifier:   67:08:6D:F0:CA:0E:DB:39:D7:02:51:CE:E5:F9:71:27:3F:93:7F:6D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F30ABEAE514978D4B6E12E260
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c866c64d-b6c6-34a8-bb90-eeaa2413712e.roa
Signing time:             Thu 08 Sep 2022 12:00:00 +0000
ROA not before:           Thu 08 Sep 2022 12:00:00 +0000
ROA not after:            Fri 14 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        54.102.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:30:ab:ea:e5:14:97:8d:4b:6e:12:e2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep  8 12:00:00 2022 GMT
            Not After : Oct 14 04:00:00 2022 GMT
        Subject: CN=d073e77a-57fb-473f-860a-0439fa8b33f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f7:ac:17:45:26:52:f8:c7:2f:59:0d:f6:49:
                    58:f7:f3:ee:ce:b1:2c:71:40:b9:16:4a:44:d2:8c:
                    04:72:4e:80:9d:62:fe:56:3a:82:92:dd:ac:1f:5c:
                    ae:1e:47:88:53:bc:f3:f3:95:2a:14:b5:ca:d7:46:
                    09:48:81:4b:a3:48:5e:99:73:2c:e0:48:7c:76:04:
                    b1:de:6b:be:df:32:62:0c:1e:ba:f5:32:e6:1a:01:
                    83:47:82:5f:b3:04:64:84:a7:b3:a7:07:bb:c0:f8:
                    99:67:11:60:a9:bf:0e:a8:8a:88:ea:33:17:c6:48:
                    22:fa:90:78:65:27:26:e5:38:52:94:d4:1f:22:60:
                    56:12:31:cf:5f:c8:9d:3c:9a:67:95:4c:f2:72:d3:
                    86:6c:3b:f4:12:17:6e:9f:3e:e3:af:00:8c:00:08:
                    3c:49:c4:99:69:40:1d:35:c9:37:70:97:56:d0:5f:
                    24:a3:e3:03:3e:1d:1d:4c:31:e3:b7:8d:b4:7b:33:
                    af:b7:7f:90:13:7f:1c:b2:9e:1c:31:a7:9f:ac:ae:
                    5d:a7:18:99:03:f2:4b:02:be:ff:81:9f:75:a0:31:
                    14:da:a0:53:1f:17:04:03:86:45:77:d7:89:54:8c:
                    54:a8:91:2c:3c:c6:ce:c1:79:07:fa:82:88:2e:58:
                    17:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:08:6D:F0:CA:0E:DB:39:D7:02:51:CE:E5:F9:71:27:3F:93:7F:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c866c64d-b6c6-34a8-bb90-eeaa2413712e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.102.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:ae:d6:e9:e2:de:67:45:b1:c4:da:4c:5a:92:72:89:f4:48:
         e0:85:04:cb:7e:71:68:45:d2:79:b2:18:4e:51:2a:61:dc:a2:
         c6:6b:75:f7:ce:9b:d4:fe:7f:1c:0e:10:b5:7a:03:2d:03:59:
         96:59:1b:74:9c:9a:2b:d9:02:01:c6:d6:af:7a:35:bb:70:83:
         b0:bd:9e:52:b8:22:9d:58:c1:48:99:29:64:b7:4f:17:83:75:
         cd:2a:22:4d:ca:4f:83:61:a1:16:e6:86:9e:ac:fe:11:be:0c:
         e9:f4:d8:25:4a:63:ad:6e:ac:9b:f2:16:5d:2d:ff:01:f9:45:
         02:77:60:24:6b:7d:55:d6:43:fa:b9:ea:ef:e9:7b:8e:5a:40:
         1c:75:b4:7d:4a:57:d7:39:0e:9a:05:16:df:41:9c:59:22:6a:
         e6:d7:a1:61:b0:f9:57:e9:65:88:87:fe:b2:91:db:51:e1:26:
         c9:20:71:61:d8:8e:06:4d:96:fa:50:25:31:09:16:3b:25:e3:
         40:b3:ef:54:b8:69:05:7e:6d:1c:1f:62:0c:ec:62:be:0e:b8:
         12:36:d1:87:87:d5:11:ad:4c:19:c7:a5:c5:f1:a8:e0:13:b4:
         44:16:f1:3f:e6:a9:d6:84:1b:5e:bd:79:0f:38:34:79:90:8a:
         c6:1c:36:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:50 2025 by rpki-client