Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2bec6f66-0a89-363c-84fb-e73398432679.roa
File:                     2bec6f66-0a89-363c-84fb-e73398432679.roa (raw, json)
Hash identifier:          c6VbqQuWReCdSI8u1r87QDfn4/5ZIVbaj0NMcDHvgs0=
Subject key identifier:   EF:CE:2D:EE:84:73:2A:E7:3C:61:36:F6:D9:A7:66:D1:62:25:17:B5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840D1A8A6218E8D989F5B6AD980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2bec6f66-0a89-363c-84fb-e73398432679.roa
Signing time:             Sun 05 Feb 2023 12:00:00 +0000
ROA not before:           Sun 05 Feb 2023 12:00:00 +0000
ROA not after:            Mon 13 Mar 2023 04:00:00 +0000
asID:                     8987
IP address blocks:        56.156.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:d1:a8:a6:21:8e:8d:98:9f:5b:6a:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  5 12:00:00 2023 GMT
            Not After : Mar 13 04:00:00 2023 GMT
        Subject: CN=027e0082-9bad-447d-9197-2758fb8a6fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a7:a8:29:0f:cd:4a:b3:2b:29:63:9e:32:cd:
                    e0:a2:48:48:ce:4c:80:04:dd:a6:fe:b7:eb:dd:02:
                    1b:5f:4c:1c:ad:63:21:79:7f:28:7f:6f:84:a6:1b:
                    32:2b:e4:a5:72:31:82:37:7c:49:65:1a:05:ba:94:
                    67:a4:0e:01:c8:98:00:ec:66:8e:f6:fb:77:8b:bc:
                    96:08:a2:58:cf:f1:55:ca:56:90:e8:cc:6a:2b:04:
                    cf:68:80:36:7f:96:4b:d7:f2:d0:bf:a0:ca:86:17:
                    f0:29:49:63:e3:4e:1f:ba:df:8d:ef:ee:7b:52:54:
                    44:a5:b0:0d:8b:df:b3:f3:65:52:d3:43:96:1f:30:
                    ce:ff:26:dc:d6:3b:78:83:2e:42:65:0e:50:cc:87:
                    f7:ae:80:e1:c7:a1:12:82:5f:de:3a:e7:6f:b4:69:
                    e0:d7:19:04:19:93:1f:1f:3f:0c:22:01:6e:9b:71:
                    24:df:12:b5:0f:6b:d7:b8:fa:3b:13:43:4d:4d:02:
                    b6:c1:31:52:e1:cf:c1:1a:01:a9:07:0c:82:98:21:
                    2b:ca:45:07:56:49:0c:ca:38:fe:0a:fa:76:c1:4b:
                    49:dd:d5:cc:fe:d8:3c:c7:a0:01:65:82:ec:7c:6a:
                    5d:a1:5b:2e:03:0a:2c:19:20:f1:f7:2a:33:62:db:
                    7f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CE:2D:EE:84:73:2A:E7:3C:61:36:F6:D9:A7:66:D1:62:25:17:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2bec6f66-0a89-363c-84fb-e73398432679.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.156.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:43:2f:a9:83:5f:f4:f9:b0:c4:f9:3c:90:da:70:0c:a1:d6:
         5e:c8:b2:2e:f3:f4:66:ad:ae:8d:15:da:56:79:77:8d:60:13:
         28:4f:eb:89:a2:11:cc:7c:7b:61:d0:94:a1:0d:02:56:e6:19:
         5d:55:91:c7:69:5a:04:15:d0:6c:eb:b6:45:2a:c6:c9:af:95:
         04:e3:cc:ef:ef:f0:2e:38:d0:a5:b7:c4:0b:fd:12:8e:3f:cd:
         84:46:da:f0:4a:f2:08:c6:a0:85:1f:4c:2a:98:c1:a5:a9:9d:
         79:ca:4e:b6:10:34:b7:f4:36:8c:ab:05:7a:84:6b:22:54:93:
         c0:88:3e:a1:ea:ea:20:24:4e:aa:64:50:c4:84:cd:41:b2:e0:
         e3:90:3c:9f:45:32:26:8e:f8:14:9b:5f:a4:a2:e8:6c:97:b8:
         96:72:a8:c5:56:33:43:6c:3e:8c:e0:d4:5a:2d:69:fe:09:02:
         86:73:20:c3:f0:37:e3:48:14:26:86:f8:b8:2c:af:60:de:99:
         cb:5e:46:79:f2:f5:eb:a1:39:d7:ff:63:49:09:be:5f:4b:47:
         58:8b:07:ec:0f:85:0a:38:2b:3b:41:37:11:12:0a:a5:57:dc:
         ee:f4:10:0f:4c:1d:02:9a:38:bb:d3:d2:05:4e:83:34:7e:99:
         44:70:a7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:55 2025 by rpki-client