Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e1f87a6f-5beb-3f5c-a958-6024c4c6d4b9.roa
File:                     e1f87a6f-5beb-3f5c-a958-6024c4c6d4b9.roa (raw, json)
Hash identifier:          RyLT+LoVAUTosS5KNaWzhwWWT6S0T0tGycoQPTVMFwM=
Subject key identifier:   CE:F4:45:10:22:AC:5B:A2:3F:D0:B6:4F:92:33:A6:05:B0:B5:A4:D7
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EE648971C7751BC908A215840
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e1f87a6f-5beb-3f5c-a958-6024c4c6d4b9.roa
Signing time:             Sat 13 Aug 2022 12:00:00 +0000
ROA not before:           Sat 13 Aug 2022 12:00:00 +0000
ROA not after:            Sun 18 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        54.117.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e6:48:97:1c:77:51:bc:90:8a:21:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 13 12:00:00 2022 GMT
            Not After : Sep 18 04:00:00 2022 GMT
        Subject: CN=ed75ad09-09dc-4519-bc7a-84ad4a19b69c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:54:c1:3f:04:84:23:b4:a2:47:bd:16:f6:e2:
                    04:fa:31:13:c4:c0:65:b9:3e:a7:24:fa:f5:24:61:
                    a5:15:a6:84:99:1a:d6:2c:31:e1:f5:1c:34:07:11:
                    4e:98:3a:21:2f:f9:60:28:b0:2d:b9:12:ec:39:1d:
                    67:70:83:db:bd:ee:a2:5b:05:41:43:2f:0a:7c:8a:
                    7f:2d:38:07:e7:46:74:60:4b:77:0b:42:72:96:b6:
                    f4:46:0e:b3:31:1d:44:07:33:e2:dd:ee:f8:40:33:
                    7b:65:78:93:3a:66:25:f3:24:b1:bb:80:68:02:b9:
                    1a:27:18:48:38:a6:81:93:fd:aa:dd:34:ab:ee:bf:
                    89:3d:c8:cf:41:2e:0c:7b:ca:45:3b:f1:76:3f:d2:
                    b0:08:31:93:34:a1:73:33:e2:3b:78:94:4f:69:d0:
                    6f:51:37:32:c0:ae:1d:82:fa:3c:fa:41:35:37:e1:
                    16:f1:70:97:f6:9a:85:06:bc:cb:a8:b7:e3:18:c6:
                    40:6c:64:a0:30:5a:85:42:87:5f:75:0d:27:58:24:
                    a4:5b:66:2c:d1:b0:54:eb:e3:1e:c9:fa:ab:09:a4:
                    20:ae:3c:f6:b0:79:12:96:59:78:8a:7a:cf:92:46:
                    d4:96:c1:01:70:60:e5:d9:27:49:d1:a7:63:3f:0e:
                    ad:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F4:45:10:22:AC:5B:A2:3F:D0:B6:4F:92:33:A6:05:B0:B5:A4:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e1f87a6f-5beb-3f5c-a958-6024c4c6d4b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.117.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:da:dc:72:c2:23:4f:04:31:e0:e4:7c:51:e0:a6:76:90:26:
         61:63:fa:84:10:66:96:36:38:e0:da:eb:dc:59:78:e1:47:38:
         ea:df:89:35:7b:70:b9:1a:45:d8:d0:1a:12:a7:62:71:91:6d:
         f4:f7:f7:13:75:d3:68:62:27:44:44:f0:13:6d:de:ec:7a:e2:
         b8:c4:2b:b5:46:f6:0d:de:56:97:0d:48:47:94:80:79:7d:29:
         4f:4d:89:dd:f9:f9:9b:4a:85:3a:41:a7:50:55:5b:39:02:f1:
         3f:93:9a:07:06:d8:3e:0d:95:db:b1:59:5d:2c:e4:bb:69:81:
         24:ae:e6:5e:90:79:63:8c:14:e3:57:aa:73:c3:f9:cd:7f:fc:
         2d:c5:09:56:3e:03:70:e1:6b:6e:61:85:22:fe:33:81:90:39:
         98:3f:3c:73:92:fd:cd:9d:fb:92:60:e5:70:02:99:af:b1:1c:
         ae:04:fd:2a:6c:43:76:de:02:79:09:ab:82:b0:1b:6f:4b:68:
         63:85:29:fc:e2:a2:a1:6c:8e:27:e6:df:ca:fb:4b:13:c6:68:
         7d:e1:af:bc:07:69:18:fe:a6:1f:60:93:19:e1:f3:7a:4d:38:
         49:e6:35:ee:73:2b:e7:02:fe:6a:7d:f7:0d:0b:5b:c2:57:23:
         62:6c:8a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:18 2025 by rpki-client