Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2bf5e84b-fdad-3a41-ab2c-6e08c01433c2.roa
File:                     2bf5e84b-fdad-3a41-ab2c-6e08c01433c2.roa (raw, json)
Hash identifier:          zCqShhiOM52unPzaG1UpSZy7M7wR3ezV0CZBCWxhzu0=
Subject key identifier:   75:B0:70:E7:07:82:A2:C5:F2:EC:18:E4:0A:94:6A:A8:BC:B7:F9:95
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D5129DEB6FC1F26E92D1A71C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2bf5e84b-fdad-3a41-ab2c-6e08c01433c2.roa
Signing time:             Tue 22 Mar 2022 04:00:00 +0000
ROA not before:           Tue 22 Mar 2022 04:00:00 +0000
ROA not after:            Tue 26 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        139.56.4.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:51:29:de:b6:fc:1f:26:e9:2d:1a:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 22 04:00:00 2022 GMT
            Not After : Apr 26 04:00:00 2022 GMT
        Subject: CN=46c05b93-9424-49f7-9535-3f01ef0f57c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:fc:fa:0e:a0:8a:1f:37:17:73:a7:e1:b4:97:
                    ee:f2:e5:92:fe:a3:45:a8:6e:1a:ac:04:75:d0:d4:
                    c2:fb:61:45:c0:39:37:e9:2c:35:20:89:37:ae:0f:
                    ea:83:e3:f9:42:94:12:d4:b7:75:a5:64:a4:37:a8:
                    59:de:f8:c5:50:b7:1c:66:94:01:29:88:d1:25:54:
                    73:fc:6b:58:1c:ba:57:c2:8b:48:7d:e0:59:70:c5:
                    41:56:58:47:9b:7a:3b:85:42:16:9d:0b:b1:5f:11:
                    32:5e:34:f8:31:f7:a2:49:4b:fb:5e:c3:cb:68:24:
                    fb:dc:b0:1e:54:9d:98:05:38:61:a4:10:20:90:dc:
                    00:4d:db:28:5f:e7:da:6b:5b:e9:c1:6d:5f:d1:14:
                    bd:83:30:f0:11:e4:56:b6:72:0f:00:ab:65:e8:e1:
                    96:5d:70:4d:49:83:1b:33:51:17:78:b2:b6:4a:fd:
                    ae:23:51:85:ee:47:6e:55:41:fa:b0:08:73:b3:fb:
                    b0:5e:0a:89:f5:4a:a7:62:8c:29:35:84:09:75:ef:
                    25:a6:5a:61:1a:e7:3d:b8:39:fb:2b:c1:5f:91:1f:
                    75:85:1d:dd:c3:c0:f7:7b:6d:aa:fb:f4:13:ed:08:
                    a0:32:10:b3:ae:91:b4:62:b8:2e:91:91:df:83:db:
                    53:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B0:70:E7:07:82:A2:C5:F2:EC:18:E4:0A:94:6A:A8:BC:B7:F9:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2bf5e84b-fdad-3a41-ab2c-6e08c01433c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:e7:aa:28:ba:5b:79:e6:9a:f9:35:28:c0:fd:24:13:25:6f:
         24:57:9a:5f:23:57:c7:97:0b:b6:3f:27:7b:3c:5c:92:e4:50:
         eb:62:a5:7e:8b:ee:19:39:79:92:54:b5:6d:e3:77:51:3c:fd:
         64:fa:3e:1b:40:8c:4e:38:ac:35:11:b2:90:a5:49:cc:c9:f6:
         bb:77:92:03:47:06:5c:2b:c8:e1:2e:2c:82:5e:92:13:f6:3d:
         2e:cf:3b:5e:10:7f:2b:27:19:1f:44:5f:ec:3c:72:0e:a5:69:
         4b:43:dd:7d:80:19:59:86:5c:32:63:58:d0:50:07:a4:c8:ea:
         c3:e7:1e:05:93:4d:79:01:9e:71:95:0c:a5:3f:d3:43:9c:e3:
         d4:1f:7d:78:21:ee:4c:b2:a2:23:78:63:e6:e0:76:7a:41:d9:
         ee:fe:43:01:be:f6:e8:37:04:69:6a:82:d2:4c:5e:f1:23:8f:
         d2:8d:30:ba:d1:bb:30:95:11:bc:ab:a6:53:0b:9f:92:5f:62:
         17:b9:b7:c5:7e:bf:7f:76:70:94:97:a7:73:b9:dd:b9:9e:09:
         35:11:33:2d:a1:ce:ce:29:9b:02:bf:08:c9:f2:d8:1f:ff:13:
         6d:62:4a:15:12:4c:12:17:85:7c:d2:00:67:47:8a:81:51:fa:
         e7:68:d3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:39 2025 by rpki-client