Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/025544c9-12e0-3653-b1ef-d3c695f6de83.roa
File:                     025544c9-12e0-3653-b1ef-d3c695f6de83.roa (raw, json)
Hash identifier:          t+ZzVts/UCBKt6ravKv7UhYawx9R9jXGlVzy7qpLkXM=
Subject key identifier:   02:B9:43:FF:A0:B8:7C:50:9B:6F:37:E9:3A:BF:27:41:2A:23:A4:FA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584073AB9651796CC197E20A6280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/025544c9-12e0-3653-b1ef-d3c695f6de83.roa
Signing time:             Mon 02 Jan 2023 12:00:00 +0000
ROA not before:           Mon 02 Jan 2023 12:00:00 +0000
ROA not after:            Tue 07 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        56.229.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:73:ab:96:51:79:6c:c1:97:e2:0a:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  2 12:00:00 2023 GMT
            Not After : Feb  7 05:00:00 2023 GMT
        Subject: CN=7864078a-f584-4f16-80e7-bc1dbba2ba45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2f:fd:41:95:02:be:0b:e7:92:8d:62:6f:e4:
                    00:be:e2:32:a6:1c:6a:d8:9c:72:9d:ef:0a:bc:c9:
                    aa:7f:9c:24:99:7c:1f:82:2b:a3:c4:1c:31:17:ba:
                    0a:8c:4c:83:1a:5e:58:a0:c5:f8:9a:bb:8a:8d:4a:
                    ff:66:38:da:6f:f6:2e:60:0c:33:2b:dd:93:c4:ff:
                    cf:33:98:6b:93:0b:ca:1c:c7:2d:9e:d2:7c:a0:fc:
                    e8:7a:1d:f0:af:26:9c:79:e6:53:09:a7:a0:03:68:
                    95:a3:79:c9:50:30:33:ac:2a:38:e0:b2:7c:7e:73:
                    a1:31:68:e8:a2:9a:03:f1:44:b6:d0:45:68:d6:e7:
                    15:7e:49:23:a9:a0:77:e1:60:02:e8:ee:d2:6b:1c:
                    3e:4a:6f:66:32:e9:5b:7a:40:d4:db:74:5b:5b:37:
                    9c:ff:b0:3c:83:69:cf:0f:d2:b0:d0:aa:b1:2b:02:
                    52:8b:17:5d:f0:d4:27:10:0d:16:25:f8:3d:82:e9:
                    f9:6e:85:6f:9a:6c:d7:f9:2f:83:ec:cd:ec:54:3e:
                    9b:64:b5:04:78:8e:9a:42:26:de:fd:15:0e:28:ae:
                    ea:84:ad:56:9c:d9:4c:f5:ca:67:ca:24:5b:05:cc:
                    a1:fa:8e:e0:30:fd:77:4e:a2:00:ac:91:8b:61:ca:
                    f1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B9:43:FF:A0:B8:7C:50:9B:6F:37:E9:3A:BF:27:41:2A:23:A4:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/025544c9-12e0-3653-b1ef-d3c695f6de83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.229.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:72:4e:c6:bf:de:7a:06:f6:7e:b1:c6:77:ed:2b:60:28:bf:
         80:cb:3e:6a:43:95:d7:eb:e0:c6:55:59:9a:c8:08:c7:0e:34:
         35:76:64:00:e9:53:ad:7d:54:cc:5d:ea:f9:80:ba:09:a5:5e:
         f1:b1:8b:6b:8b:7a:75:4f:65:28:eb:b7:9c:08:88:57:3a:e1:
         b2:17:01:ab:1d:1a:c8:11:71:e1:70:be:06:61:86:25:90:48:
         03:0a:81:49:2d:99:b7:6c:9b:37:47:a8:91:75:3b:1f:11:b4:
         38:f7:2b:5e:6e:e7:fa:62:f3:07:6a:26:e0:d4:96:22:fc:a6:
         80:04:7d:53:67:79:08:c2:35:fe:d2:79:b8:35:a9:29:a2:ac:
         a8:69:42:dd:9d:49:c5:b4:42:e5:a2:da:0a:9c:17:d2:14:bd:
         e3:fa:b0:8c:76:27:a0:61:a1:68:81:78:18:4f:a8:30:95:fd:
         86:86:9d:4b:fb:92:62:e1:49:6c:85:40:4c:8f:15:4e:8f:9f:
         ff:42:f5:02:f2:b2:97:55:69:6e:ad:df:a0:84:1a:fd:8c:cd:
         3e:80:e0:12:f1:ab:ed:ff:72:7e:c0:02:c8:27:51:41:ca:3d:
         bb:88:4b:bf:e7:9e:10:77:59:1e:e5:cc:66:ca:fa:22:b7:49:
         9e:f7:fd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:51 2025 by rpki-client