Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a01e1e0-b95c-3950-ae88-9a3e9ebde8df.roa
File:                     2a01e1e0-b95c-3950-ae88-9a3e9ebde8df.roa (raw, json)
Hash identifier:          QUdodnX8TKytDCd8PMeYdI7i1cF1hzpVOJuQgQt5+SQ=
Subject key identifier:   AD:6D:FD:1B:69:54:EA:EB:04:1A:55:9D:18:44:AA:3A:FF:38:41:09
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F9ED45AD82C694B0FAF9919E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a01e1e0-b95c-3950-ae88-9a3e9ebde8df.roa
Signing time:             Tue 18 Oct 2022 13:33:07 +0000
ROA not before:           Tue 18 Oct 2022 13:33:07 +0000
ROA not after:            Wed 23 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        56.33.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:9e:d4:5a:d8:2c:69:4b:0f:af:99:19:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 18 13:33:07 2022 GMT
            Not After : Nov 23 05:00:00 2022 GMT
        Subject: CN=931e6912-ae7a-46a3-a804-e903f7dcbe87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d4:e0:29:ac:c3:c8:f4:0c:5b:4a:28:c7:36:
                    a2:17:00:64:6a:27:b0:a6:ac:49:f8:fd:3a:90:ff:
                    39:d4:e3:24:9c:ae:70:56:b1:6d:77:b9:1c:9c:e5:
                    c3:b9:56:46:0a:be:49:f4:5d:a6:81:e7:8e:4c:a2:
                    f2:28:b1:1b:63:00:0a:7b:7b:21:aa:ab:50:de:a3:
                    67:ae:94:bf:ad:b6:9c:2c:ed:38:ea:2e:53:de:2e:
                    8b:e7:56:54:10:59:03:e6:61:41:05:2a:24:24:ed:
                    ea:ca:91:ea:0c:74:a6:89:4c:b8:a0:79:19:3e:f7:
                    bb:b6:1a:1c:a6:41:ca:2f:be:c5:ff:b0:6a:7e:21:
                    43:0b:b1:95:87:ff:24:60:0e:04:c8:08:ad:33:a1:
                    c4:7e:4f:f3:bb:05:ad:1a:fe:28:09:62:4c:d8:4f:
                    3c:9a:aa:cb:e5:f0:59:50:5c:c0:39:94:19:8b:a2:
                    ec:80:3e:fa:7b:47:9e:53:a7:7f:72:38:45:5f:ed:
                    8f:a3:b1:14:62:24:f8:fc:96:11:ec:b6:e6:19:f0:
                    ae:ea:eb:cf:94:68:5e:e6:55:d7:1f:2c:ab:ac:00:
                    8b:e2:f2:58:2a:d4:46:4c:1b:e2:55:b3:8a:c3:4c:
                    80:b7:8d:5c:22:d9:77:b0:ef:53:76:ee:d7:60:28:
                    a6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6D:FD:1B:69:54:EA:EB:04:1A:55:9D:18:44:AA:3A:FF:38:41:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a01e1e0-b95c-3950-ae88-9a3e9ebde8df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.33.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:aa:41:20:3f:ad:9a:ce:bf:ab:98:3d:81:00:8c:67:72:bf:
         c3:f5:66:17:74:fe:21:9f:02:59:49:e7:77:d3:a5:45:8d:85:
         43:da:2a:a5:cc:a0:c8:14:e2:78:28:bf:67:6e:dc:0b:9d:74:
         01:52:49:88:b4:11:e1:45:7d:10:e3:af:d4:41:19:a3:74:5e:
         08:f9:c5:24:14:4b:ca:21:54:40:d2:55:74:96:4f:f7:0c:bc:
         c3:38:fa:e9:e5:91:fd:5a:48:7e:4f:56:d8:ca:f6:c8:42:9e:
         b6:12:7b:88:97:d7:7e:8c:68:07:13:ca:b5:cd:65:75:45:af:
         67:96:8a:c5:d0:a2:6f:ea:cb:4d:b7:ab:12:ca:78:56:64:b8:
         dd:70:ed:34:31:e1:d2:d6:9b:7c:ad:2c:b6:d2:35:78:b6:94:
         98:f2:00:e7:fd:05:e2:2b:ec:ed:7e:2f:1c:ce:cc:39:ab:57:
         f8:56:70:cb:0a:81:d1:21:f2:f9:1c:35:ca:3b:8f:17:b4:cf:
         04:2a:99:fb:d5:26:93:48:42:4e:54:c4:6e:31:69:e9:6e:b9:
         03:de:c7:a1:97:19:3f:c9:84:6a:31:11:1f:5e:07:76:50:00:
         b2:50:a3:d3:9d:0b:12:1d:b7:f9:b5:cd:df:19:19:2d:0a:f4:
         a6:6d:3c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:18:57 2025 by rpki-client