Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f178ec23-47df-363c-9b68-4c1efe621583.roa
File:                     f178ec23-47df-363c-9b68-4c1efe621583.roa (raw, json)
Hash identifier:          Jozm3Hc92ERTrNcu/mkNOy9K84WkGVVoiMr9q5vWmkk=
Subject key identifier:   F8:BA:7A:C8:3F:50:69:04:2E:B4:2F:57:12:0E:8C:A6:A3:F6:A0:78
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DA94E2F3637430BD051B6EA80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f178ec23-47df-363c-9b68-4c1efe621583.roa
Signing time:             Thu 21 Apr 2022 12:00:00 +0000
ROA not before:           Thu 21 Apr 2022 12:00:00 +0000
ROA not after:            Fri 27 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        54.115.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a9:4e:2f:36:37:43:0b:d0:51:b6:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 21 12:00:00 2022 GMT
            Not After : May 27 04:00:00 2022 GMT
        Subject: CN=5544a7f0-b217-4706-bc7e-7f59810809d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:89:55:b1:06:b1:90:10:29:c6:d3:30:87:bf:
                    46:b9:c8:0c:7c:51:a6:d8:4f:46:c5:15:8a:cf:4d:
                    e3:21:50:3a:6b:23:6b:f2:ea:94:f4:fd:14:d3:44:
                    59:15:ca:cb:f9:d4:ca:81:11:ec:61:6d:43:bf:3c:
                    2e:34:a3:e6:83:63:c1:e1:04:f8:a0:56:f0:ba:57:
                    53:d1:fa:bb:a3:c0:b1:15:ef:0f:1d:6f:57:83:d7:
                    98:09:b0:b5:a7:85:7a:4d:46:b6:37:95:35:93:a8:
                    e6:e1:51:4c:20:20:41:af:b7:04:3a:5a:c6:31:fe:
                    ed:a2:82:51:35:8c:08:29:61:21:d0:2b:62:a9:5b:
                    2e:eb:98:4a:b3:5c:10:a4:bf:01:e8:e1:c5:1a:d6:
                    30:da:ba:38:c9:91:89:c5:3b:0e:16:85:36:6b:48:
                    a1:63:a5:d4:1f:29:08:93:7e:45:5a:4c:c4:4c:6b:
                    30:d6:bb:4f:38:03:d3:42:37:45:21:bd:29:79:c8:
                    ec:f8:b7:6f:c5:a9:93:c7:29:d9:30:5b:9f:15:1b:
                    1a:38:e3:1b:b3:98:aa:36:12:ab:d5:7f:a8:0a:47:
                    20:9f:02:4f:69:18:20:3d:d0:32:2d:e5:ec:51:d4:
                    76:26:68:8b:ac:4b:b3:ec:03:26:ef:39:02:30:f0:
                    78:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:BA:7A:C8:3F:50:69:04:2E:B4:2F:57:12:0E:8C:A6:A3:F6:A0:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f178ec23-47df-363c-9b68-4c1efe621583.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.115.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:66:3a:4d:23:a7:76:36:a6:cf:50:9d:72:dc:d5:f9:21:9d:
         28:69:c4:99:ea:30:ac:20:fe:e0:29:80:aa:1e:1a:d7:69:22:
         66:4c:fd:cb:c0:58:dd:79:ce:7a:0d:e8:41:16:24:f5:1c:1c:
         ca:b2:d2:bb:5e:e9:18:0b:98:56:04:16:a5:33:44:f5:fc:ee:
         81:b6:58:92:a7:31:cf:c0:66:82:a7:38:94:45:cb:e1:8a:47:
         95:e5:88:ae:19:7d:e7:3c:67:ad:1b:49:e6:27:65:de:8c:bf:
         c0:57:37:93:bd:79:39:16:e8:1c:71:ef:4f:7a:8c:6c:95:d3:
         28:66:92:7f:52:a5:3e:5f:83:3e:0f:a8:eb:8a:eb:d8:b1:f0:
         ea:c4:60:98:2f:19:f0:12:45:ca:44:9c:e1:07:1a:32:e0:e8:
         ea:ab:ee:b4:8b:2f:7d:b8:5e:f0:7d:9f:7c:06:5e:0f:38:37:
         36:d8:0d:38:a8:b3:03:4b:c1:57:88:84:4a:93:69:36:d2:97:
         fc:78:de:88:a7:63:d5:06:c5:51:44:0d:31:41:22:f1:e9:c3:
         34:96:f5:09:de:c4:d7:6f:ae:11:e4:bc:64:ea:ea:cc:65:81:
         26:cf:8f:b2:2a:02:ef:9a:bd:0e:6c:20:05:09:01:a7:f7:39:
         32:88:c5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:25 2025 by rpki-client