Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2d1f7431-939d-3812-9f30-45d0d9956294.roa
File:                     2d1f7431-939d-3812-9f30-45d0d9956294.roa (raw, json)
Hash identifier:          UvZJM2N56kdyYV+qNCytXDnoR9Of0tQyzqDCd7n4gyM=
Subject key identifier:   7C:E2:A7:59:9D:F1:3C:20:06:13:8F:FE:95:DD:71:9D:34:88:B0:DA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840C62C049644688E949E22B5C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2d1f7431-939d-3812-9f30-45d0d9956294.roa
Signing time:             Wed 01 Feb 2023 12:00:00 +0000
ROA not before:           Wed 01 Feb 2023 12:00:00 +0000
ROA not after:            Thu 09 Mar 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        56.127.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c6:2c:04:96:44:68:8e:94:9e:22:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  1 12:00:00 2023 GMT
            Not After : Mar  9 05:00:00 2023 GMT
        Subject: CN=3ecd3f31-d767-4510-8527-ae1ce3c0c7f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7c:ef:e7:86:0e:72:6b:c5:4a:4e:2b:ac:d6:
                    7e:f0:22:d2:fd:7f:45:54:c4:e8:b7:de:38:73:6c:
                    a7:2f:e8:3f:37:73:6e:36:af:9a:b2:75:5a:2f:b0:
                    77:be:69:e6:24:c5:54:4e:f1:aa:00:45:2d:d5:a7:
                    2b:84:3f:7e:88:a5:83:15:1b:9c:b5:10:87:44:f5:
                    27:84:d3:e5:89:b8:18:95:8e:83:e1:b4:d8:a9:28:
                    84:8e:22:de:9f:10:4a:26:ac:a9:1a:22:30:80:f1:
                    70:0e:c7:71:e6:71:38:27:3f:36:fd:72:3f:58:d0:
                    2a:04:02:fe:ed:86:c1:23:aa:1f:3c:b0:f8:91:38:
                    1c:b8:32:7f:91:86:6c:a5:f7:53:11:8a:d0:4f:21:
                    b1:71:c8:09:88:4d:4e:11:c0:f9:22:6a:8e:39:63:
                    23:e6:c9:f8:93:14:09:48:48:df:e4:cd:37:83:fb:
                    24:31:d1:74:3c:3a:1e:1c:b0:cc:08:d3:9d:9d:b2:
                    77:be:b6:23:8e:fd:c7:6b:b3:36:e1:f5:f7:2e:23:
                    d7:62:e8:fc:6b:85:8d:7c:03:c3:4c:f6:7f:37:a3:
                    20:4b:7d:a3:96:c6:2a:7e:a2:db:cc:6b:f3:1f:d0:
                    2a:fb:e8:c2:0c:e2:12:d1:2d:aa:55:a4:6f:e0:f9:
                    44:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E2:A7:59:9D:F1:3C:20:06:13:8F:FE:95:DD:71:9D:34:88:B0:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2d1f7431-939d-3812-9f30-45d0d9956294.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.127.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:80:9d:0d:a0:de:89:60:2b:ac:31:d3:2a:21:39:7c:61:a2:
         13:ba:8c:92:34:e8:7d:9c:91:6d:cd:05:52:44:71:08:c6:aa:
         ac:69:99:c0:3d:ec:ab:d2:ca:3c:6f:2b:d3:a6:b4:6c:75:45:
         c8:7e:a1:cf:d3:91:9e:01:81:7b:88:f8:b0:40:fa:eb:2b:cd:
         f3:30:9b:1f:0d:da:6d:72:b5:0f:8f:ab:db:9a:92:a0:a8:7e:
         4b:44:68:3e:26:f1:84:64:0a:29:bc:57:10:68:df:2f:70:d8:
         d6:b9:52:63:84:4a:8b:b1:d3:23:07:86:4b:e3:fe:6f:7e:e3:
         fb:d6:c6:06:3b:b8:b3:c2:a1:5c:25:31:12:6a:f8:96:14:0e:
         ac:aa:42:da:e3:08:e2:49:81:de:a6:bd:51:10:c0:b6:fe:a3:
         a4:fd:77:ee:2f:bd:ab:fd:96:57:e6:9f:58:ce:1b:70:96:18:
         ad:9f:35:bc:4a:95:89:81:d6:b2:95:3a:ac:28:2b:0c:1f:76:
         80:14:39:05:f5:31:bd:cb:1b:ec:c9:a2:ba:61:9e:0f:3a:59:
         23:58:04:38:ed:a0:c4:25:16:04:56:0c:86:12:85:f0:81:ae:
         94:11:27:cb:c5:64:d7:cb:4e:18:33:d2:f4:61:22:ce:c0:d1:
         4a:b9:e1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:38 2025 by rpki-client