Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9fdfac3-ea2b-3179-862c-9fc89e0cb04c.roa
File:                     d9fdfac3-ea2b-3179-862c-9fc89e0cb04c.roa (raw, json)
Hash identifier:          C4KFjgllpChodsTohkjO1i6zl/QqmuTTwR7/5xboRuQ=
Subject key identifier:   89:84:7C:A9:BC:0A:2B:8F:C9:E6:06:2F:25:3E:C1:19:59:29:DE:59
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D82A10FC6B76F6A9FB4B1DEC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9fdfac3-ea2b-3179-862c-9fc89e0cb04c.roa
Signing time:             Fri 08 Apr 2022 04:00:00 +0000
ROA not before:           Fri 08 Apr 2022 04:00:00 +0000
ROA not after:            Fri 13 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        54.8.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:82:a1:0f:c6:b7:6f:6a:9f:b4:b1:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr  8 04:00:00 2022 GMT
            Not After : May 13 04:00:00 2022 GMT
        Subject: CN=946f6320-de86-40a9-94ea-10760d8e1244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:02:29:15:68:06:b3:e1:2d:ee:1e:72:6f:22:
                    ee:dc:d7:7d:59:65:cd:5d:1b:3b:de:01:ef:99:b2:
                    ef:89:e5:d5:8c:5c:6d:eb:90:1c:7d:84:b5:01:d9:
                    90:02:0c:9f:2d:43:b7:92:4e:3f:23:83:38:53:b9:
                    11:58:5f:86:d1:8f:b2:b6:8e:d9:cb:76:a2:c6:9a:
                    ba:c8:00:91:84:70:90:33:e2:ac:0d:b6:2c:48:0f:
                    0f:11:39:39:07:35:eb:7e:e9:1d:a4:5d:d5:26:90:
                    cf:1d:e8:32:a0:eb:32:7d:0d:21:30:8e:68:50:51:
                    e3:16:04:61:0a:f3:51:a9:15:77:23:b6:e8:8c:da:
                    0c:01:70:b0:48:ac:37:24:eb:30:23:6b:7f:db:ef:
                    e9:55:5d:78:2f:d1:7d:b6:fe:2b:5b:41:84:0a:60:
                    50:64:8c:28:06:44:72:c5:b9:2b:01:6c:a5:94:24:
                    02:a5:77:81:c3:3d:aa:08:ae:d6:ba:15:60:fd:38:
                    46:f6:e1:05:04:70:69:2c:88:47:2a:ac:b0:fe:27:
                    fd:d9:b4:c3:3a:5d:e6:67:4e:34:60:a0:da:b2:29:
                    4e:85:9e:59:fb:a0:11:1e:9d:98:ed:47:26:e5:45:
                    b1:07:18:da:07:cd:0a:fd:6b:87:fc:00:8c:9f:31:
                    f8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:84:7C:A9:BC:0A:2B:8F:C9:E6:06:2F:25:3E:C1:19:59:29:DE:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9fdfac3-ea2b-3179-862c-9fc89e0cb04c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.8.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:80:1f:71:ac:38:88:d7:a1:47:63:53:74:84:d1:9f:fc:29:
         1e:99:b1:98:a5:49:05:86:70:5c:7c:7c:2e:61:4d:64:fc:c1:
         e3:d5:a4:e0:4b:e0:4f:e1:c7:c4:53:a1:81:df:02:5d:d4:0c:
         7c:7f:38:05:1f:5d:31:1d:83:cd:b1:4c:25:a4:24:72:43:c1:
         cc:fd:1e:58:0b:e7:b5:07:9e:33:cb:ff:2f:e7:29:97:74:04:
         16:3a:dd:66:5d:d6:cf:e4:fb:a0:cc:d7:c7:3f:5d:93:83:87:
         89:d8:3e:7d:5a:f2:c1:85:ef:64:0f:06:63:c4:73:b6:78:40:
         cc:0d:f8:ab:78:1d:36:02:2c:d9:4b:7c:14:1d:c6:33:ef:b2:
         9f:74:fb:98:69:2f:78:37:9c:28:45:d0:16:75:3e:8a:06:2a:
         65:de:9d:7d:89:2c:8f:8f:a5:f5:43:cb:51:d7:e4:88:22:fc:
         70:d0:42:a6:51:52:85:82:4c:ff:c1:61:ad:3e:03:e4:5b:13:
         e9:6a:83:c7:77:66:df:69:ba:c4:44:1c:81:8b:59:af:b6:ba:
         a4:45:ee:82:21:3e:c1:8f:24:80:fb:bf:22:d7:2e:e6:8a:60:
         31:8e:83:90:3a:b1:41:0e:b0:4a:17:5b:0b:70:55:2c:76:3c:
         64:7d:f8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:09:33 2025 by rpki-client