Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ec3098fa-2c12-30c5-9a97-20f5d0f2a4ea.roa
File:                     ec3098fa-2c12-30c5-9a97-20f5d0f2a4ea.roa (raw, json)
Hash identifier:          nd2/PGMLWX+xcMq6LQ21ojVDnll3Cz5E8fBQWW4oyYs=
Subject key identifier:   09:10:20:A5:0C:F2:02:34:E8:0F:F0:F0:DD:5F:F6:D0:12:72:D8:5E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FCC74C7E97E08C3764C7E5D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ec3098fa-2c12-30c5-9a97-20f5d0f2a4ea.roa
Signing time:             Thu 03 Nov 2022 12:00:00 +0000
ROA not before:           Thu 03 Nov 2022 12:00:00 +0000
ROA not after:            Fri 09 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        54.134.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:cc:74:c7:e9:7e:08:c3:76:4c:7e:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  3 12:00:00 2022 GMT
            Not After : Dec  9 05:00:00 2022 GMT
        Subject: CN=4fbe2255-015f-4b98-91e7-ea3b9beb6b37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f4:51:67:28:4b:b4:ba:8c:e8:aa:55:e8:cc:
                    dd:19:48:70:50:f6:1c:51:14:59:81:bf:92:96:b4:
                    7a:db:64:f2:32:f3:39:05:77:37:6b:2e:88:51:f7:
                    f9:0c:2b:b3:25:34:0f:5a:52:0a:54:7a:f0:cf:f9:
                    c8:af:69:19:e6:70:fa:c5:7c:4d:31:c1:03:20:14:
                    2c:2f:5e:50:20:af:02:07:23:41:90:27:1e:a2:a1:
                    cc:d5:86:33:1c:ec:5a:ee:a5:58:8d:04:5e:d5:13:
                    88:2d:69:77:92:28:17:7d:1f:6c:b9:62:33:8c:7a:
                    8a:ff:6d:2e:84:d8:3b:ec:21:f0:a3:a8:87:95:1f:
                    bb:d3:95:90:ce:e4:c9:30:0c:f2:dd:63:89:8e:f8:
                    ce:9d:c5:fa:92:c6:ef:48:98:f7:bb:a1:bb:b3:6f:
                    42:22:ad:c6:3a:54:8b:16:99:c2:74:23:8b:5b:01:
                    7b:f8:ed:f2:b7:d2:f4:0b:8f:a5:69:f7:51:dd:d6:
                    55:28:69:fe:ba:90:f6:6c:59:1c:11:83:a0:32:bc:
                    11:27:c4:92:4b:9a:5f:36:f1:e1:8a:b8:da:1f:f2:
                    3f:6f:92:66:a7:92:78:bd:dd:88:8c:40:ab:96:51:
                    1b:e3:28:90:28:03:d7:7e:e0:4f:7b:26:81:0d:7d:
                    45:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:10:20:A5:0C:F2:02:34:E8:0F:F0:F0:DD:5F:F6:D0:12:72:D8:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ec3098fa-2c12-30c5-9a97-20f5d0f2a4ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.134.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:19:16:6b:b2:df:d3:0a:af:a5:08:ed:9d:97:46:85:2d:98:
         26:01:c3:03:f4:a5:5b:d7:8e:be:2e:8d:7d:7d:dd:b3:56:20:
         5e:5a:85:74:ff:e5:35:6b:32:07:f0:24:9c:67:d9:72:f3:c0:
         b0:02:d6:d6:d4:ff:24:92:0e:b6:cc:11:51:f0:64:51:ea:eb:
         4b:18:d1:1e:fb:e1:bb:9b:22:26:fb:7b:f5:ea:6a:66:a1:2e:
         df:c4:fa:66:3f:5c:87:25:5e:55:5a:64:53:78:ca:7c:fb:ff:
         ac:8e:29:d2:69:17:99:e5:54:ad:a4:b1:e4:5f:33:79:cd:e1:
         92:7a:b3:50:93:73:af:7a:1e:48:13:82:53:49:32:e7:e2:b6:
         7f:89:36:ac:da:80:8b:cf:87:e5:f5:b7:59:50:b4:3f:39:ae:
         59:ac:ca:b6:ea:ed:2d:8f:12:8e:18:ea:ee:0e:f6:78:34:3f:
         7f:e1:b5:dc:e0:d6:e6:a4:46:2d:aa:90:e5:e2:ff:4c:96:06:
         da:f5:79:83:5c:5d:a9:b4:e7:88:70:09:ba:fc:fd:3f:ee:b1:
         ce:35:a5:b1:5f:40:de:02:60:23:83:74:ee:3f:e7:bd:84:02:
         05:c2:17:af:45:35:f2:10:6a:42:e0:ab:71:82:43:03:e8:81:
         4d:1e:21:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:39 2025 by rpki-client