Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/eaa8f0c1-915c-3dd6-a523-1ffe62fbcb50.roa
File:                     eaa8f0c1-915c-3dd6-a523-1ffe62fbcb50.roa (raw, json)
Hash identifier:          vwjFPOb4yqL33wWKljn0ThATzYIZfbhlW80f+v6XyP4=
Subject key identifier:   29:C8:09:57:B9:B9:18:4C:C7:C7:5B:23:DD:BF:9F:97:C7:E2:8C:42
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B84573E198BEAB4F56712C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/eaa8f0c1-915c-3dd6-a523-1ffe62fbcb50.roa
Signing time:             Fri 27 Jan 2023 12:00:00 +0000
ROA not before:           Fri 27 Jan 2023 12:00:00 +0000
ROA not after:            Sat 04 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        54.8.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b8:45:73:e1:98:be:ab:4f:56:71:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 27 12:00:00 2023 GMT
            Not After : Mar  4 05:00:00 2023 GMT
        Subject: CN=278c5f46-0754-4a1c-935e-a7bef80fa1c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:17:36:3b:1b:fa:f6:cb:67:a7:0c:b8:ca:c3:
                    65:cd:a1:47:7e:dd:35:f2:e0:61:ec:de:35:21:d3:
                    fc:d4:49:6c:85:84:3b:37:56:90:6f:46:45:07:88:
                    01:64:51:ad:47:7c:f4:2e:f3:cd:c9:de:c0:23:af:
                    9c:d5:1b:c9:b6:a4:67:b9:93:4f:dd:3d:50:1d:ee:
                    01:b6:29:21:02:af:58:5b:64:e5:8b:fb:36:71:4a:
                    6e:30:9a:ad:3c:51:fd:d6:58:7d:c9:e9:e1:7e:d7:
                    88:d8:53:c8:c2:07:fa:fc:73:77:33:9d:95:0a:2c:
                    7f:16:ea:39:e2:e2:4b:19:bb:4f:9d:8f:37:c1:c0:
                    28:ed:5e:bb:85:35:8b:76:60:7d:7a:a5:67:06:34:
                    84:f0:54:f4:0f:ee:9f:54:75:e4:ed:62:1b:9a:94:
                    7f:65:9b:7e:7f:9d:f1:cc:23:7b:0a:cd:8a:39:f1:
                    81:a6:bc:ee:af:9b:f4:58:3c:6f:f3:2b:b7:ca:55:
                    75:ce:3d:4a:86:b2:de:70:0f:0d:3a:b5:b9:f5:11:
                    ef:33:bd:09:ab:ea:e9:cc:b2:4a:4c:01:fb:0f:15:
                    54:2c:a9:7a:1f:f8:9c:9e:1f:29:3d:48:46:dd:3b:
                    67:9c:14:c9:8a:44:6d:c6:30:8c:03:37:98:1f:13:
                    f2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C8:09:57:B9:B9:18:4C:C7:C7:5B:23:DD:BF:9F:97:C7:E2:8C:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/eaa8f0c1-915c-3dd6-a523-1ffe62fbcb50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.8.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:a7:64:05:2b:ea:5a:7a:67:98:66:7e:ac:9b:0c:db:59:e9:
         00:6f:a1:72:f8:6c:68:7e:30:2b:38:e6:61:d7:1c:ec:b7:4e:
         b4:61:e5:99:bb:ac:14:3a:12:41:3c:5e:bb:3c:1a:74:1e:52:
         34:ad:f1:56:b2:8f:3b:19:1a:bc:da:f4:19:57:07:66:af:95:
         1d:62:77:db:31:91:55:1b:17:a4:90:83:79:91:f3:13:51:a3:
         a0:7d:6f:b7:14:f5:4a:64:fe:21:f2:9c:3d:7e:60:e6:0f:a9:
         9b:6d:8a:6a:f3:ea:cd:34:a2:cd:06:da:97:fa:24:4d:7f:3a:
         5b:39:f9:04:bd:f3:c1:bd:dc:7d:eb:22:1c:22:33:d9:40:88:
         8e:e4:bf:d9:b4:a1:21:35:b2:27:65:fe:f9:91:07:ed:71:56:
         43:cf:97:80:bb:d7:1d:91:46:43:01:bb:d3:27:cd:b9:c7:c7:
         80:e2:1a:e5:ef:65:62:63:53:af:6d:ba:fa:e8:98:72:5c:bd:
         b2:18:6a:7a:b6:25:c3:32:4d:1a:7f:27:64:7f:42:8a:ff:33:
         ea:63:33:31:aa:84:06:6d:67:80:de:69:15:80:63:ce:c6:c4:
         e7:bb:65:1d:4d:cf:0d:b5:7b:36:95:65:e2:5f:17:0a:83:fa:
         a7:a1:8f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:58:35 2025 by rpki-client