Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/21d36150-0126-3b12-a04b-a2e48723f3f0.roa
File:                     21d36150-0126-3b12-a04b-a2e48723f3f0.roa (raw, json)
Hash identifier:          Ph01OgxhqAFFeHzXPLin2b8x6WqvHWx/ojB9hxw2nFU=
Subject key identifier:   46:79:63:2D:78:90:A2:45:CC:3C:DD:29:76:14:3C:6D:07:E6:3B:1F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D2A2A9528640C8A0B17F1B960
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/21d36150-0126-3b12-a04b-a2e48723f3f0.roa
Signing time:             Tue 08 Mar 2022 05:00:00 +0000
ROA not before:           Tue 08 Mar 2022 05:00:00 +0000
ROA not after:            Tue 12 Apr 2022 04:00:00 +0000
asID:                     22394
IP address blocks:        139.56.5.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:2a:2a:95:28:64:0c:8a:0b:17:f1:b9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar  8 05:00:00 2022 GMT
            Not After : Apr 12 04:00:00 2022 GMT
        Subject: CN=c1e52598-96d9-404a-ba12-01b2ea282066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:50:7b:5a:09:be:8b:12:96:c9:61:a3:1c:4f:
                    39:fe:58:cb:e8:f4:a4:57:e6:46:21:21:cd:50:3e:
                    40:d1:6d:b4:21:5c:31:c9:67:a0:2b:57:9c:bf:f5:
                    3e:3c:87:fa:3c:c4:d9:50:e1:f6:dd:78:55:e2:a0:
                    db:e2:17:15:45:2f:38:bc:3b:2a:cf:bb:a8:25:bc:
                    34:92:6c:fb:91:bd:45:7f:e8:68:2b:26:e4:9b:33:
                    a4:39:82:b3:cc:36:63:36:8f:51:b7:4d:2e:b3:ea:
                    a1:1c:04:df:ef:bc:30:dd:d2:b2:e0:45:66:a5:72:
                    f6:85:b2:13:86:57:e0:0d:15:f3:3f:60:25:f0:09:
                    ea:08:da:ef:a8:a6:cc:49:ef:7f:7b:ab:4b:2e:7a:
                    c6:ac:20:4d:61:40:ae:fa:ac:9e:db:c3:8d:1f:f3:
                    87:86:9b:0e:62:4b:be:b6:6d:73:51:a8:14:af:c4:
                    83:42:63:de:7e:3c:9f:71:7e:5b:77:4b:5e:8b:27:
                    06:43:74:c6:4b:b6:f9:62:49:34:8f:0d:95:87:8c:
                    97:59:58:bd:13:d4:74:0d:cc:02:22:c4:d0:cd:f9:
                    d0:dd:8e:a2:22:69:b3:65:b3:cd:f9:1a:96:df:8b:
                    af:a1:d6:92:d6:ac:84:d1:30:8a:a2:b8:67:a9:0d:
                    3e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:79:63:2D:78:90:A2:45:CC:3C:DD:29:76:14:3C:6D:07:E6:3B:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/21d36150-0126-3b12-a04b-a2e48723f3f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:c5:d4:f8:a6:21:38:35:51:68:47:03:eb:d0:0b:e7:60:e1:
         1e:8d:7d:05:f6:17:30:c4:8c:96:5c:a6:c9:a0:eb:c9:f9:13:
         ba:39:56:10:fd:10:da:f0:42:3c:e0:6d:69:de:44:a2:b9:a5:
         5e:da:d6:7d:11:a3:1e:0a:c6:2b:f3:7d:fe:98:fb:f2:08:42:
         14:69:cb:a7:f4:1b:4e:d5:bd:65:62:5b:61:62:27:e4:c3:18:
         f7:79:16:22:b0:ae:02:69:95:7c:51:80:67:bc:64:4b:f7:40:
         d3:ac:26:54:64:a8:35:9c:c6:17:1b:ac:82:d8:c7:a4:38:0c:
         b3:90:f6:6a:83:79:0d:a5:88:ec:09:8e:a6:f1:e6:32:f8:b0:
         21:77:fe:8b:1c:0f:6e:0d:82:4c:82:20:57:e2:03:fe:7f:1c:
         86:b2:32:e5:51:57:11:bf:02:1a:b9:a0:ba:ff:d7:c7:4d:a5:
         73:c9:78:11:1f:93:55:3e:00:99:0b:60:3c:7d:88:ba:ff:60:
         d0:36:ef:db:ca:be:76:66:74:44:f8:65:f0:3f:83:fe:d4:a9:
         e9:83:e4:75:90:46:82:b8:73:be:09:c6:5f:f3:d0:80:59:0f:
         83:e9:ed:00:2f:ff:15:24:47:cc:e5:12:2d:20:55:14:6b:96:
         43:85:e5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:19 2025 by rpki-client