Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d76df580-be7c-3147-8593-282210d3568b.roa
File:                     d76df580-be7c-3147-8593-282210d3568b.roa (raw, json)
Hash identifier:          Y5HbSBtGVXE0JMhw8JUnXzOuQD3MhFtrDQ9S/+PIHms=
Subject key identifier:   6F:CD:E4:3B:B1:BA:9D:D6:56:AE:CC:5D:BF:BD:4E:BD:5D:C5:A1:99
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584011163136D770B98D19F70E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d76df580-be7c-3147-8593-282210d3568b.roa
Signing time:             Mon 28 Nov 2022 12:00:00 +0000
ROA not before:           Mon 28 Nov 2022 12:00:00 +0000
ROA not after:            Tue 03 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        54.54.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:11:16:31:36:d7:70:b9:8d:19:f7:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 28 12:00:00 2022 GMT
            Not After : Jan  3 05:00:00 2023 GMT
        Subject: CN=bf89ba32-82d1-4ed0-97c8-9a9b7a320fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:68:35:45:6c:50:d9:9f:7e:26:12:77:d4:ce:
                    85:c7:a5:9a:b1:b5:9f:06:ef:d2:7f:88:af:a4:dc:
                    35:2f:6e:18:9d:be:04:35:60:ca:ff:6c:91:4d:dc:
                    ca:c8:b5:af:8d:ef:6e:64:17:47:3c:7e:6d:0d:cc:
                    d4:cc:57:63:27:cb:fd:86:3c:2b:5b:d4:bc:76:1d:
                    12:86:c0:17:5d:3a:02:77:f8:8e:f6:3a:28:3d:5b:
                    7e:60:4f:2e:be:da:19:a8:ff:dc:10:dc:60:87:04:
                    f9:0d:2a:0f:9b:e5:49:07:1d:1c:97:74:fe:73:ca:
                    e8:ab:6b:6e:1c:63:50:11:80:ca:f5:a1:0e:c1:3b:
                    ba:c2:64:1b:a2:28:9c:23:c4:98:6f:ff:65:2c:1c:
                    9f:f5:6e:f5:f4:8d:88:b7:b7:dc:a1:e6:bd:70:c7:
                    2f:88:36:61:5d:2b:40:5c:39:24:c2:10:27:05:9e:
                    59:38:2a:c0:e2:42:7f:be:66:6f:06:1d:3b:47:aa:
                    34:07:25:9d:67:98:9a:e9:3b:5e:ea:69:f9:03:4e:
                    89:8a:e3:c8:d4:14:5c:f1:ed:8b:00:24:72:e1:39:
                    cc:44:8f:f9:b9:d9:7f:31:db:b5:a8:e1:50:b7:ec:
                    f5:a3:dc:57:e6:2b:6e:98:a7:3e:ec:c0:a2:51:eb:
                    5d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:CD:E4:3B:B1:BA:9D:D6:56:AE:CC:5D:BF:BD:4E:BD:5D:C5:A1:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d76df580-be7c-3147-8593-282210d3568b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.54.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:96:d5:81:85:7c:75:77:0e:01:e0:d4:6e:d6:69:3d:b4:3a:
         36:29:d3:96:e1:d2:1c:75:b8:14:23:b1:f5:2d:c2:1f:6d:42:
         93:46:5c:5a:7c:b9:0f:90:7b:9a:76:83:13:e1:07:ab:36:29:
         04:a3:8f:a5:47:c3:5f:79:83:a6:07:36:fd:0a:eb:73:14:92:
         08:0f:3e:89:8c:82:23:c1:f7:e5:1e:d7:86:75:97:f7:f0:32:
         8e:3a:fa:af:10:3b:d2:de:1c:68:ee:6a:30:fb:8a:02:a1:44:
         6d:77:59:39:ca:32:9b:fc:07:c0:7d:dd:99:c7:d9:7c:51:8e:
         76:d1:19:b6:fd:43:5b:9c:aa:a5:3d:0d:9c:5f:c1:e5:53:0e:
         e0:3e:67:75:5b:50:54:2d:de:28:fb:81:47:43:6a:10:b0:bd:
         b1:6f:de:99:2e:92:d7:a7:2a:74:39:28:20:c2:16:60:2e:19:
         3a:66:a5:37:f6:2b:de:87:43:3b:21:c9:4d:b7:e3:6b:a2:b4:
         70:57:77:75:02:f0:d8:fc:46:50:27:4e:56:0a:3c:94:e4:cb:
         fe:4c:30:43:da:16:01:75:c1:b0:6c:d4:5c:05:09:cc:12:bb:
         78:f6:f7:ed:f0:b6:5b:28:41:90:5d:2e:15:57:a5:b3:c9:05:
         58:df:79:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:32 2025 by rpki-client