Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/029ced00-fd23-3bf0-8f1e-72dbcbae4304.roa
File:                     029ced00-fd23-3bf0-8f1e-72dbcbae4304.roa (raw, json)
Hash identifier:          3yffppuz5K6f32ma8g9xu3hYLHUC0N/Ws5Sci3wh0Ao=
Subject key identifier:   41:F6:09:D8:15:0D:C8:91:20:23:21:40:44:A8:1C:87:4B:B6:0D:BD
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D9F97AAB5BDFF8C910FCF1100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/029ced00-fd23-3bf0-8f1e-72dbcbae4304.roa
Signing time:             Tue 19 Apr 2022 04:00:00 +0000
ROA not before:           Tue 19 Apr 2022 04:00:00 +0000
ROA not after:            Tue 24 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        139.56.0.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:9f:97:aa:b5:bd:ff:8c:91:0f:cf:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 19 04:00:00 2022 GMT
            Not After : May 24 04:00:00 2022 GMT
        Subject: CN=f522dea6-c95b-4584-ae61-8b3262478496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:30:09:2f:37:b9:0b:07:31:0c:9d:37:31:08:
                    5d:da:ef:c0:f3:f7:0b:e1:ec:6b:c1:8f:dd:0d:60:
                    d9:72:e2:ab:99:6a:d3:f7:29:63:9c:af:ed:da:46:
                    6d:35:1c:83:05:e8:91:da:ff:a3:b1:45:8e:a0:24:
                    e0:34:44:82:5f:b0:0f:a0:ff:b7:b5:83:35:c3:28:
                    0d:04:ea:b4:43:a4:eb:a3:2c:27:b7:00:b2:33:c0:
                    8d:2a:bb:bd:ba:9b:18:28:9a:a4:4c:a3:7e:9d:c5:
                    bd:29:51:6b:90:93:10:25:ae:33:6b:79:8f:2a:7a:
                    b6:91:be:63:14:83:80:32:1b:a1:f2:93:29:07:5a:
                    03:95:10:c7:30:8d:81:cb:7a:a1:25:01:a3:df:b2:
                    62:ce:00:cb:4c:17:f6:e8:ff:77:44:25:9e:f7:82:
                    35:f0:a0:8d:0d:4d:f6:b1:9f:f3:48:80:1c:c1:b4:
                    41:5e:55:77:69:7d:9f:ca:82:c2:5e:77:da:ca:b0:
                    fd:f4:15:6c:50:8e:6b:30:b1:81:24:50:90:56:81:
                    91:cd:d3:93:d5:b4:27:38:78:ff:b4:db:a0:2b:59:
                    eb:dc:d4:85:ab:30:8b:6e:ea:6f:57:dd:7a:2c:13:
                    ad:7a:07:f5:c9:bc:32:73:02:5e:27:1f:20:f4:a1:
                    76:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F6:09:D8:15:0D:C8:91:20:23:21:40:44:A8:1C:87:4B:B6:0D:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/029ced00-fd23-3bf0-8f1e-72dbcbae4304.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:97:85:c4:37:a8:ff:3c:2a:1c:46:de:3f:fe:72:43:55:af:
         98:a5:48:4a:83:6f:bc:01:3d:e2:91:40:64:84:18:9c:3c:6e:
         47:22:81:a2:fe:ed:0c:9d:e8:4d:c8:2d:92:92:f3:e7:1c:7b:
         f4:2c:6f:dc:e9:a6:7b:a5:4a:93:64:e1:51:06:16:76:97:7c:
         da:de:ca:36:e7:a8:61:f2:d0:8c:5d:98:5a:2d:04:e5:38:ba:
         9f:c0:ce:96:a3:cd:04:c9:0e:23:8c:b6:ba:a6:10:4a:1d:bc:
         c2:77:25:67:48:82:57:a9:d4:52:42:45:02:9a:0a:a0:f0:9b:
         c8:5f:ae:e9:59:1d:83:c0:47:8d:ed:a3:12:d2:eb:8d:84:ce:
         c5:b7:50:9e:b9:8f:ce:df:69:9c:6d:9e:0b:f4:10:08:0e:99:
         be:c2:78:e9:60:a8:ff:bf:91:60:ca:6f:86:eb:d7:cf:6f:ff:
         d1:8e:b7:4f:4d:0a:b8:61:ce:0f:07:03:d9:ed:85:9d:18:14:
         5b:4c:63:68:0c:3d:9c:85:3e:ae:ec:34:65:1c:6f:fb:71:1f:
         c4:e6:92:39:96:f3:df:d2:79:71:51:ac:47:d5:02:f1:d0:e4:
         af:4f:30:36:8b:4a:cb:27:37:d6:5a:01:a8:ff:2b:eb:ce:75:
         cf:19:30:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD2fl6q1vf+MkQ/PEQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDQxOTA0MDAwMFoXDTIyMDUyNDA0MDAwMFowLzEtMCsGA1UEAxMk
ZjUyMmRlYTYtYzk1Yi00NTg0LWFlNjEtOGIzMjYyNDc4NDk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTAJLze5CwcxDJ03MQhd2u/A8/cL4exrwY/d
DWDZcuKrmWrT9yljnK/t2kZtNRyDBeiR2v+jsUWOoCTgNESCX7APoP+3tYM1wygN
BOq0Q6TroywntwCyM8CNKru9upsYKJqkTKN+ncW9KVFrkJMQJa4za3mPKnq2kb5j
FIOAMhuh8pMpB1oDlRDHMI2By3qhJQGj37JizgDLTBf26P93RCWe94I18KCNDU32
sZ/zSIAcwbRBXlV3aX2fyoLCXnfayrD99BVsUI5rMLGBJFCQVoGRzdOT1bQnOHj/
tNugK1nr3NSFqzCLbupvV916LBOtegf1ybwycwJeJx8g9KF2ZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEH2CdgVDciRICMhQESoHIdLtg29MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMDI5Y2VkMDAtZmQyMy0z
YmYwLThmMWUtNzJkYmNiYWU0MzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAizgAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABSXhcQ3qP88KhxG3j/+ckNVr5ilSEqDb7wBPeKRQGSEGJw8bkcigaL+
7Qyd6E3ILZKS8+cce/Qsb9zppnulSpNk4VEGFnaXfNreyjbnqGHy0IxdmFotBOU4
up/AzpajzQTJDiOMtrqmEEodvMJ3JWdIglep1FJCRQKaCqDwm8hfrulZHYPAR43t
oxLS642EzsW3UJ65j87faZxtngv0EAgOmb7CeOlgqP+/kWDKb4br189v/9GOt09N
Crhhzg8HA9nthZ0YFFtMY2gMPZyFPq7sNGUcb/txH8TmkjmW89/SeXFRrEfVAvHQ
5K9PMDaLSssnN9ZaAaj/K+vOdc8ZMCg=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:11 2025 by rpki-client