Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0843d34e-bb60-377b-999e-0a521f8bf0c3.roa
File:                     0843d34e-bb60-377b-999e-0a521f8bf0c3.roa (raw, json)
Hash identifier:          fjA3ZN8KT5xdWEaDblFN8k9jvqnrUVffZENS5NsRPAk=
Subject key identifier:   8A:E1:9C:83:96:BC:CC:2D:6E:F9:02:AB:BF:11:11:18:56:9C:FB:31
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E3BDF402EBEC905FAE9FEE000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0843d34e-bb60-377b-999e-0a521f8bf0c3.roa
Signing time:             Mon 13 Jun 2022 12:00:00 +0000
ROA not before:           Mon 13 Jun 2022 12:00:00 +0000
ROA not after:            Tue 19 Jul 2022 04:00:00 +0000
asID:                     6167
IP address blocks:        139.56.2.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:3b:df:40:2e:be:c9:05:fa:e9:fe:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 13 12:00:00 2022 GMT
            Not After : Jul 19 04:00:00 2022 GMT
        Subject: CN=1c0ff314-7faf-4e79-a6ad-402e3486619e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e2:1f:ce:83:5e:82:5c:04:29:b4:0f:e5:5f:
                    15:7e:09:17:7c:3a:37:27:0d:4d:76:8d:99:a1:7d:
                    05:69:55:ec:25:b1:69:e4:31:e6:cc:80:34:49:dc:
                    05:0c:f5:c7:a5:2d:03:a9:ce:16:20:ed:24:c7:98:
                    c1:db:9d:83:3f:7f:98:d3:a4:6b:8b:5c:8b:e0:27:
                    1a:94:27:06:cb:07:30:ea:59:42:ce:13:96:7c:9b:
                    42:87:84:4b:94:30:b9:ff:ec:8e:38:95:2e:48:c9:
                    5b:64:2e:02:8a:97:f8:86:2b:13:da:6e:64:c3:30:
                    44:b5:7a:fd:11:e6:86:14:4e:46:0e:f4:73:d5:0a:
                    20:7f:87:69:71:e5:1e:46:2f:02:42:8d:7e:75:8b:
                    9d:05:da:80:9b:9f:43:b3:84:38:4b:c0:f7:da:3f:
                    af:03:57:bd:f3:1c:9c:05:2b:6c:e4:64:e0:bf:9f:
                    3d:31:b9:b2:63:36:02:ee:9d:44:66:0c:c3:89:f8:
                    e5:f7:12:d2:f4:bb:41:ff:2a:62:18:b5:e0:3d:76:
                    92:fd:86:fb:86:b6:21:33:9a:31:3b:87:86:1c:f7:
                    e6:4f:af:7d:e2:ae:89:3b:90:4d:76:19:bc:94:c9:
                    80:f3:cb:7c:63:ff:83:f1:c1:fa:5f:77:4d:b6:d1:
                    37:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E1:9C:83:96:BC:CC:2D:6E:F9:02:AB:BF:11:11:18:56:9C:FB:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0843d34e-bb60-377b-999e-0a521f8bf0c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:96:83:b0:3a:8e:71:e5:30:3e:2d:da:62:9b:9a:43:2e:13:
         0c:d6:a5:a9:a3:90:e5:fe:ae:fc:d9:02:61:68:87:f1:4e:12:
         29:10:fc:e7:34:b0:0a:1c:fe:56:93:9c:1c:c2:01:5b:d9:59:
         9e:b2:55:f4:ef:a4:5a:44:d6:d1:92:a3:ff:99:09:5b:37:96:
         40:5a:2c:f6:11:c8:d9:61:bd:51:cd:7d:70:ca:aa:40:39:51:
         59:93:35:d7:0d:b9:5b:90:60:7a:05:f9:a2:9c:b0:53:0c:3b:
         ff:81:f2:69:4e:a7:71:d6:d4:f8:ea:d4:3d:d7:bf:e4:dd:fa:
         42:4c:12:74:66:fc:0f:a1:d3:e5:92:12:56:ce:23:4f:20:0f:
         f2:42:4b:42:92:14:1b:81:8d:10:b9:9d:c1:ef:8b:4d:57:ca:
         1e:55:dc:38:0c:62:ad:fc:c3:f7:d4:f7:cc:cb:6a:1a:0e:6c:
         42:c5:21:d1:b4:87:e9:0f:c2:97:bb:df:ea:8a:8c:57:b1:39:
         86:9d:62:ed:96:d7:82:f2:62:24:2a:45:3e:5b:f9:83:7a:bc:
         19:27:9e:b6:6c:93:72:0c:dc:16:66:7d:da:08:ec:e1:02:48:
         ea:22:3b:dd:26:a2:aa:32:40:80:45:48:c8:38:98:fd:41:e8:
         36:9c:a1:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD4730AuvskF+un+4AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYxMzEyMDAwMFoXDTIyMDcxOTA0MDAwMFowLzEtMCsGA1UEAxMk
MWMwZmYzMTQtN2ZhZi00ZTc5LWE2YWQtNDAyZTM0ODY2MTllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOIfzoNeglwEKbQP5V8VfgkXfDo3Jw1Ndo2Z
oX0FaVXsJbFp5DHmzIA0SdwFDPXHpS0Dqc4WIO0kx5jB252DP3+Y06Rri1yL4Cca
lCcGywcw6llCzhOWfJtCh4RLlDC5/+yOOJUuSMlbZC4Cipf4hisT2m5kwzBEtXr9
EeaGFE5GDvRz1Qogf4dpceUeRi8CQo1+dYudBdqAm59Ds4Q4S8D32j+vA1e98xyc
BSts5GTgv589MbmyYzYC7p1EZgzDifjl9xLS9LtB/ypiGLXgPXaS/Yb7hrYhM5ox
O4eGHPfmT6994q6JO5BNdhm8lMmA88t8Y/+D8cH6X3dNttE3OQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIrhnIOWvMwtbvkCq78RERhWnPsxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMDg0M2QzNGUtYmI2MC0z
NzdiLTk5OWUtMGE1MjFmOGJmMGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAizgCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC+Wg7A6jnHlMD4t2mKbmkMuEwzWpamjkOX+rvzZAmFoh/FOEikQ/Oc0
sAoc/laTnBzCAVvZWZ6yVfTvpFpE1tGSo/+ZCVs3lkBaLPYRyNlhvVHNfXDKqkA5
UVmTNdcNuVuQYHoF+aKcsFMMO/+B8mlOp3HW1Pjq1D3Xv+Td+kJMEnRm/A+h0+WS
ElbOI08gD/JCS0KSFBuBjRC5ncHvi01Xyh5V3DgMYq38w/fU98zLahoObELFIdG0
h+kPwpe73+qKjFexOYadYu2W14LyYiQqRT5b+YN6vBknnrZsk3IM3BZmfdoI7OEC
SOoiO90moqoyQIBFSMg4mP1B6Dacoco=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:49 2025 by rpki-client