Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de829527-45ee-3f75-8159-28f3fee4e3a9.roa
File:                     de829527-45ee-3f75-8159-28f3fee4e3a9.roa (raw, json)
Hash identifier:          U/GYk/Zjo2Z7GFMNcPQ73RUL+JEy0eMLRHcABGmGJa0=
Subject key identifier:   CF:17:74:C0:14:A9:D5:04:D0:AA:81:31:C0:AB:D1:DE:66:95:AA:E7
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CBF1720517E67D8ED91D1F80B
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de829527-45ee-3f75-8159-28f3fee4e3a9.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        54.8.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:bf:17:20:51:7e:67:d8:ed:91:d1:f8:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=4376c6b3-9121-4a8c-98f7-efce7c3aef53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f6:43:28:de:52:70:e7:58:2e:50:e1:81:79:
                    aa:4b:c9:e0:d2:c9:ea:66:87:41:a5:ad:41:64:57:
                    1a:63:1e:44:78:59:bb:61:61:1b:37:2b:89:7b:de:
                    67:39:c4:a3:33:78:04:b8:27:43:94:07:f5:fc:63:
                    c2:ed:14:18:08:fc:ac:c5:d5:ab:2a:34:9f:d1:86:
                    82:0b:3b:59:75:c5:e8:40:7a:3b:a8:22:b8:04:7c:
                    96:d6:b2:a2:f5:b3:c8:63:14:0a:fa:a8:bd:f6:58:
                    31:e9:aa:0c:fc:a9:17:54:00:98:0d:c4:76:98:e1:
                    f1:32:37:c3:96:b5:29:bb:26:b1:cd:fc:49:83:9c:
                    0f:a0:66:72:3c:8e:a0:b5:87:91:c6:ba:89:a1:d6:
                    0b:c4:0f:ce:4b:9c:81:be:6b:de:58:c4:d9:14:97:
                    ac:6a:ce:60:c5:76:64:f2:3f:bc:46:1d:11:89:1c:
                    3e:ab:03:08:03:8f:c9:a4:df:50:a2:3a:db:c5:be:
                    83:28:ec:f6:a0:28:7e:45:40:e9:a9:79:65:93:86:
                    0a:c6:98:d9:45:e2:d6:62:ce:44:24:ac:c0:24:1e:
                    12:c7:1d:8c:44:e0:93:70:3b:4a:4c:de:6c:57:b1:
                    5f:ee:1b:c8:d5:1b:f3:e1:fa:01:2b:1c:71:97:e7:
                    fe:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:17:74:C0:14:A9:D5:04:D0:AA:81:31:C0:AB:D1:DE:66:95:AA:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de829527-45ee-3f75-8159-28f3fee4e3a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.8.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:20:9e:52:43:18:54:1f:8f:2a:c5:a1:96:72:16:1f:2b:94:
         0e:8e:e3:43:62:b7:07:b8:11:c7:43:b4:72:bb:75:48:f0:27:
         a8:74:5f:1e:5f:25:e6:7e:de:51:6f:94:00:c8:28:76:32:19:
         02:9b:83:ba:a1:20:8b:94:9c:af:c4:7a:2c:34:bb:e5:1e:25:
         85:9f:ae:32:e8:8d:1d:4b:71:01:b9:26:08:13:b9:57:1f:93:
         ee:6e:47:fb:25:fb:fe:3b:a9:cc:5c:33:f8:0a:bc:82:47:7f:
         12:99:10:f3:4f:ba:6b:6b:52:55:ad:05:67:ca:87:84:36:8d:
         3f:3c:3a:50:ee:57:a2:cb:39:cc:91:d9:d0:e7:c2:22:06:de:
         df:a8:06:c7:a9:96:39:e2:51:50:eb:71:63:6b:27:83:3f:1e:
         91:ed:c8:72:cd:ec:5b:1b:6b:bc:66:e8:b0:35:ff:56:13:c9:
         19:14:f5:5c:f5:de:f3:94:02:35:c3:fb:3e:c8:49:a1:2d:81:
         76:61:f7:e9:cc:70:d5:30:8f:4d:a0:d4:e6:2f:86:72:06:6c:
         08:76:ac:0c:3f:26:0c:f1:bb:30:1f:7b:44:f9:9d:a0:45:59:
         11:14:d2:ed:df:0a:70:47:15:4f:c7:71:ea:a4:ab:80:33:0e:
         d9:b0:99:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:07:24 2025 by rpki-client