Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0749e788-96b8-3754-95dd-20f20789bad0.roa
File:                     0749e788-96b8-3754-95dd-20f20789bad0.roa (raw, json)
Hash identifier:          BSNaK9huP2bjltIy/m0s7uivpvfqG//b+xlU0FG5MRw=
Subject key identifier:   94:3B:12:21:69:93:CD:31:A3:04:F5:22:37:5B:BD:22:83:48:B8:DC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E3BDF3977B9EFAA5306144A40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0749e788-96b8-3754-95dd-20f20789bad0.roa
Signing time:             Mon 13 Jun 2022 12:00:00 +0000
ROA not before:           Mon 13 Jun 2022 12:00:00 +0000
ROA not after:            Tue 19 Jul 2022 04:00:00 +0000
asID:                     22394
IP address blocks:        139.56.2.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:3b:df:39:77:b9:ef:aa:53:06:14:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 13 12:00:00 2022 GMT
            Not After : Jul 19 04:00:00 2022 GMT
        Subject: CN=88b91e49-75fd-42bd-8b33-06589a937a62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:88:c1:fa:70:12:0e:1b:12:b2:1e:41:c5:ee:
                    94:92:60:83:b0:62:42:9a:7f:13:45:cd:c5:ce:7d:
                    c8:c5:35:ba:dc:9f:fd:b6:bb:cd:3c:a7:1d:51:e1:
                    5b:38:7b:70:98:f6:75:6f:58:45:90:bf:f5:58:e7:
                    11:e9:4d:57:b7:92:52:e9:53:45:4b:4d:b6:79:cb:
                    ef:9f:80:1b:9c:75:9b:3e:da:ef:f3:d9:e9:f5:45:
                    f1:f7:e6:d1:f2:78:ad:83:a8:a1:fd:d6:c2:eb:22:
                    06:8f:cc:c8:ef:72:f2:fb:53:95:2b:0d:cb:76:6a:
                    02:14:d8:99:b9:3b:67:cd:72:43:27:ff:b1:3c:42:
                    39:82:67:0d:ab:fa:72:db:20:d4:06:7a:bd:7e:48:
                    cd:94:82:d3:69:2a:19:8a:ac:f1:f3:8f:57:d6:6d:
                    af:a1:20:c3:dc:ed:b7:2d:a0:2b:f9:52:69:f0:88:
                    ec:72:0c:37:9e:d9:0e:fd:c8:65:4b:df:56:f5:95:
                    8e:30:5c:c5:49:7a:ef:a6:d9:1d:5b:cb:1b:49:1e:
                    15:99:60:a7:ed:49:6b:93:d4:7a:74:4f:66:ef:19:
                    45:5e:ce:ee:f0:e9:23:d7:23:8c:7a:80:18:0a:28:
                    10:c8:71:a0:69:88:36:76:e4:5e:e7:ad:7f:e4:3c:
                    33:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:3B:12:21:69:93:CD:31:A3:04:F5:22:37:5B:BD:22:83:48:B8:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0749e788-96b8-3754-95dd-20f20789bad0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:20:42:d7:ab:9b:2f:bb:54:d7:2c:d5:d4:3c:b7:5c:ba:7a:
         40:fb:8c:fa:b5:7f:ae:09:9a:e1:75:02:8a:3c:21:2d:60:bb:
         cb:20:12:dd:65:ab:af:7f:37:7a:cf:76:16:31:58:4a:1d:76:
         1d:ca:0d:82:34:7c:6f:b9:08:3a:ee:43:ac:af:08:c3:4c:f1:
         16:83:2d:90:55:96:a7:02:0f:06:32:5e:cb:70:49:4f:14:90:
         99:79:1c:62:14:84:07:6d:3f:d1:b3:be:cb:8d:bf:c0:90:99:
         ad:84:d9:e8:82:e6:73:c5:65:57:84:76:8a:9e:33:2e:02:61:
         e3:0a:86:26:05:f1:45:0e:cc:99:ee:a5:8f:63:a7:4a:59:4d:
         9d:ed:d3:5f:5b:51:91:12:cc:fa:09:01:71:14:5a:e7:8e:2c:
         1c:49:3d:e7:50:f7:a2:f8:55:d9:83:52:6e:76:f8:2f:66:04:
         61:09:88:30:84:01:ab:de:cf:2b:4a:b1:12:82:52:de:f9:48:
         a0:59:a8:96:51:b3:03:1e:63:89:1f:e6:01:4f:16:42:a5:7d:
         c6:ba:a0:5b:84:ac:8c:b0:d3:36:77:e1:3b:a9:92:a8:fe:58:
         27:0d:3f:a3:13:96:4c:d0:fd:97:88:f1:7c:5d:57:89:c3:d9:
         b0:1e:b4:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD473zl3ue+qUwYUSkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYxMzEyMDAwMFoXDTIyMDcxOTA0MDAwMFowLzEtMCsGA1UEAxMk
ODhiOTFlNDktNzVmZC00MmJkLThiMzMtMDY1ODlhOTM3YTYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgojB+nASDhsSsh5Bxe6UkmCDsGJCmn8TRc3F
zn3IxTW63J/9trvNPKcdUeFbOHtwmPZ1b1hFkL/1WOcR6U1Xt5JS6VNFS022ecvv
n4AbnHWbPtrv89np9UXx9+bR8nitg6ih/dbC6yIGj8zI73Ly+1OVKw3LdmoCFNiZ
uTtnzXJDJ/+xPEI5gmcNq/py2yDUBnq9fkjNlILTaSoZiqzx849X1m2voSDD3O23
LaAr+VJp8Ijscgw3ntkO/chlS99W9ZWOMFzFSXrvptkdW8sbSR4VmWCn7Ulrk9R6
dE9m7xlFXs7u8Okj1yOMeoAYCigQyHGgaYg2duRe561/5DwzfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJQ7EiFpk80xowT1IjdbvSKDSLjcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMDc0OWU3ODgtOTZiOC0z
NzU0LTk1ZGQtMjBmMjA3ODliYWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAizgCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFEgQtermy+7VNcs1dQ8t1y6ekD7jPq1f64JmuF1Aoo8IS1gu8sgEt1l
q69/N3rPdhYxWEoddh3KDYI0fG+5CDruQ6yvCMNM8RaDLZBVlqcCDwYyXstwSU8U
kJl5HGIUhAdtP9GzvsuNv8CQma2E2eiC5nPFZVeEdoqeMy4CYeMKhiYF8UUOzJnu
pY9jp0pZTZ3t019bUZESzPoJAXEUWueOLBxJPedQ96L4VdmDUm52+C9mBGEJiDCE
AavezytKsRKCUt75SKBZqJZRswMeY4kf5gFPFkKlfca6oFuErIyw0zZ34Tupkqj+
WCcNP6MTlkzQ/ZeI8XxdV4nD2bAetIE=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:07 2025 by rpki-client