Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0c0042b5-509e-39b7-8847-e811364cb9dc.roa
File:                     0c0042b5-509e-39b7-8847-e811364cb9dc.roa (raw, json)
Hash identifier:          FYEGbslOuU1LSxx4NJrpLKfBRnG3vYvvq0EUVDb+MU4=
Subject key identifier:   E5:3C:9A:D7:DD:FE:E6:B7:80:1F:61:16:06:C9:E9:48:9A:3A:00:4A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FB5A833903B83DCCBACD0BE80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0c0042b5-509e-39b7-8847-e811364cb9dc.roa
Signing time:             Wed 26 Oct 2022 12:00:00 +0000
ROA not before:           Wed 26 Oct 2022 12:00:00 +0000
ROA not after:            Thu 01 Dec 2022 05:00:00 +0000
asID:                     22394
IP address blocks:        139.56.14.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b5:a8:33:90:3b:83:dc:cb:ac:d0:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 26 12:00:00 2022 GMT
            Not After : Dec  1 05:00:00 2022 GMT
        Subject: CN=113dfda4-9c93-4156-b4e7-aa6c7d0e517e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6a:42:25:93:47:46:63:62:56:f2:a7:3b:35:
                    d2:ea:a0:bd:d9:5d:4d:31:26:03:bc:81:b6:1a:f6:
                    3b:dc:44:0c:0d:85:13:d4:28:0f:c6:03:a7:48:a2:
                    ed:0b:8e:9b:64:f4:ae:19:3f:b5:c5:bf:d7:e3:48:
                    0e:88:85:a6:41:e9:f6:9b:9f:6a:b0:6a:e1:0f:1d:
                    31:f6:dc:36:c3:0f:a2:51:d0:7b:f7:6e:24:be:b0:
                    54:b2:fa:06:b4:26:aa:1c:cf:0d:b8:e8:1b:6b:7e:
                    80:46:ed:07:db:a9:8c:cd:93:f2:a1:a3:8e:d9:4d:
                    d6:e0:42:56:bc:d3:62:83:ad:20:63:97:66:4a:ad:
                    22:53:fe:7a:a4:28:b7:38:c5:d6:30:ac:1b:89:4f:
                    ed:20:ca:d4:ec:f1:e0:c0:f6:29:6d:7b:af:fb:59:
                    0f:30:50:9a:49:b1:2a:80:b5:c7:d6:79:ee:70:9e:
                    9d:28:16:8e:39:ea:4d:4e:95:f6:d5:7b:8b:24:ba:
                    05:5f:75:2a:73:81:e4:c9:71:7a:4d:92:b8:7b:0b:
                    62:21:29:50:f0:dd:3e:c7:5b:63:ab:92:d5:4d:74:
                    98:1f:f5:8f:62:dc:6d:6a:23:02:8c:34:2c:04:fa:
                    4b:cf:b1:6d:52:da:2c:4a:62:45:76:db:6c:b8:48:
                    10:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:3C:9A:D7:DD:FE:E6:B7:80:1F:61:16:06:C9:E9:48:9A:3A:00:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0c0042b5-509e-39b7-8847-e811364cb9dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:ca:a3:b6:a1:96:c1:3d:f5:96:09:86:1c:68:08:4b:35:f4:
         c7:5d:9b:56:39:d3:d3:e7:2a:3f:4a:02:cc:49:77:48:36:87:
         c7:c9:00:e9:75:ed:6a:82:92:8d:a9:34:7b:e0:48:44:35:36:
         e3:eb:ab:ed:65:2e:71:0a:11:45:f8:fb:8b:bd:15:90:23:e9:
         56:a6:18:71:6a:7c:12:77:3f:ce:24:6b:71:56:15:29:90:4c:
         5b:29:2f:96:45:0a:3f:0c:ad:30:86:af:41:2c:60:d9:ff:7a:
         3c:b1:ff:58:93:08:36:1c:0d:ba:28:55:a9:6f:c4:ee:cd:0e:
         d4:34:fa:18:58:41:66:27:24:c6:a6:c3:b5:34:d6:dd:02:43:
         33:37:6d:33:d8:82:2c:cc:eb:3c:17:c7:dd:52:6d:3f:15:f1:
         04:90:db:af:63:44:8b:9a:3f:87:7b:08:dc:bc:c1:d9:05:31:
         b0:72:9a:9a:0a:00:4a:c9:b8:11:f4:c0:03:29:e2:c8:c7:a1:
         7a:a7:b6:fe:c7:af:fb:09:43:90:3b:88:6a:ac:3a:67:68:cc:
         b8:7d:5d:85:8d:86:ce:5d:a2:f8:53:c7:38:f1:69:73:45:da:
         79:91:af:2f:f2:a5:3d:0d:b7:7e:d4:a0:65:41:08:21:65:9b:
         cc:fc:c5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:18:19 2025 by rpki-client