Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/384275dc-4854-3593-bfeb-d2d7346cde24.roa
File:                     384275dc-4854-3593-bfeb-d2d7346cde24.roa (raw, json)
Hash identifier:          j+ipywRxJcNqlEmrGYaIixjFvKAbkOP6zDgx7CCwJdU=
Subject key identifier:   95:9E:6F:9E:5F:4A:15:A1:8F:67:0B:1C:7A:10:87:A3:05:85:AA:D8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FFFD0380E90051B9011569FC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/384275dc-4854-3593-bfeb-d2d7346cde24.roa
Signing time:             Tue 22 Nov 2022 12:00:00 +0000
ROA not before:           Tue 22 Nov 2022 12:00:00 +0000
ROA not after:            Wed 28 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        56.254.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ff:d0:38:0e:90:05:1b:90:11:56:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 22 12:00:00 2022 GMT
            Not After : Dec 28 05:00:00 2022 GMT
        Subject: CN=ffddbafe-52ca-42e3-99c8-4e0337e78623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:71:53:6a:94:56:d6:fd:e9:97:b7:c1:31:99:
                    da:79:4c:ff:b6:d2:3f:d5:d5:1a:1f:04:ce:f6:38:
                    04:54:4d:2e:d5:91:77:9c:98:b0:7a:b5:47:c0:8e:
                    1b:70:71:33:4e:f8:86:58:1b:fe:cf:2a:1b:8a:de:
                    11:a2:2d:20:32:f2:70:3d:5d:5e:d7:4b:68:93:4d:
                    30:bb:5a:b1:17:16:03:33:79:4d:8f:72:9f:72:56:
                    79:e3:94:48:a2:ce:69:20:82:e2:fa:3b:21:58:2d:
                    9f:60:85:31:87:ab:a8:97:14:52:aa:5b:95:6d:8f:
                    e1:61:36:ad:9b:bf:66:c5:f2:c0:79:8b:c3:28:d0:
                    df:b8:5c:92:95:3e:ff:ae:0d:b0:c6:12:df:e5:ee:
                    a9:55:18:f5:94:fc:aa:30:a0:32:be:90:fb:04:6e:
                    bd:0d:3e:20:c2:bf:25:1d:15:89:fa:a7:50:bd:f7:
                    39:0e:3e:0c:7c:10:a3:de:7e:cc:b2:28:e6:b8:a6:
                    44:67:aa:6a:cf:c2:ef:72:6b:9a:61:04:8b:88:99:
                    f4:b4:e6:bf:14:f1:d0:7d:8a:3f:26:73:12:0a:0c:
                    d5:6d:6e:49:f3:dd:38:fe:c4:0d:a9:3f:ae:1d:43:
                    a4:34:1f:3c:da:ed:4d:e6:73:37:3f:d2:6c:ff:69:
                    fb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9E:6F:9E:5F:4A:15:A1:8F:67:0B:1C:7A:10:87:A3:05:85:AA:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/384275dc-4854-3593-bfeb-d2d7346cde24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.254.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:33:f7:24:f5:25:35:8e:46:3a:aa:d3:61:bf:f6:cc:ca:12:
         0b:eb:ad:8b:a9:35:e3:bf:d1:6c:9f:2d:e4:58:6d:89:d8:f2:
         59:ad:2a:48:f6:85:ec:50:a2:6a:d4:b0:67:6d:34:3c:ea:76:
         56:3f:e3:85:24:8b:d5:cf:0a:e0:58:56:6c:81:77:f9:ce:b7:
         58:95:a3:f5:46:d2:cc:5c:a4:f3:b5:13:c0:a7:98:21:17:98:
         2d:17:89:68:47:27:a4:19:80:52:d1:d5:64:fc:bb:ad:26:6d:
         7b:a6:95:fa:b2:94:f0:02:03:5d:49:7e:a2:a8:53:f5:91:4d:
         b7:fb:04:db:e1:3b:69:01:59:8a:38:98:fd:a4:20:3b:ed:de:
         19:03:5d:e9:27:dc:29:e2:65:99:b6:28:d8:23:3c:88:11:72:
         06:fb:21:6d:00:d1:cb:9a:91:42:a3:5a:9c:2f:16:dc:e4:b9:
         e5:f3:61:ad:18:02:a3:43:ea:17:ff:9c:7b:5e:95:cc:0b:36:
         cf:55:98:92:d5:c0:1d:6e:3b:ad:d3:7e:f9:aa:1a:2e:60:c2:
         af:0e:e1:e0:da:7d:f3:6b:b5:0a:95:81:59:88:89:71:fe:d4:
         10:8e:09:a5:3a:0d:91:82:8d:8b:ab:60:41:f3:6f:f0:08:1c:
         9e:d8:45:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:46 2025 by rpki-client