Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1ba4260f-8a6f-3f7e-9dc4-2dc7f55d22f6.roa
File:                     1ba4260f-8a6f-3f7e-9dc4-2dc7f55d22f6.roa (raw, json)
Hash identifier:          VgMrkLZdKIMSrkV5IBz/KbSBz84irxW63J1Fo8tmXFI=
Subject key identifier:   54:90:CD:DC:D4:0F:C3:5B:80:19:3D:5F:4B:7C:01:6A:9D:F2:7B:7D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F507C52B18F46D05F70AD0300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1ba4260f-8a6f-3f7e-9dc4-2dc7f55d22f6.roa
Signing time:             Tue 20 Sep 2022 12:00:00 +0000
ROA not before:           Tue 20 Sep 2022 12:00:00 +0000
ROA not after:            Wed 26 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        56.33.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:50:7c:52:b1:8f:46:d0:5f:70:ad:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 20 12:00:00 2022 GMT
            Not After : Oct 26 04:00:00 2022 GMT
        Subject: CN=d075bd97-a227-4db7-beab-c90da47c9334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:75:c1:ec:42:f3:02:6b:a0:d3:1f:b4:a1:f5:
                    ca:76:6a:34:0c:35:35:8e:f3:56:68:85:9f:75:ad:
                    65:77:13:43:c8:7c:41:d6:20:cc:9e:3a:4d:ee:93:
                    37:8f:4e:b1:10:11:12:03:8a:20:44:32:ac:83:ce:
                    b1:04:54:84:2a:b7:76:2f:15:a9:99:dd:e8:10:19:
                    15:e6:c9:8e:88:34:9e:ad:d5:14:29:fe:e3:89:fe:
                    5a:c6:5f:38:af:60:03:e4:a4:02:b1:76:bd:68:d3:
                    e3:25:5d:72:e7:4f:79:b5:86:dd:4c:31:4c:45:ab:
                    cb:a3:07:34:e9:8d:92:9f:75:45:da:00:d6:ca:89:
                    af:74:f5:c3:a7:91:df:70:6b:33:3e:b2:0b:eb:4a:
                    e3:f3:88:b4:9d:be:03:a4:af:e9:1d:c7:db:ac:c0:
                    8d:23:7d:20:bb:10:df:78:65:05:ad:33:e2:ea:55:
                    ee:32:8a:59:d6:ac:3a:d3:b2:e9:bd:68:1c:b7:97:
                    21:64:5a:07:4a:46:e7:2e:25:c3:8f:3c:49:4c:b7:
                    1f:83:6d:0a:86:87:69:8a:f0:03:7a:9f:73:6d:a9:
                    a0:93:b3:d3:bb:1b:1e:d1:b4:50:b8:86:4e:e8:82:
                    90:d9:e6:1d:48:7a:6b:50:08:c3:d1:42:cd:2a:b2:
                    78:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:90:CD:DC:D4:0F:C3:5B:80:19:3D:5F:4B:7C:01:6A:9D:F2:7B:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1ba4260f-8a6f-3f7e-9dc4-2dc7f55d22f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.33.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:41:9d:10:34:c5:d0:f4:fc:0d:41:fc:3b:22:ba:26:68:3a:
         ee:3a:6f:51:ba:cf:18:1e:3c:6f:79:dd:a9:70:f3:ff:64:c8:
         5d:00:ca:26:ac:a5:87:89:90:71:cb:f8:56:a5:c5:8b:2a:e6:
         5d:02:44:70:b2:95:36:da:6c:b7:e7:50:cb:12:6f:aa:de:98:
         76:fa:d8:ce:be:47:6f:5c:78:c1:ba:02:e1:aa:1e:eb:1a:d4:
         02:fe:49:69:fa:51:aa:3b:73:f9:18:1e:e0:99:dc:6a:70:03:
         8a:ef:fa:ef:2f:06:97:26:59:e2:be:fb:0f:0c:57:91:d5:d4:
         6b:f4:5f:d8:54:41:32:c1:28:a3:ab:b0:8d:8d:e3:2e:74:14:
         11:1f:db:59:b3:67:09:c6:bf:18:fe:fb:08:c1:2d:d7:59:05:
         86:84:40:99:c2:ec:af:5d:58:6f:71:c5:5d:54:d2:21:01:6e:
         9e:58:6d:7b:89:12:c7:0b:ab:01:a2:90:24:f8:5a:ad:fd:04:
         91:93:27:86:f3:09:45:27:04:af:0f:75:70:e1:f4:7f:2f:be:
         51:7a:69:0d:8d:95:10:99:54:1e:be:e4:29:28:ca:27:6b:d7:
         03:e6:a1:62:39:0e:70:b2:ae:66:bf:de:54:6d:61:cf:76:0d:
         af:f0:06:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:42:02 2025 by rpki-client