Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/158fb989-43c8-3c4c-8e39-2d8d8fc4948f.roa
File:                     158fb989-43c8-3c4c-8e39-2d8d8fc4948f.roa (raw, json)
Hash identifier:          KonWuYanvg57gsByLdxPvUbgN4biTt90qfzwIqINwNw=
Subject key identifier:   7A:F7:47:2D:04:A4:FA:D8:AA:FD:AD:1F:5D:DE:DF:A0:F4:4E:93:EE
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584075792361E7B857620267F840
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/158fb989-43c8-3c4c-8e39-2d8d8fc4948f.roa
Signing time:             Tue 03 Jan 2023 12:00:00 +0000
ROA not before:           Tue 03 Jan 2023 12:00:00 +0000
ROA not after:            Wed 08 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        56.109.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:75:79:23:61:e7:b8:57:62:02:67:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  3 12:00:00 2023 GMT
            Not After : Feb  8 05:00:00 2023 GMT
        Subject: CN=6b823ec1-28c1-4442-8bfb-d655d597f002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:20:3e:1a:49:fe:4d:72:b8:2b:97:8c:30:9f:
                    2a:bd:da:cd:19:8f:ab:fa:65:c4:28:a6:15:e1:b8:
                    f3:56:ac:79:67:0d:46:53:2e:a8:6f:1e:bf:6f:bf:
                    cd:09:0e:e7:84:f5:7c:8d:63:b0:79:a5:11:04:9e:
                    f7:b0:70:ce:3f:d9:d6:51:d8:b7:f6:8b:12:46:6f:
                    67:cf:1c:b7:46:4a:cf:d1:37:83:5b:ae:e7:3a:6c:
                    7b:09:ce:8e:c0:5a:df:c8:0f:35:fc:3a:fb:0b:e9:
                    8e:5d:31:ed:06:e1:7c:27:ae:0a:a9:a2:52:54:33:
                    38:d4:4d:80:8e:7c:62:87:13:c7:9d:62:c6:1e:0d:
                    73:47:ac:79:b9:ce:04:0b:fc:9c:aa:e7:bf:11:a0:
                    6f:36:c8:47:6c:9b:2e:4b:5a:13:42:69:41:76:fd:
                    6b:5c:0f:40:9a:34:0f:8a:d4:cf:40:f5:b1:d7:ac:
                    29:ba:c5:2b:eb:7b:e1:78:7b:7b:dd:e0:38:f9:a8:
                    bb:41:23:fb:00:64:96:48:b0:63:4f:38:41:e8:90:
                    76:98:23:be:2d:37:25:5b:6e:f2:8d:a4:24:55:72:
                    ed:b5:91:84:65:c8:33:47:b9:17:c0:eb:25:3e:62:
                    ec:fe:70:ce:3e:58:68:a4:87:c8:73:ef:b6:3b:93:
                    b1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F7:47:2D:04:A4:FA:D8:AA:FD:AD:1F:5D:DE:DF:A0:F4:4E:93:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/158fb989-43c8-3c4c-8e39-2d8d8fc4948f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.109.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:2c:10:0b:91:cf:19:76:38:cc:f9:2d:c4:9a:b1:23:23:ef:
         8c:70:8d:d7:b3:07:a5:6b:fd:08:11:eb:cd:d1:01:7a:2d:54:
         33:b8:30:c0:3c:25:95:07:75:7b:a9:45:64:b0:8e:09:a2:1d:
         92:53:c7:84:34:8f:b8:cb:21:b2:85:d0:fc:75:c9:d0:ab:1f:
         eb:f5:67:b8:1e:58:3a:a7:28:5f:b2:e3:85:6d:3f:9e:3e:bb:
         96:67:8c:89:ab:35:84:b0:54:0d:fd:3f:38:29:ec:f5:27:3d:
         8f:41:fc:a6:21:92:5f:86:f4:39:02:92:90:fb:04:84:99:36:
         33:66:97:38:ea:a2:3a:35:39:0f:3d:6e:5d:f8:54:4a:11:35:
         9c:9a:49:c5:10:fd:d4:30:71:29:9f:2c:80:4a:3a:62:9f:2d:
         2c:9a:c7:f8:e7:89:17:20:4e:09:4f:2d:5c:8c:da:41:12:81:
         22:02:78:f1:e3:14:3c:52:bd:c5:64:04:f7:91:65:9b:20:d8:
         de:df:1d:e4:a2:df:13:a3:18:52:f6:80:b8:3d:f7:38:89:df:
         33:c9:ce:87:93:9f:1c:c9:63:b6:3e:fb:22:62:65:18:cb:a8:
         21:cf:2d:42:95:fa:9c:14:86:ba:d6:1a:c5:d4:5f:41:44:8a:
         eb:24:af:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:42 2025 by rpki-client