Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/039fba77-96db-3e45-98d6-b33d4f01be42.roa
File:                     039fba77-96db-3e45-98d6-b33d4f01be42.roa (raw, json)
Hash identifier:          eSJBfNg2QSgZpycrMGKM159I1HpU3ss1gXfE5mlybXI=
Subject key identifier:   74:BD:0E:02:37:AB:C2:64:7E:4B:2B:59:BB:E7:99:CF:36:CC:CD:D9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FDE5EA5D83C8EE6E9B8B52E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/039fba77-96db-3e45-98d6-b33d4f01be42.roa
Signing time:             Thu 10 Nov 2022 12:00:00 +0000
ROA not before:           Thu 10 Nov 2022 12:00:00 +0000
ROA not after:            Fri 16 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        139.89.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:de:5e:a5:d8:3c:8e:e6:e9:b8:b5:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 10 12:00:00 2022 GMT
            Not After : Dec 16 05:00:00 2022 GMT
        Subject: CN=cfa2319f-e8b0-42ab-8cb7-26661e5012aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:70:ee:91:9c:e1:7e:f2:05:9d:7d:12:21:25:
                    1b:7a:4a:f0:98:e2:8f:15:e1:a9:16:bd:4c:67:5f:
                    aa:eb:fa:03:ff:10:63:7b:6d:a0:22:a8:42:eb:50:
                    d7:81:44:95:e4:aa:55:62:91:29:37:18:87:a7:69:
                    66:30:48:34:ad:41:71:cc:bb:04:f6:95:5d:d1:d9:
                    8d:62:98:fb:17:43:51:36:ae:33:0d:a8:41:3c:32:
                    dc:d3:28:43:1e:b9:59:6c:1b:07:0c:50:c2:6b:1c:
                    7f:f7:f4:16:1f:7c:22:98:01:27:c6:b7:d0:a6:2c:
                    28:5a:89:93:d6:d8:ba:96:72:f1:51:02:35:eb:8a:
                    4b:cd:30:65:6e:aa:fc:66:69:b7:08:e9:b4:12:4e:
                    59:67:4f:3d:cd:58:76:55:ee:eb:89:0f:c1:66:97:
                    00:3d:29:53:ba:81:14:b1:21:02:64:2f:fa:aa:a8:
                    41:0f:1a:6c:67:15:86:55:aa:f3:94:ca:45:34:a3:
                    db:48:32:b7:0a:9c:2b:3e:03:db:ba:dc:ba:d0:67:
                    7a:28:1b:22:ab:bf:11:e5:a8:6c:a2:fd:b9:b8:92:
                    16:49:80:c2:3a:8b:33:51:d8:29:fd:d0:53:0a:44:
                    e3:5e:ff:4b:f1:86:5a:0a:4a:08:59:7f:44:cf:0d:
                    3e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BD:0E:02:37:AB:C2:64:7E:4B:2B:59:BB:E7:99:CF:36:CC:CD:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/039fba77-96db-3e45-98d6-b33d4f01be42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.89.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:19:f3:08:6b:39:c7:e5:b2:a1:04:60:35:56:04:47:1b:be:
         fb:90:69:ae:fb:e5:3a:67:b7:93:21:27:d7:36:72:9e:e3:b3:
         cc:fe:06:ed:b8:c2:d9:c3:a1:02:98:76:e0:1c:3e:3b:44:8c:
         9d:46:1c:9b:99:b1:5f:23:77:66:92:91:0a:1d:ab:fd:2d:16:
         02:90:00:2a:c2:ff:66:61:d1:37:56:83:30:67:b6:21:63:c3:
         80:1a:bd:39:31:6f:84:e7:8f:eb:bd:e9:cb:68:cb:5e:ef:fd:
         0e:57:31:70:f1:f6:07:d5:1e:11:5e:0d:ac:20:91:79:bc:79:
         ec:72:f0:f7:0c:72:f4:d1:28:86:8a:de:2e:6d:5c:78:5d:0c:
         42:5d:ed:df:04:82:7b:04:6e:2d:6b:84:9f:33:d1:41:6d:3e:
         a9:41:22:07:5b:d8:ca:c6:29:a9:90:5c:1f:f4:b9:fe:cb:73:
         cb:8a:13:31:d5:82:27:0a:48:83:87:12:ec:27:7a:5a:57:59:
         57:42:0e:07:86:36:9f:df:5b:8e:eb:a6:f8:6d:3b:5b:fb:0f:
         c7:b3:a3:d9:73:3e:3b:c6:bd:38:84:15:9e:58:db:b5:d0:38:
         4c:9f:ff:ac:a4:31:59:a0:ef:e8:77:da:83:80:53:96:76:93:
         e4:70:0d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:15:58 2025 by rpki-client