Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0f55b420-5b47-3d5d-858c-95a9100867b9.roa
File:                     0f55b420-5b47-3d5d-858c-95a9100867b9.roa (raw, json)
Hash identifier:          CtFMIrvUiDRjNWQDmRcXU086omtmPvCUb80ICJGk7yU=
Subject key identifier:   58:CA:8D:03:F8:3A:61:EB:10:49:89:EA:82:9D:D6:B1:BD:C5:52:75
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EEFBCA10BDA62D28D0B982B80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0f55b420-5b47-3d5d-858c-95a9100867b9.roa
Signing time:             Tue 16 Aug 2022 12:00:00 +0000
ROA not before:           Tue 16 Aug 2022 12:00:00 +0000
ROA not after:            Wed 21 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        56.104.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:ef:bc:a1:0b:da:62:d2:8d:0b:98:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 16 12:00:00 2022 GMT
            Not After : Sep 21 04:00:00 2022 GMT
        Subject: CN=2e9e5b5d-81aa-4144-b829-5f844b73fe51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:05:60:38:b6:49:ca:08:d4:12:d9:ec:95:a1:
                    94:4d:8c:f1:b6:06:6c:9c:fa:6a:de:05:87:fb:bd:
                    92:33:85:30:78:11:6c:f1:06:11:f3:78:5e:e9:64:
                    07:b0:8f:fe:80:2b:87:31:27:e0:66:ab:51:e4:07:
                    00:ea:af:c1:b4:be:63:b7:77:41:6f:1d:e0:f7:6e:
                    9c:a9:55:8a:40:1e:33:2e:fd:1e:1f:88:ed:13:6b:
                    c1:fa:43:3d:06:20:7e:e3:30:7f:9c:f8:c4:9f:75:
                    3a:95:b8:42:7c:f6:22:e6:19:3b:10:d5:8d:78:28:
                    a2:3e:d4:e0:fe:54:33:76:0f:48:5c:14:ce:de:b0:
                    71:5b:d6:de:5f:da:98:8a:93:1a:ef:89:05:93:1f:
                    af:70:36:20:69:53:fd:cf:51:37:80:c6:8e:33:81:
                    56:01:6e:e0:7b:1d:6a:10:40:3b:00:4e:8c:98:23:
                    40:cf:a0:3c:2b:3b:5a:59:54:09:14:70:82:80:3a:
                    46:08:6b:e4:18:7b:ef:94:9e:fe:78:e1:28:78:bd:
                    64:ce:7a:e7:4c:2d:13:be:d5:c8:e8:18:ec:3a:5f:
                    ef:a4:7b:98:c3:c2:57:72:79:13:79:42:e0:13:5b:
                    47:e1:68:4d:41:f9:2d:56:7d:9c:7f:e7:6e:ac:8a:
                    fc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CA:8D:03:F8:3A:61:EB:10:49:89:EA:82:9D:D6:B1:BD:C5:52:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0f55b420-5b47-3d5d-858c-95a9100867b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.104.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:f9:1e:a3:66:c0:37:04:3f:41:1f:72:7a:45:bf:6b:c6:75:
         e5:5d:75:84:ec:04:bf:47:38:49:76:8f:b3:6b:bc:75:68:36:
         c3:6d:f4:93:24:b5:52:78:ae:da:8f:9d:16:4a:d7:2b:36:41:
         bf:7d:c7:1e:1e:93:15:94:78:4c:55:8b:4c:6b:b3:67:83:60:
         05:92:63:85:54:09:e0:75:57:21:c0:63:bd:14:9d:cd:ef:05:
         76:5e:db:f8:13:99:bf:08:81:24:cd:b3:11:ac:90:ca:a8:a9:
         52:d4:65:73:45:16:34:f4:d9:ac:3e:58:04:35:bb:a6:1e:ce:
         cd:d9:29:94:47:2e:0e:a8:3d:d9:78:ff:25:7a:01:df:b7:c7:
         6e:23:79:ab:ff:6d:41:90:2c:b3:c5:db:13:b6:4f:4c:9d:32:
         17:69:89:51:99:cd:9c:19:84:73:a5:d8:fe:b0:b6:bb:24:08:
         32:b4:9f:36:bf:d6:54:09:ec:dd:cf:a4:bc:db:9a:5d:28:8c:
         60:13:bd:3f:66:b0:8d:7d:77:34:13:18:d3:c4:db:7b:97:5e:
         56:58:93:61:f4:50:68:8f:9b:94:6d:70:c9:27:13:ca:26:40:
         3b:29:f4:a4:e5:03:45:56:e4:89:92:a9:5f:51:15:fb:d6:46:
         cb:0f:ee:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:11:32 2025 by rpki-client