Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f5cef5e9-fefb-3ff4-b776-5949809a2b97.roa
File:                     f5cef5e9-fefb-3ff4-b776-5949809a2b97.roa (raw, json)
Hash identifier:          coylZ2VY3hruE/9mbJ4No6OXbwgj74GVloizJp2eXm8=
Subject key identifier:   0A:24:0D:57:FE:15:2B:5A:C7:1E:E0:83:70:3A:12:C6:0F:77:EC:AE
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D0CF7E260BC9A99E0495A8500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f5cef5e9-fefb-3ff4-b776-5949809a2b97.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Fri 01 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        54.116.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0c:f7:e2:60:bc:9a:99:e0:49:5a:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Apr  1 04:00:00 2022 GMT
        Subject: CN=2b54dc4d-870b-4bef-93a5-45f5033b0408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fc:b6:90:42:ff:24:b1:0e:e2:64:c9:52:0f:
                    9f:a3:30:16:f6:72:61:5d:d3:3a:64:53:9e:25:f6:
                    c1:79:66:e1:6f:f0:1c:61:be:97:31:dc:37:25:80:
                    52:a0:a1:0f:4a:cc:3f:af:76:b6:6b:4f:18:a5:a1:
                    9d:00:d3:3b:90:0c:b6:50:fb:0e:66:70:b6:02:1a:
                    85:a0:6e:18:95:82:86:4b:e5:b7:3f:19:4d:02:5b:
                    e4:8e:5d:ab:b3:ef:85:0e:71:2b:35:ec:4b:4c:b8:
                    95:58:a3:0a:bd:a0:bb:ee:64:f9:95:e7:c5:9c:5b:
                    3f:29:88:95:26:83:65:85:f0:42:d4:52:0c:68:9e:
                    0d:8c:b8:f3:9f:4b:84:56:0e:0a:a1:3b:93:54:30:
                    7f:dd:f8:3a:26:1b:af:66:9b:4d:9b:3f:12:e1:7e:
                    23:f3:a1:9f:30:36:d5:42:e7:7f:44:46:4c:12:d7:
                    db:c4:1a:eb:62:92:bc:3b:7a:24:f6:46:18:02:ed:
                    fe:5a:57:72:de:11:fe:91:b2:bf:01:b8:03:03:70:
                    36:ed:57:57:88:74:e7:1a:2d:88:bc:99:0b:03:dc:
                    a0:0e:a1:99:7c:db:57:7b:f8:f5:a9:2d:f1:37:db:
                    12:1e:b6:b0:f2:f4:c6:9a:81:20:30:39:52:12:0c:
                    df:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:24:0D:57:FE:15:2B:5A:C7:1E:E0:83:70:3A:12:C6:0F:77:EC:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f5cef5e9-fefb-3ff4-b776-5949809a2b97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.116.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:77:52:ac:48:1a:1a:7d:8d:a8:33:0b:8a:a1:73:49:58:59:
         e3:f4:3e:e1:6b:52:95:02:e5:d2:cc:e9:b6:28:47:94:79:58:
         bf:64:85:66:73:a9:a5:ad:2b:eb:08:bc:c4:9e:84:5d:99:54:
         5a:d5:bf:a4:b6:d8:51:ee:31:fd:80:93:3d:28:b9:74:9e:9a:
         0c:a8:97:f3:1a:40:5f:e5:85:ee:93:79:d4:72:c8:4b:3c:fb:
         a8:d7:36:c9:e9:58:2d:c5:1c:2f:b4:e0:e1:b3:b5:cd:9e:64:
         1b:cd:3c:05:da:bc:e5:70:7e:6e:17:0f:33:a2:66:f3:38:47:
         e8:e8:0f:1b:86:fa:23:25:91:8c:48:4c:f1:73:6c:32:e7:9f:
         ce:d3:c2:3e:ef:90:e3:82:a5:d4:9e:35:82:0f:1f:13:23:fd:
         12:91:44:05:db:9f:bd:25:04:e9:29:d5:f0:4a:32:74:e4:e2:
         67:17:95:85:bc:32:b4:7e:88:cb:8a:9f:b2:39:dd:a1:36:aa:
         7d:66:6b:df:dd:49:38:47:ac:37:1a:16:9f:7f:79:1c:fd:6f:
         f7:bf:60:c8:27:a8:1c:9c:37:60:b5:b7:5c:c9:3a:75:1c:c2:
         ff:3e:bb:92:50:e3:96:f0:d5:c3:9c:d7:ee:61:96:d8:fe:23:
         9c:55:cc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:15 2025 by rpki-client