Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0b192480-dc91-3412-8b6b-787d28d153c1.roa
File:                     0b192480-dc91-3412-8b6b-787d28d153c1.roa (raw, json)
Hash identifier:          4jKkzvPirzaHWYc0PrRIuRAMPuNrTqJ4wbr+9bYkUcc=
Subject key identifier:   29:1F:73:D2:6A:B7:E9:B8:54:50:6E:F7:62:AF:B4:AA:DB:A2:79:54
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D2A0CBDD1900EAB95F7CACA80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0b192480-dc91-3412-8b6b-787d28d153c1.roa
Signing time:             Tue 08 Mar 2022 05:00:00 +0000
ROA not before:           Tue 08 Mar 2022 05:00:00 +0000
ROA not after:            Tue 12 Apr 2022 04:00:00 +0000
asID:                     6167
IP address blocks:        139.56.2.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:2a:0c:bd:d1:90:0e:ab:95:f7:ca:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar  8 05:00:00 2022 GMT
            Not After : Apr 12 04:00:00 2022 GMT
        Subject: CN=788ab69c-a14a-4d1d-9c0d-5fad6137dfa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:1c:13:49:44:8e:73:5c:07:67:d7:9a:2c:
                    63:51:b7:41:9f:23:f9:3c:3e:54:e1:cf:ac:87:4c:
                    8c:02:b9:83:62:02:f6:be:53:a2:32:2e:b9:ef:e5:
                    c9:58:67:5c:74:ad:0a:1d:d6:85:49:6f:1e:db:53:
                    e4:8e:c1:1f:5d:c7:79:24:78:48:eb:d3:81:ed:42:
                    83:5d:2d:53:28:97:26:86:88:77:58:79:d1:c9:75:
                    7f:50:41:91:ca:6b:91:01:ef:0b:75:95:e4:94:f4:
                    77:75:d5:bf:01:fc:a1:8c:bd:5d:21:59:5b:f6:2b:
                    36:44:20:df:3e:09:15:77:f8:ec:d2:17:e3:b1:04:
                    48:2c:3a:cc:06:79:9e:ba:0b:53:40:67:f5:cb:58:
                    42:da:f7:d0:23:20:a4:6d:c5:6d:52:54:4a:5c:48:
                    09:86:a0:15:9a:ae:31:f0:00:40:43:28:6d:5b:65:
                    1c:8a:44:c6:d8:bf:ee:9c:96:71:6b:e1:85:7e:9b:
                    f8:94:57:4c:72:c0:11:7f:1e:60:4d:00:7b:5b:d8:
                    15:6c:d5:c2:eb:4b:03:46:b8:66:8f:ad:4a:dd:52:
                    d2:97:9d:e8:4e:24:1f:f9:ed:5f:86:99:82:6a:12:
                    20:78:19:b5:36:09:c5:77:dd:c6:54:d8:33:1e:c5:
                    2b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:1F:73:D2:6A:B7:E9:B8:54:50:6E:F7:62:AF:B4:AA:DB:A2:79:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0b192480-dc91-3412-8b6b-787d28d153c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:6e:9b:55:b7:a0:3c:f8:3b:e0:5d:2f:73:87:64:c0:5d:85:
         55:e9:62:bc:75:c8:ac:2d:d5:89:58:81:d3:fb:c0:0f:33:a5:
         3e:4f:7f:a1:38:94:af:cd:b5:cc:de:cb:2a:36:f4:ac:5d:fa:
         a7:63:c2:3a:43:f8:a2:7f:a0:4a:98:5e:62:47:94:6a:ed:8e:
         2d:4e:7c:ad:b4:09:f5:ea:c4:f4:a8:0c:47:f6:8b:8c:e3:33:
         fd:52:27:fb:bb:a8:e1:12:88:b9:51:ff:cf:ab:4a:7a:80:c1:
         fe:19:3d:c9:ba:96:49:a2:08:6b:e5:9f:bd:2b:be:7e:66:78:
         45:82:49:e9:dc:2c:e1:b7:8a:5f:cb:be:3d:bb:8d:ba:0f:26:
         75:d9:d1:ac:f0:23:cb:e7:5f:53:89:fb:ce:c8:04:d7:cb:79:
         b9:c0:2b:48:04:6a:bd:8a:cf:8f:d3:9f:49:82:03:32:52:c7:
         47:1c:c1:1d:e6:b1:19:90:6e:ff:aa:15:36:b2:c0:2c:80:18:
         60:b6:d3:a4:55:68:f7:4b:1b:2a:40:c9:03:c0:83:49:0b:0f:
         22:4a:4b:b9:8e:ef:ba:e4:0c:94:64:07:7e:21:cd:d8:15:d6:
         10:44:47:6f:74:d2:88:c2:74:c4:44:0e:b7:bc:51:5b:d9:33:
         d8:23:d7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:30 2025 by rpki-client