Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2d682280-0a34-3062-8fcc-00a248269515.roa
File:                     2d682280-0a34-3062-8fcc-00a248269515.roa (raw, json)
Hash identifier:          KUrGb1o6RZdUAK4cbhEAtk8gAWD6BAsAAdf77ewqxZM=
Subject key identifier:   5B:AD:03:6E:EA:F6:DA:4A:F7:C9:F5:B9:80:4A:A5:5A:FE:48:07:B2
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F8E6D7DE08B9C723194C47E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2d682280-0a34-3062-8fcc-00a248269515.roa
Signing time:             Wed 12 Oct 2022 12:00:00 +0000
ROA not before:           Wed 12 Oct 2022 12:00:00 +0000
ROA not after:            Thu 17 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        56.54.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:8e:6d:7d:e0:8b:9c:72:31:94:c4:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 12 12:00:00 2022 GMT
            Not After : Nov 17 05:00:00 2022 GMT
        Subject: CN=0a9d37ae-880d-4c6f-9289-5da1833b66cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d9:c5:30:b9:2e:02:6c:f4:75:2b:82:f9:97:
                    cf:6a:da:6c:1f:ad:d2:61:79:6f:12:ee:66:76:4c:
                    31:8f:55:33:79:f3:1e:56:75:3a:f5:6d:44:60:b4:
                    30:0f:91:00:09:ad:c5:92:69:32:15:24:1f:d0:54:
                    3b:45:b8:d7:b0:75:6c:c3:3e:6e:63:6e:26:d0:3d:
                    65:57:96:e0:5d:7e:4f:0a:41:2f:60:de:7f:c4:13:
                    2f:3a:03:e4:d2:0a:0a:4f:7b:18:21:79:95:cc:7f:
                    1e:ad:5d:33:5a:78:4f:6f:7e:3c:b5:40:17:cc:1a:
                    a1:8f:26:5c:13:a7:35:44:e9:f7:eb:1e:5d:47:1e:
                    9c:4f:3e:7f:c4:99:67:9b:64:6d:2e:34:79:d5:1f:
                    aa:f7:16:6e:79:e7:45:e7:6f:ac:f4:2f:ac:5f:f1:
                    be:df:01:3e:ad:5d:40:95:44:e5:46:b6:2b:fa:d6:
                    61:21:94:f8:a1:97:20:d6:c8:5e:d1:fd:a6:9e:79:
                    1c:78:5a:e4:0b:5b:c8:7b:c4:4a:2d:16:50:e5:bb:
                    42:c7:a8:0f:e8:2a:d7:f8:8a:91:88:ae:e2:df:0e:
                    28:65:b4:cc:57:8a:69:91:24:99:ea:6b:0e:31:77:
                    e9:a1:15:c1:01:44:fe:d2:f0:7f:e9:c7:75:42:be:
                    d1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AD:03:6E:EA:F6:DA:4A:F7:C9:F5:B9:80:4A:A5:5A:FE:48:07:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2d682280-0a34-3062-8fcc-00a248269515.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.54.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:18:5f:9d:1e:4e:cc:8a:78:04:41:b1:4b:17:cc:42:9b:c2:
         57:ae:6c:ff:dc:b2:31:3c:d4:57:2d:87:8d:65:e5:ce:19:bb:
         01:84:b1:31:22:10:f3:a0:25:ed:9a:ba:f3:6a:e1:bc:34:58:
         68:6b:d1:05:96:3a:5f:7d:b7:bb:ac:19:20:04:4a:41:87:a6:
         20:af:48:fb:a6:02:44:5a:b8:19:e1:c5:ab:75:70:92:1e:2d:
         41:c8:bb:2e:59:68:5d:82:85:93:d2:b4:0b:18:6c:eb:51:1a:
         47:9c:59:6d:13:13:9e:c3:3c:f8:06:ce:ad:69:2c:54:6f:58:
         70:e6:56:35:4e:91:7a:b4:90:9a:23:02:af:e3:ff:87:f0:b6:
         00:e3:94:3a:d2:bb:8b:54:59:7f:54:3a:f5:19:91:67:c0:f7:
         e9:05:4a:c5:f4:06:fc:96:a2:92:c2:16:de:a2:71:fd:53:c9:
         3b:1c:88:2b:d4:8a:cb:ea:40:e9:8c:99:47:9a:d3:5f:ed:d1:
         3f:6a:47:06:fe:e2:8e:fa:c2:9e:bd:72:73:ea:e5:8d:ed:02:
         2c:37:cd:96:a2:96:98:9b:27:26:0b:5f:9d:d1:88:60:68:f6:
         07:be:5c:ee:bd:ca:c3:b8:49:79:55:cb:27:67:7d:11:e6:69:
         c0:80:bc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:10 2025 by rpki-client