Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dd17f57a-9810-3118-b4c3-107c552491fc.roa
File:                     dd17f57a-9810-3118-b4c3-107c552491fc.roa (raw, json)
Hash identifier:          IDecWsmR0Mht/4r0ShmAYmhEjneqOPFQYVNeSFUxv7Y=
Subject key identifier:   0A:80:A8:F4:09:C4:19:74:9D:31:CE:22:4F:16:3A:78:19:69:22:E1
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FE9BDD623E46B36FBF3ACBF80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dd17f57a-9810-3118-b4c3-107c552491fc.roa
Signing time:             Mon 14 Nov 2022 12:00:00 +0000
ROA not before:           Mon 14 Nov 2022 12:00:00 +0000
ROA not after:            Tue 20 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        54.22.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:e9:bd:d6:23:e4:6b:36:fb:f3:ac:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 14 12:00:00 2022 GMT
            Not After : Dec 20 05:00:00 2022 GMT
        Subject: CN=76f44896-140b-4843-a0bb-67df9adf958a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:03:be:62:9d:54:c8:cb:d1:ef:b5:0e:20:7a:
                    62:5c:00:8c:23:a6:0c:cb:0d:1a:0f:c2:8d:06:3d:
                    5f:4f:5d:d0:49:64:cb:14:ce:ef:d7:81:e2:3d:a4:
                    c3:6b:ca:f6:95:c7:6e:ad:9e:5c:84:3f:16:9a:9f:
                    c4:fc:06:db:99:51:f6:83:6d:c7:85:22:b5:3a:a1:
                    d8:e7:36:51:ee:8b:23:fc:ff:31:85:40:4a:80:f7:
                    d3:a3:13:2a:7d:a5:a4:8e:0f:27:a9:d3:88:d7:5c:
                    75:a8:d1:66:43:4f:9f:a6:7f:7c:c6:3a:3b:3e:d1:
                    77:e3:6a:46:f8:aa:38:f4:be:46:74:10:61:49:28:
                    e2:2d:d5:f8:6d:0c:af:cc:2c:fb:30:f7:62:7d:21:
                    0f:33:92:f1:58:36:84:37:af:cf:b8:ee:25:e3:40:
                    e0:4e:e2:27:eb:2c:65:5c:16:cb:c7:75:00:0b:37:
                    3a:19:d1:3f:5d:75:55:aa:fc:f5:1f:46:aa:99:5b:
                    5c:52:4b:90:12:77:92:17:56:db:a9:91:6c:d9:eb:
                    2e:90:de:ff:a3:7f:98:87:89:09:44:48:60:93:2d:
                    c3:be:cf:30:f7:b6:bd:d2:1e:b1:68:2b:45:33:82:
                    cd:15:57:17:c0:97:74:04:01:89:11:1a:c1:b6:86:
                    25:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:80:A8:F4:09:C4:19:74:9D:31:CE:22:4F:16:3A:78:19:69:22:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dd17f57a-9810-3118-b4c3-107c552491fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.22.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:b6:b9:01:4c:7e:21:57:3e:89:0a:01:3c:df:21:51:b1:30:
         a2:78:57:da:49:92:bb:46:77:d3:c2:94:02:2f:22:3c:de:26:
         49:ea:5e:fc:24:09:cb:75:ed:69:9f:f5:c6:1e:81:78:3f:8f:
         9c:88:ff:e7:b9:09:b2:23:b2:87:1d:74:83:fc:6f:6b:19:07:
         59:48:6d:19:64:c1:61:bb:ed:6b:c3:c1:e0:d9:e9:9b:c6:12:
         d6:eb:76:59:81:a8:60:d2:cd:5d:89:6c:db:86:38:a7:46:3b:
         d0:75:f6:c1:6a:c5:6c:d1:4f:e8:87:40:7b:8e:b4:2c:35:1f:
         f4:a7:40:75:46:3e:68:c6:92:55:02:ab:45:44:18:ec:45:da:
         a2:e0:cc:be:4d:bb:7e:27:0e:d2:5a:1a:ed:01:8b:77:f9:a4:
         4e:3a:af:0b:8d:da:7f:e8:6b:b4:ce:c5:a6:96:fd:a2:6c:29:
         cc:6a:b5:89:76:ac:f0:ff:99:69:bb:5a:2f:99:0d:2c:57:ac:
         79:cf:59:6d:20:c6:40:09:58:49:2d:e0:4c:7a:d1:d2:5d:aa:
         38:97:8a:ad:c3:62:8e:68:00:2e:f6:05:1d:ff:9e:93:2b:49:
         d9:82:b5:5c:25:37:9f:8d:94:03:09:8a:40:62:a1:b5:83:ee:
         22:69:3a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:14 2025 by rpki-client