Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0ab769a6-1b03-3511-a806-f7e973e3248e.roa
File:                     0ab769a6-1b03-3511-a806-f7e973e3248e.roa (raw, json)
Hash identifier:          vAKi09LZ4W6nsX4nXVz3Rkl+tS+AnJYn9jdkpAS3QBA=
Subject key identifier:   BE:BE:94:E2:A7:9E:5A:CE:BC:0F:FB:AF:41:D1:3C:58:63:72:34:73
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F014C9D9541A06E0411186B80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0ab769a6-1b03-3511-a806-f7e973e3248e.roa
Signing time:             Tue 23 Aug 2022 12:00:00 +0000
ROA not before:           Tue 23 Aug 2022 12:00:00 +0000
ROA not after:            Wed 28 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        56.212.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:01:4c:9d:95:41:a0:6e:04:11:18:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 23 12:00:00 2022 GMT
            Not After : Sep 28 04:00:00 2022 GMT
        Subject: CN=c353cb57-b8de-42cf-8833-a4063b511fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:72:d7:1c:13:de:3e:0a:77:7f:c2:31:63:
                    ed:9c:6c:dc:35:4d:21:49:d2:90:27:f5:18:00:af:
                    20:43:f0:11:0c:62:68:4d:1a:46:4e:0d:39:15:bb:
                    93:6a:ff:6a:fe:ab:1e:2e:f0:a9:2d:0b:c7:34:ed:
                    82:e2:84:ba:e4:56:0b:f6:79:75:b0:e1:51:3d:42:
                    be:4c:d3:10:3d:1c:2f:d7:56:f6:57:5e:dc:b6:6b:
                    6d:8e:aa:68:f9:de:e9:ce:a7:1f:49:07:a6:51:aa:
                    06:94:5c:65:8d:1b:c8:f8:14:dc:8e:6a:d3:ce:d6:
                    42:bb:05:29:6e:8c:84:3d:a8:6c:24:5b:00:f4:c2:
                    f3:27:32:b6:6e:c8:71:a0:e5:f4:b3:0b:e8:e4:5d:
                    db:d6:7c:77:d7:b4:fa:4d:b0:4d:cb:b0:10:25:41:
                    cf:b1:a8:af:09:81:a0:98:7a:44:d3:09:e8:16:4c:
                    04:c9:03:5c:ef:72:3d:f4:ad:17:16:1e:c5:c3:1f:
                    91:ba:0e:c3:88:54:f5:ac:56:68:2a:bc:fe:45:2e:
                    9e:0e:9a:ec:7c:28:ef:a0:d4:e9:22:11:18:a5:5c:
                    4b:a8:40:c3:14:ac:0b:c0:54:c1:f1:41:b4:0e:8c:
                    83:1f:25:96:44:1a:c4:40:e6:54:4f:40:70:8f:03:
                    d4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BE:94:E2:A7:9E:5A:CE:BC:0F:FB:AF:41:D1:3C:58:63:72:34:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0ab769a6-1b03-3511-a806-f7e973e3248e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.212.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:9d:3a:be:75:96:c4:1c:ca:85:bd:da:2b:c9:3e:86:b8:4e:
         e2:62:a3:91:5b:b8:c9:29:92:29:6e:59:32:52:15:49:cb:71:
         03:c7:68:06:e7:98:f6:21:66:16:53:d1:71:12:ef:f4:16:a7:
         5c:9a:b4:1d:3e:04:67:bd:2e:3f:4d:74:b3:e9:a6:bd:52:18:
         50:45:3a:97:48:3f:64:ac:a9:f7:b6:12:8e:db:f0:12:cf:f4:
         b8:3a:31:c5:e1:5e:99:f0:2f:e3:b5:14:85:71:b2:fe:91:47:
         48:7c:43:1a:7f:f1:83:c4:a3:05:f4:90:74:d5:3a:f2:da:25:
         1b:63:ba:84:80:5d:7c:1d:57:70:07:38:92:2b:4f:ba:e0:82:
         f8:68:8e:67:6d:a1:66:49:f8:36:20:ec:d0:66:90:7e:49:35:
         66:b1:80:bb:5e:0d:8d:41:19:5f:b3:2c:c7:96:a7:dd:90:08:
         61:6e:9d:8d:a9:20:77:0e:d2:b1:1c:1a:84:ef:14:19:82:8e:
         30:d8:7a:d9:28:1d:cc:a3:6b:1d:c7:b8:44:78:a4:8b:4b:f8:
         96:19:cd:0b:74:f8:e5:bb:c5:55:ff:8f:6a:3b:8b:93:c0:f3:
         94:1d:f1:10:11:d8:a8:47:1d:b3:87:c1:c1:ba:f1:64:3f:2d:
         f9:c6:29:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:06 2025 by rpki-client