Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2d6b2620-0457-3fd1-abf7-c8552075b943.roa
File:                     2d6b2620-0457-3fd1-abf7-c8552075b943.roa (raw, json)
Hash identifier:          IX4CxgrHwZbRfQ5vIPjxNSCBJ93TNJTrN6lziqTsX+0=
Subject key identifier:   58:35:F5:B4:E7:B6:08:B2:3A:DD:11:92:66:B7:14:A8:E9:26:E3:B3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E3C0BB72B11C53B00E91CED00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2d6b2620-0457-3fd1-abf7-c8552075b943.roa
Signing time:             Mon 13 Jun 2022 12:00:00 +0000
ROA not before:           Mon 13 Jun 2022 12:00:00 +0000
ROA not after:            Tue 19 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        139.56.0.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:3c:0b:b7:2b:11:c5:3b:00:e9:1c:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 13 12:00:00 2022 GMT
            Not After : Jul 19 04:00:00 2022 GMT
        Subject: CN=447715d1-913a-4576-bc27-803e4f1bf92d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:68:bb:62:ed:8d:fd:99:54:45:2e:2e:86:42:
                    c1:8d:f5:92:a3:be:40:66:a1:25:ed:97:62:e8:b1:
                    16:89:08:a1:c3:fa:ca:b9:40:19:f9:3c:ae:54:f7:
                    30:68:1a:f2:09:d3:fe:15:de:1b:a1:ec:55:2c:49:
                    bd:b2:79:bd:2a:ed:bc:63:64:22:6a:f1:2e:ac:a4:
                    7e:d2:b3:3c:3f:d9:ce:d9:17:1b:33:bf:00:c6:e0:
                    18:40:f7:47:e4:67:b8:b6:5a:f4:b9:0f:70:78:6c:
                    d3:cf:7f:a2:f3:a2:8f:b0:0e:4b:40:b4:8f:34:27:
                    ab:b3:88:c8:03:46:a7:73:01:7d:33:df:1e:dc:d5:
                    a0:33:b3:e3:ef:d9:63:a1:12:89:26:82:b7:2e:ef:
                    0f:35:4d:6d:3c:98:c2:f5:6b:f5:d2:21:92:a1:7d:
                    d1:89:9b:11:29:ba:b4:67:3f:13:e0:3f:14:69:6c:
                    90:21:a8:e4:c1:ec:d7:71:c1:d5:ba:cc:62:eb:9c:
                    e7:38:f1:c5:1d:68:5c:fc:28:87:5f:8d:9b:63:35:
                    b6:45:d4:a6:d0:a9:98:43:5a:5e:68:2c:86:04:c6:
                    4b:73:02:24:65:3f:79:09:7b:e1:16:1e:0d:b6:e6:
                    50:d1:92:73:69:ba:2d:17:0a:51:19:40:49:4a:2b:
                    9b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:35:F5:B4:E7:B6:08:B2:3A:DD:11:92:66:B7:14:A8:E9:26:E3:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2d6b2620-0457-3fd1-abf7-c8552075b943.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:4a:ae:c5:90:4b:b9:81:94:47:26:6d:e6:73:5a:dc:5e:06:
         00:ce:5e:9f:58:58:2f:e5:69:56:c9:2a:09:bd:4d:48:8a:48:
         72:4d:79:5b:e4:d6:ed:cc:68:52:01:f0:58:39:f7:21:22:e0:
         9f:e8:35:3f:db:3f:5f:35:2c:11:23:2d:b8:3c:63:4c:e1:1f:
         b8:84:96:2a:a0:22:62:c8:30:43:d1:a6:37:c5:8a:1e:69:7f:
         91:78:77:3b:82:27:63:8d:dd:67:41:cd:b3:ab:36:4a:f8:ee:
         d7:56:00:0d:3d:bf:a8:cb:c3:54:6e:d6:d9:f8:05:e1:5f:01:
         f3:83:22:b3:a5:4e:7e:b4:0f:88:d3:57:80:67:96:54:95:9f:
         e2:56:de:a4:8f:29:d5:8a:e7:91:be:40:7e:f5:59:f7:5b:b1:
         aa:f2:ad:c2:f6:be:b6:fa:e6:18:92:ce:03:40:e9:e3:f1:27:
         74:a0:1f:f6:3d:17:26:ab:96:7f:fa:4b:0a:36:af:16:b3:ed:
         10:8b:82:f2:bb:17:e9:b8:e7:15:71:dc:49:6a:92:16:f8:b3:
         c2:0f:cd:f3:a6:7e:50:4b:f5:73:ee:e5:26:27:d0:89:3c:16:
         51:a9:0f:bd:18:b7:c5:90:03:64:27:3c:8d:82:74:31:dc:01:
         3b:f4:f2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:20 2025 by rpki-client