Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/382a81d5-372d-3fa5-be13-4e3d076f998d.roa
File:                     382a81d5-372d-3fa5-be13-4e3d076f998d.roa (raw, json)
Hash identifier:          B0K4Z78NV8UcgBlH6aqdnhKmIotSCX9k9/HVs5nVCIo=
Subject key identifier:   A8:05:1D:02:07:44:68:EF:D6:14:F8:AD:4D:A9:F1:A7:D4:B3:F2:30
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840C63AF78857E222D36D102130
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/382a81d5-372d-3fa5-be13-4e3d076f998d.roa
Signing time:             Wed 01 Feb 2023 12:00:00 +0000
ROA not before:           Wed 01 Feb 2023 12:00:00 +0000
ROA not after:            Thu 09 Mar 2023 05:00:00 +0000
asID:                     22394
IP address blocks:        139.56.6.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c6:3a:f7:88:57:e2:22:d3:6d:10:21:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  1 12:00:00 2023 GMT
            Not After : Mar  9 05:00:00 2023 GMT
        Subject: CN=59c9ab33-b57a-4f2d-acb4-577da641513c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1a:82:21:19:c8:d0:90:00:65:c9:8a:a8:77:
                    f7:cc:27:50:5b:08:93:d3:bd:c0:c3:b0:f8:09:8a:
                    5e:61:ed:81:17:c9:32:01:6f:ac:70:c1:2c:68:d0:
                    77:91:62:10:bc:d1:f7:db:ef:bd:db:8a:26:c6:75:
                    17:16:18:8e:31:60:43:6e:bf:18:12:fd:59:e3:60:
                    87:e8:3d:e2:f3:e7:dd:a4:e7:09:65:e4:e3:7c:37:
                    d9:6f:48:31:5c:2e:e7:7d:56:bb:8c:54:f3:ab:00:
                    c8:c1:8b:3b:e5:3d:2d:47:a8:ae:3a:47:ac:0c:ad:
                    fd:1b:c0:47:21:7e:4f:79:03:b5:9d:e4:c4:0d:cc:
                    99:11:ba:09:4f:31:0c:09:77:b0:c3:f8:07:97:e5:
                    e1:46:e5:01:08:4a:1f:bd:fb:e3:f7:eb:38:c2:f3:
                    41:4c:17:38:51:bc:23:61:56:0f:98:02:1c:1b:fd:
                    5f:c7:eb:88:c0:f3:96:12:1a:36:ef:92:a8:02:41:
                    ae:c6:42:9e:cf:04:7b:73:e7:66:9c:71:98:22:15:
                    d9:6a:6a:79:72:6f:45:bd:37:f8:09:66:bd:55:81:
                    61:46:b1:af:ea:3f:f8:3e:92:fb:b0:14:2c:a6:82:
                    a6:62:94:37:cd:14:d9:96:4c:34:df:10:c0:ee:6c:
                    9a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:05:1D:02:07:44:68:EF:D6:14:F8:AD:4D:A9:F1:A7:D4:B3:F2:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/382a81d5-372d-3fa5-be13-4e3d076f998d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:ac:a8:12:6b:76:d8:ec:5a:bb:e0:c9:76:cb:53:b8:eb:54:
         53:0c:25:bd:2a:2c:77:5e:9f:cf:5d:94:7f:26:5e:16:9f:c4:
         bd:e8:d0:4a:6c:b4:96:f3:f2:40:e3:75:8c:36:a4:51:ce:e1:
         c3:2a:27:5e:16:62:81:31:91:76:04:2e:21:5d:3b:4e:f6:1f:
         d0:c4:cb:43:c4:bb:58:a0:6f:7d:51:28:ae:a9:b6:79:78:bc:
         ea:06:4c:c0:bd:44:44:f5:cd:9d:19:f6:63:1d:e1:d5:95:da:
         b9:ff:07:6b:3f:38:26:19:7e:e2:88:85:9a:a1:5a:2f:54:b4:
         45:0d:83:70:4c:cc:8e:43:75:36:86:9f:c2:dc:0d:fa:0f:00:
         81:65:64:02:78:8f:b5:42:28:3e:33:a2:02:74:02:e7:d0:6b:
         0f:8b:3d:fd:ed:c1:87:75:a6:58:5b:93:d9:8f:ff:92:8d:b9:
         78:09:ed:eb:d6:a9:bd:f2:e0:d4:fe:d3:d4:79:7d:bb:5d:61:
         f0:13:af:7b:a0:75:c8:a5:ca:2c:e4:00:13:7c:34:53:79:87:
         8e:57:d6:57:04:88:92:1a:64:84:4b:55:df:5e:53:d5:99:03:
         68:a6:15:4d:74:cf:02:d7:12:8b:57:e3:87:51:cc:86:2f:1d:
         c2:da:da:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:18:34 2025 by rpki-client