Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ebc45deb-d436-33d3-8e23-7c3ea74f8346.roa
File:                     ebc45deb-d436-33d3-8e23-7c3ea74f8346.roa (raw, json)
Hash identifier:          +KgGgTVx/OfqzbWBaJWhrJ+i2bESZQTaBEMU5A3uWV8=
Subject key identifier:   E0:BE:8D:C7:CD:97:FB:19:98:E0:DE:EE:A7:AB:14:10:4D:C7:29:95
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EE288345349E9F6078D4F8F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ebc45deb-d436-33d3-8e23-7c3ea74f8346.roa
Signing time:             Fri 12 Aug 2022 14:42:08 +0000
ROA not before:           Fri 12 Aug 2022 14:42:08 +0000
ROA not after:            Fri 16 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        54.43.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e2:88:34:53:49:e9:f6:07:8d:4f:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 12 14:42:08 2022 GMT
            Not After : Sep 16 04:00:00 2022 GMT
        Subject: CN=8911072c-b744-40fb-9727-1ac9e57abb02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:66:bb:ca:1f:e3:ed:51:41:4d:97:94:83:b9:
                    40:c9:d9:d1:aa:0a:ff:f1:1d:2c:1a:57:2a:83:1e:
                    62:9e:4f:a0:d4:98:5d:43:e8:f0:0c:c0:c4:2c:a2:
                    34:f0:a4:3b:79:57:a2:b5:33:4d:cf:e8:51:1b:75:
                    18:00:da:31:e0:38:f3:e1:24:c7:45:c2:59:86:1c:
                    69:7a:1a:e8:2d:63:6f:eb:1a:10:07:2e:f4:1d:97:
                    55:cf:94:8a:ab:cd:17:49:01:18:40:e7:b9:e0:fd:
                    65:63:c1:db:2b:a3:70:bc:3d:6f:a4:83:87:75:0c:
                    2d:e2:b5:fb:a4:b3:2f:80:fb:04:2c:f3:9e:a6:98:
                    43:35:7b:cd:5f:35:bf:91:14:b3:95:a8:2e:07:5f:
                    f3:ca:7d:ef:2a:7a:1f:42:aa:99:5f:71:6c:ee:f3:
                    c0:62:81:67:ec:4c:67:0d:a1:82:4c:92:3d:0a:b5:
                    65:08:57:aa:0c:f2:52:b0:b8:7a:e6:3e:4a:d4:62:
                    17:41:59:2d:4a:92:e8:10:87:92:18:32:5f:d1:f4:
                    32:13:45:eb:d7:46:8e:09:80:67:1d:ca:34:f6:82:
                    37:b5:d2:b3:85:d4:94:a5:05:d6:ab:e2:e8:c6:f2:
                    86:18:3c:fc:4e:c9:d6:93:67:7d:72:8e:51:2b:a5:
                    16:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BE:8D:C7:CD:97:FB:19:98:E0:DE:EE:A7:AB:14:10:4D:C7:29:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ebc45deb-d436-33d3-8e23-7c3ea74f8346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.43.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:e8:58:d3:ff:57:06:b3:18:05:41:e5:f9:74:5b:74:f9:9c:
         0a:19:de:13:bd:bd:97:a2:33:2a:72:51:d8:76:1a:12:43:b2:
         94:05:ed:75:c4:1e:ab:91:8d:15:51:8d:b4:d2:da:e7:17:16:
         60:26:98:c1:89:ce:7f:ee:65:ca:08:b4:78:95:7c:e2:f0:59:
         da:a5:df:61:26:ed:bd:d7:93:fd:32:1f:62:69:af:df:b5:6b:
         5b:c7:56:ad:07:ca:f4:8c:e4:50:0e:84:09:b4:0c:88:42:10:
         be:a3:3f:b3:a1:23:f2:e2:04:e2:07:05:1f:18:e9:67:dd:d1:
         e8:ba:3a:b5:46:dc:a5:62:92:ff:be:cb:2d:08:21:f8:68:e5:
         23:e2:11:74:5f:d0:7e:a4:dd:8d:f5:a3:0c:aa:64:90:75:3c:
         ea:5b:a7:a2:f7:c5:d0:36:12:e4:01:9b:e5:c1:1e:e2:11:17:
         60:a5:06:99:63:02:dd:88:c4:3b:32:f7:c4:d7:36:3c:56:94:
         8d:dc:b6:2c:35:10:75:d0:1a:ca:f3:99:0b:cb:a0:02:a6:00:
         0b:77:3a:91:49:c7:b4:12:84:44:de:e7:37:57:91:af:f8:36:
         d5:21:4b:62:a9:67:ef:3a:53:5d:54:41:f4:4a:e5:7a:fc:87:
         ee:f1:e6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:00:58 2025 by rpki-client