Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/12d592c2-4373-30cd-afa8-bdf76330396f.roa
File:                     12d592c2-4373-30cd-afa8-bdf76330396f.roa (raw, json)
Hash identifier:          87wmjwG7c7DFNlXifu5xM3lXicMux3vux6vmv4EqEqs=
Subject key identifier:   13:00:3F:2E:34:8F:6B:14:35:CB:68:91:31:16:05:06:93:E3:D3:9B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840C67683D3FFC297A243416440
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/12d592c2-4373-30cd-afa8-bdf76330396f.roa
Signing time:             Wed 01 Feb 2023 12:00:00 +0000
ROA not before:           Wed 01 Feb 2023 12:00:00 +0000
ROA not after:            Thu 09 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        56.79.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c6:76:83:d3:ff:c2:97:a2:43:41:64:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  1 12:00:00 2023 GMT
            Not After : Mar  9 05:00:00 2023 GMT
        Subject: CN=0e37b8c5-f44c-4b43-bc29-367bec8dc0cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fd:93:e0:34:18:b2:8b:43:fc:c2:5b:80:73:
                    e9:9a:0a:15:d0:79:98:5b:2f:30:d1:8f:b0:d3:b2:
                    72:d2:5a:98:66:3b:06:13:c0:64:5e:55:18:27:a3:
                    8a:32:02:85:3f:46:98:62:f5:48:ef:f8:1f:30:ea:
                    32:f5:0a:1c:88:39:fe:76:c6:86:ad:3e:3e:6f:4c:
                    af:ef:39:e9:d1:3f:17:b5:8b:90:c0:5c:6b:15:f3:
                    98:b5:b6:df:08:db:3f:ef:21:69:68:7e:99:f2:ff:
                    8b:5c:c2:90:b4:a6:6c:57:f8:db:cd:ec:bf:cf:f7:
                    30:73:dd:37:86:1d:fd:a7:08:51:69:a8:6a:fb:dd:
                    61:62:41:1a:52:75:16:b7:c1:77:f3:49:2c:43:68:
                    c5:28:5b:f7:63:a8:6a:fd:99:a3:02:ee:76:fa:d0:
                    64:02:6f:cf:70:d6:6c:69:1e:6d:f1:e5:e9:59:85:
                    f1:53:fc:a5:fa:40:a7:db:8a:dd:5a:80:43:7d:d9:
                    64:a9:69:cd:0d:18:d5:d8:53:68:69:f0:55:81:b2:
                    27:e0:25:80:33:66:48:67:e1:a7:f7:61:1e:27:45:
                    bf:72:74:43:a9:df:7b:75:48:c8:1f:ef:e9:56:f0:
                    14:58:66:d6:8e:38:78:48:56:c5:48:a6:c9:34:47:
                    e8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:00:3F:2E:34:8F:6B:14:35:CB:68:91:31:16:05:06:93:E3:D3:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/12d592c2-4373-30cd-afa8-bdf76330396f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.79.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:6c:ba:09:57:ec:26:c3:53:c7:00:e1:c3:89:5d:34:47:96:
         ab:88:b4:82:a0:b6:d9:aa:a0:98:54:69:27:29:b7:bf:ff:6a:
         e0:ab:f8:9b:8f:f2:e1:53:61:e2:8b:b5:db:00:01:32:84:e8:
         7f:b0:2e:a2:30:d7:8e:fa:9d:03:52:7e:fe:e7:24:ba:f6:fc:
         e8:a1:57:ee:a4:a1:b8:70:71:c3:c2:76:80:9f:7e:1b:e3:bb:
         ad:ee:21:b4:7f:b2:5a:cc:0b:76:91:ba:ef:62:62:fd:f3:c0:
         96:ac:0e:92:ae:58:45:4c:3e:9a:0c:9e:79:ad:bc:ce:ba:db:
         f6:91:22:42:4a:6f:63:2b:29:6f:8e:d2:82:45:3a:2a:88:a1:
         9d:a0:d7:50:92:23:1d:4d:f4:84:9e:f3:62:57:83:54:66:d7:
         94:a0:37:c2:11:01:6c:8e:83:df:c5:6b:52:ab:ad:78:da:ea:
         26:57:c9:85:0c:41:8c:f8:fb:98:68:0b:46:d7:be:d1:0d:c2:
         af:87:14:da:f2:60:7e:76:3d:87:07:6e:51:d8:18:46:bd:72:
         d5:3d:5c:c8:e1:0e:e7:2a:15:a8:cd:db:30:c4:04:aa:bf:81:
         ba:ed:f7:8d:68:13:46:be:68:d3:45:e6:c4:4a:5a:92:e0:26:
         4c:11:c5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:55 2025 by rpki-client