Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/20e61626-70bd-384f-bf02-410af6ac942c.roa
File:                     20e61626-70bd-384f-bf02-410af6ac942c.roa (raw, json)
Hash identifier:          +4HezddVsgFmIzzfEPepvaP2jgtSoDSCUDAxSy/3mBM=
Subject key identifier:   8F:90:DF:89:C6:BC:FB:E5:18:15:2C:58:B6:5D:9A:73:EC:A5:D3:02
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FB4D7C2F68CB0DC2A58BF89E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/20e61626-70bd-384f-bf02-410af6ac942c.roa
Signing time:             Wed 26 Oct 2022 12:00:00 +0000
ROA not before:           Wed 26 Oct 2022 12:00:00 +0000
ROA not after:            Thu 01 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        56.137.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b4:d7:c2:f6:8c:b0:dc:2a:58:bf:89:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 26 12:00:00 2022 GMT
            Not After : Dec  1 05:00:00 2022 GMT
        Subject: CN=29e30935-a64e-4cae-85d3-e6c9075aa909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c4:b6:64:b3:a7:e5:48:0e:79:50:7d:11:c6:
                    4d:f6:e9:c4:e1:c8:b7:8e:9d:70:23:45:ce:c1:52:
                    a3:0a:8b:0b:84:0b:4c:c0:45:2d:a7:8e:6b:e8:a5:
                    18:d3:01:de:ae:a0:44:a6:db:fd:ce:06:39:dc:72:
                    54:2c:e9:15:ac:ee:34:d4:c5:23:c3:9e:1a:93:05:
                    18:b5:7f:3e:5f:62:6b:8f:ea:fe:5b:30:28:e3:ae:
                    15:00:ee:56:c9:49:97:8a:dd:c5:98:6b:aa:01:f6:
                    c9:ee:21:fc:b4:13:c1:50:40:3e:13:f8:7b:1a:15:
                    63:2e:93:18:a8:38:51:e9:e1:24:b3:3f:d7:06:0a:
                    5f:46:fc:77:61:18:9e:ce:3a:1a:42:89:65:94:e2:
                    24:c2:b9:76:a5:2c:05:62:3f:82:d4:91:70:7e:bf:
                    bd:4d:59:e8:ab:30:a5:3d:ba:08:24:c9:a1:20:e6:
                    d9:06:93:d0:ce:7c:06:51:ab:7c:d2:36:25:0b:88:
                    4a:a5:a6:ce:01:ad:dd:0a:ba:e9:c9:8a:a2:4d:a6:
                    8a:c7:af:43:15:01:a5:5e:7e:08:7a:0d:56:bd:00:
                    e1:85:09:e7:70:c7:9c:40:cf:d4:e3:d7:6b:f4:e4:
                    f5:d0:f0:d6:80:ff:2a:72:e3:97:7f:75:96:7c:8c:
                    b3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:90:DF:89:C6:BC:FB:E5:18:15:2C:58:B6:5D:9A:73:EC:A5:D3:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/20e61626-70bd-384f-bf02-410af6ac942c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.137.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:f5:ee:42:b2:ee:4f:1c:4c:c9:35:93:25:1a:fb:24:e1:31:
         cd:99:3e:0c:90:6a:4c:2a:10:f4:b9:9b:3a:b8:28:b1:83:98:
         f3:9a:dd:fc:5c:04:da:c7:dc:e0:8a:3c:1e:c3:b1:73:ce:04:
         10:73:aa:29:27:46:4f:a1:ea:1b:62:31:aa:4d:0c:45:1c:b4:
         9a:9d:cc:0a:a6:28:a5:94:d5:51:37:9b:5c:46:be:0c:08:96:
         6e:0f:5d:6d:a0:10:c3:ee:b7:00:f1:ae:01:e6:4a:88:1f:5a:
         7b:c4:eb:a4:c2:90:3b:cb:cd:17:b0:34:ca:a7:17:15:ee:67:
         67:69:0e:b5:fd:50:d9:ce:97:0b:5a:b5:93:cc:5c:cd:7d:46:
         4c:86:7c:b6:95:7e:50:62:41:c7:4f:af:e2:cd:30:97:fa:72:
         70:22:64:64:41:b7:c7:60:b0:78:4f:48:2f:25:d1:90:6e:b8:
         fa:d8:59:76:37:9a:84:53:d1:f2:52:88:49:ff:58:42:2e:5d:
         7c:4a:7f:18:41:3d:3b:ef:a3:ad:aa:7e:1f:78:58:80:81:71:
         a2:58:c8:45:bd:3e:d2:61:f8:cd:e8:09:73:17:6c:ff:98:0a:
         93:ba:17:a9:0d:b6:12:7a:3f:e5:53:55:dc:c6:73:24:d9:18:
         e9:89:fb:43
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+018L2jLDcKli/ieAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAyNjEyMDAwMFoXDTIyMTIwMTA1MDAwMFowLzEtMCsGA1UEAxMk
MjllMzA5MzUtYTY0ZS00Y2FlLTg1ZDMtZTZjOTA3NWFhOTA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMS2ZLOn5UgOeVB9EcZN9unE4ci3jp1wI0XO
wVKjCosLhAtMwEUtp45r6KUY0wHerqBEptv9zgY53HJULOkVrO401MUjw54akwUY
tX8+X2Jrj+r+WzAo464VAO5WyUmXit3FmGuqAfbJ7iH8tBPBUEA+E/h7GhVjLpMY
qDhR6eEksz/XBgpfRvx3YRiezjoaQolllOIkwrl2pSwFYj+C1JFwfr+9TVnoqzCl
PboIJMmhIObZBpPQznwGUat80jYlC4hKpabOAa3dCrrpyYqiTaaKx69DFQGlXn4I
eg1WvQDhhQnncMecQM/U49dr9OT10PDWgP8qcuOXf3WWfIyzSwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFI+Q34nGvPvlGBUsWLZdmnPspdMCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjBlNjE2MjYtNzBiZC0z
ODRmLWJmMDItNDEwYWY2YWM5NDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOIkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEArvXuQrLuTxxMyTWTJRr7JOExzZk+DJBqTCoQ9LmbOrgosYOY85rd/FwE
2sfc4Io8HsOxc84EEHOqKSdGT6HqG2Ixqk0MRRy0mp3MCqYopZTVUTebXEa+DAiW
bg9dbaAQw+63APGuAeZKiB9ae8TrpMKQO8vNF7A0yqcXFe5nZ2kOtf1Q2c6XC1q1
k8xczX1GTIZ8tpV+UGJBx0+v4s0wl/pycCJkZEG3x2CweE9ILyXRkG64+thZdjea
hFPR8lKISf9YQi5dfEp/GEE9O++jrap+H3hYgIFxoljIRb0+0mH4zegJcxds/5gK
k7oXqQ22Eno/5VNV3MZzJNkY6Yn7Qw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:29 2025 by rpki-client