Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/16253f67-da38-38d8-9849-e62152c31961.roa
File:                     16253f67-da38-38d8-9849-e62152c31961.roa (raw, json)
Hash identifier:          BmhF+lKojC0gNJtmi1IuLDkWSB4kp62Hu39SPqmNnBg=
Subject key identifier:   DE:DD:A0:35:4B:FE:3D:0C:7F:F7:1E:C9:DC:70:80:03:62:6F:03:63
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FB4AB1FC0F8CA5B056ADA3850
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/16253f67-da38-38d8-9849-e62152c31961.roa
Signing time:             Wed 26 Oct 2022 12:00:00 +0000
ROA not before:           Wed 26 Oct 2022 12:00:00 +0000
ROA not after:            Thu 01 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        56.123.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b4:ab:1f:c0:f8:ca:5b:05:6a:da:38:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 26 12:00:00 2022 GMT
            Not After : Dec  1 05:00:00 2022 GMT
        Subject: CN=0ff49caa-e0a5-453a-8a4e-a81ad060f477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:07:d6:ac:59:5d:62:3f:66:12:bf:9f:89:b2:
                    1c:de:a7:57:0c:ac:8e:1e:44:29:3f:a5:59:a9:27:
                    ce:8e:a5:e8:63:4d:cf:82:9a:f7:2d:46:bc:4d:b5:
                    52:e7:d1:49:fd:07:c9:7a:f1:6d:f6:0f:4e:12:d4:
                    1a:ed:7f:1f:3b:80:12:df:12:de:78:f4:b7:7c:dc:
                    ef:7e:bc:eb:2e:a6:52:2a:83:04:b4:6f:a7:4a:b9:
                    6f:a7:76:09:32:0f:82:f9:cf:37:78:00:97:45:be:
                    ae:06:22:ff:43:7a:cb:c5:ce:7f:cb:ac:ed:ae:38:
                    78:59:dd:05:f3:d2:75:73:c3:66:57:19:ae:67:16:
                    bf:c9:86:9c:a8:ca:45:8a:f8:ec:07:ed:65:1b:44:
                    d2:f4:56:b4:33:10:27:e2:99:34:55:f6:4e:a8:2e:
                    be:fa:bf:29:54:9c:7c:d5:9f:84:60:f9:5d:fb:1e:
                    29:2f:63:a5:88:f4:9c:87:20:c7:06:82:72:ab:fe:
                    a9:b3:d8:b1:c2:8a:2e:c4:f3:69:bc:aa:5b:eb:8a:
                    fc:b0:7e:da:8a:fc:74:be:ad:69:5c:6b:f9:47:71:
                    ee:52:ae:80:e5:f4:37:75:51:86:24:03:3a:1e:e0:
                    ce:51:d0:b5:60:6b:3c:12:1d:4b:39:3f:2b:18:60:
                    53:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:DD:A0:35:4B:FE:3D:0C:7F:F7:1E:C9:DC:70:80:03:62:6F:03:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/16253f67-da38-38d8-9849-e62152c31961.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.123.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:a2:ce:a9:6e:e1:59:be:d8:10:03:ae:70:22:1d:c4:3a:bb:
         97:35:cd:23:c0:dd:29:8c:f5:2b:43:3d:7b:cf:67:3d:15:38:
         a4:01:43:8e:84:2f:91:ef:a2:46:d2:ac:d7:8f:b6:7f:1d:7d:
         2b:67:9a:d8:79:c5:6e:0c:fe:12:e6:96:c3:39:ce:27:28:62:
         a8:2e:48:f2:ee:a4:d4:e0:71:b0:63:e6:ae:24:dc:d5:5d:a0:
         fa:f8:00:4e:16:8f:92:82:1d:af:80:82:9f:3f:51:91:33:b4:
         49:22:85:98:10:6e:f4:bc:23:03:13:0f:66:aa:cb:f1:1d:f8:
         be:99:8f:32:27:59:74:cf:6c:1f:c3:e4:63:f6:d4:d7:65:ed:
         a5:6e:4e:a9:1c:73:77:ce:ad:d0:8a:b2:a2:df:0d:cc:1d:62:
         4c:f9:c7:5b:1d:af:92:f0:a0:9f:7b:b4:9d:6a:ef:d6:9e:bb:
         8b:8f:b5:ed:0f:64:b4:2a:86:0c:a8:c7:63:0d:72:7d:c3:2e:
         46:1a:c2:d2:69:e4:55:35:73:e3:35:88:74:af:11:87:76:18:
         91:e6:60:c7:8e:04:b3:29:9b:b9:95:9c:e2:d2:d2:da:4e:46:
         ca:b4:67:7a:59:b0:c5:bc:1f:37:0d:79:55:10:ce:84:8d:b8:
         5a:e9:ac:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:40 2025 by rpki-client