Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d4d1b6b7-80d2-3e1e-94b4-0f9ad13f66d1.roa
File:                     d4d1b6b7-80d2-3e1e-94b4-0f9ad13f66d1.roa (raw, json)
Hash identifier:          6AlaU4mojcHhax/Gw1t7vjgIyonz0zRZi4lhnx3+ujE=
Subject key identifier:   3D:1B:8E:32:26:87:56:96:68:35:E9:92:56:0E:0C:F3:74:1A:A0:4A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CE62CFC4B4123032508687500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d4d1b6b7-80d2-3e1e-94b4-0f9ad13f66d1.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        54.8.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e6:2c:fc:4b:41:23:03:25:08:68:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=a7dca389-3f8b-481c-ad36-8375234c8aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:72:b2:c4:39:aa:9e:e5:c7:b1:3a:84:2b:55:
                    7d:fa:c5:96:1f:92:92:9a:fa:86:11:3b:94:ce:09:
                    41:7a:1f:98:4e:26:5c:ad:8c:e1:88:c8:af:8d:a8:
                    12:bb:46:97:44:cc:0a:47:ad:f4:c4:91:9b:d3:e2:
                    bb:ec:22:41:b2:14:21:2d:c1:0a:ce:52:ff:67:c1:
                    e8:fa:71:15:ab:b3:8e:27:28:07:e9:86:91:b4:2f:
                    a1:13:ee:fa:90:6e:32:cf:d0:be:3b:24:ca:47:62:
                    31:96:73:f7:da:0f:01:61:65:ce:d2:03:94:78:69:
                    16:31:2f:fe:d3:df:9d:1f:81:3d:32:ef:57:a4:ce:
                    78:1e:fe:b0:de:e1:a3:48:62:bd:fc:ae:e3:47:25:
                    69:a6:65:18:0e:fc:d7:f9:86:ec:2b:7f:26:0f:0e:
                    d3:28:5d:6c:6e:c1:27:70:0b:d3:5b:25:53:55:54:
                    7f:29:b6:d9:a0:95:cc:e9:62:d8:d9:00:9c:27:80:
                    6c:77:61:69:97:b0:7d:a2:2a:e7:aa:34:f0:0a:2d:
                    ba:b1:aa:00:64:7a:39:4e:5d:39:3e:be:2d:c8:4f:
                    33:a0:2f:35:14:fc:02:4e:6b:99:e7:66:2d:48:5b:
                    d1:ba:67:66:29:d7:e2:6a:0f:eb:42:82:72:ec:14:
                    7f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1B:8E:32:26:87:56:96:68:35:E9:92:56:0E:0C:F3:74:1A:A0:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d4d1b6b7-80d2-3e1e-94b4-0f9ad13f66d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.8.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:07:a2:73:d9:3b:d8:77:70:c6:7a:ad:3b:a6:8f:d4:ee:7f:
         36:ed:11:95:63:0d:0c:73:a1:73:55:f1:b4:5e:4a:0b:d4:a4:
         de:fd:5c:26:50:9c:d7:28:63:2c:c1:0d:75:d6:c6:73:e7:1b:
         9c:d8:82:96:3b:9a:6b:fe:6d:b8:37:da:52:2a:ea:5a:13:1d:
         fd:c0:f4:bd:30:20:89:f8:93:06:0c:bf:26:dc:78:11:00:73:
         dc:99:40:78:b0:95:53:9c:45:ca:f7:fb:bf:cc:5b:f1:ee:59:
         89:ee:77:f7:70:5a:3b:e7:15:f4:6b:c7:5e:76:4a:41:0d:bd:
         e2:3b:e4:82:8e:77:ea:fc:fb:7a:fe:67:39:8c:56:60:be:82:
         b8:9c:af:a0:11:81:1a:d2:b4:9b:7b:c6:35:20:61:c8:b9:07:
         26:9f:df:d1:bc:67:fd:f7:a0:50:88:a5:fa:80:a4:b2:fc:fd:
         29:f1:ea:e4:05:0a:9a:70:8e:87:ab:31:07:06:3a:74:15:59:
         08:42:39:ff:bc:e6:b6:e3:65:c8:a2:42:e2:bc:87:5d:fb:34:
         00:67:30:9d:80:59:2d:70:a0:60:40:46:1c:fb:8b:d6:77:cf:
         b1:3a:e0:73:45:c8:fa:a1:13:82:e6:d5:ae:bc:d6:21:06:d1:
         96:0d:4e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:41:52 2025 by rpki-client