Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/072db036-6cbe-37f5-8383-c9607cb921b1.roa
File:                     072db036-6cbe-37f5-8383-c9607cb921b1.roa (raw, json)
Hash identifier:          a+sMH8oLnx3NajoF9oHeXC3b0Xlsp1Sn5lNVEyEcVG4=
Subject key identifier:   9E:E3:50:E6:07:2C:19:A6:EA:F7:A8:BB:45:09:CA:0F:91:5C:95:DC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858400336FDF95526219CD0E9DF50
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/072db036-6cbe-37f5-8383-c9607cb921b1.roa
Signing time:             Wed 23 Nov 2022 12:00:00 +0000
ROA not before:           Wed 23 Nov 2022 12:00:00 +0000
ROA not after:            Thu 29 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        56.134.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:03:36:fd:f9:55:26:21:9c:d0:e9:df:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 23 12:00:00 2022 GMT
            Not After : Dec 29 05:00:00 2022 GMT
        Subject: CN=5fb2a238-20b2-4655-8f23-1fdb3bc3b4e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e8:d4:f5:04:88:b9:fe:34:a1:c2:e3:47:d7:
                    74:34:bf:3c:38:83:3e:9b:d1:3b:2a:14:3b:c2:a4:
                    ff:85:2f:e1:fa:e6:c5:e8:e9:0c:29:fb:d1:2d:80:
                    c9:5f:b2:b6:6a:22:e6:ec:ab:17:e9:d9:fa:b1:5f:
                    09:a9:ff:e4:03:68:45:87:49:3b:a8:29:cf:c9:19:
                    af:88:90:ef:50:89:0c:de:05:4d:78:c0:23:e3:9f:
                    89:8d:7b:8b:01:d9:17:25:cd:26:9b:75:5e:9b:b9:
                    50:07:de:18:be:21:40:24:b4:63:e2:d8:e5:87:9e:
                    1f:14:b5:db:96:9d:5b:b2:3e:6d:07:b2:a2:e1:91:
                    89:1d:95:f1:db:1a:3e:ce:1c:60:ce:8e:60:8c:f2:
                    21:12:c3:87:1a:2b:3f:6a:95:47:78:83:19:41:24:
                    dc:1d:20:37:58:91:61:27:98:34:19:f9:59:90:af:
                    4e:0b:c3:cb:93:b0:17:9c:93:bf:7a:78:cd:8d:5a:
                    21:d2:f3:13:52:ca:fc:4b:f3:8c:8d:39:73:02:de:
                    a3:45:93:54:1f:a9:43:ef:3e:30:42:38:b6:04:b9:
                    80:48:55:53:7a:35:bb:81:0a:56:c7:65:28:49:38:
                    d0:fd:05:1c:7e:c3:1b:0e:f7:3f:0e:a3:87:09:e8:
                    db:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E3:50:E6:07:2C:19:A6:EA:F7:A8:BB:45:09:CA:0F:91:5C:95:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/072db036-6cbe-37f5-8383-c9607cb921b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.134.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:ab:46:79:3b:c1:a4:5c:06:86:91:de:1f:96:1a:7d:81:4e:
         a2:99:80:2d:72:07:20:17:e8:ed:70:16:30:10:49:5d:f1:82:
         ef:da:8c:7d:af:86:9d:c2:d0:d2:b5:64:2d:b5:c2:4e:51:09:
         e3:bf:ff:30:40:85:85:56:bb:03:ff:a0:0e:4a:b4:e5:75:62:
         23:68:65:d9:d0:1a:52:03:60:ca:f9:a7:0e:2f:3d:c0:44:f8:
         34:bc:53:31:c7:29:0c:da:d6:a5:6d:40:04:bb:aa:80:91:2f:
         e1:dc:ad:d5:e9:6f:3d:3d:27:4f:4d:92:1d:12:ba:43:41:6a:
         4c:08:5d:6f:91:50:98:cc:d3:97:1c:2b:96:af:c6:43:d6:fc:
         2c:b0:7b:6c:c5:40:d4:07:4f:ac:8b:e5:18:91:eb:59:d9:c2:
         aa:2d:96:41:ad:de:08:05:4d:48:19:1d:67:27:58:4d:b4:b0:
         b4:a6:b7:d9:f0:b0:fc:25:7e:cd:b2:41:5c:9e:4a:24:55:7c:
         5d:0a:65:0f:9d:48:7d:06:b6:b8:99:48:22:8e:12:2d:ae:88:
         25:b7:1d:a9:8b:7b:07:37:d3:c9:89:11:c8:51:38:08:a8:49:
         b4:9a:bf:2e:1a:3f:f1:6c:4a:48:da:6a:5c:b9:28:8c:30:ba:
         f7:5c:c1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:02:34 2025 by rpki-client