Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/387de263-cdc6-37a3-9350-9cd081a1b992.roa
File:                     387de263-cdc6-37a3-9350-9cd081a1b992.roa (raw, json)
Hash identifier:          qKIRBzZB7kT14CNJ+R2tRlnKEj4Sf33wE4ajoN0jHYw=
Subject key identifier:   49:12:AA:FD:35:C7:FF:55:12:AD:C1:CE:BF:28:77:15:08:D1:7A:B9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F8D59F05B6133ABDB85419FC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/387de263-cdc6-37a3-9350-9cd081a1b992.roa
Signing time:             Wed 12 Oct 2022 12:00:00 +0000
ROA not before:           Wed 12 Oct 2022 12:00:00 +0000
ROA not after:            Thu 17 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        56.126.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:8d:59:f0:5b:61:33:ab:db:85:41:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 12 12:00:00 2022 GMT
            Not After : Nov 17 05:00:00 2022 GMT
        Subject: CN=9e17e6a3-ef43-48da-8565-67dd8c682fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:44:d3:8a:ae:1f:95:70:21:80:e8:86:22:a0:
                    db:44:7b:36:f8:96:93:45:04:05:8c:9f:5d:7b:f6:
                    63:a9:97:68:44:80:7b:df:20:af:42:54:0a:d3:3d:
                    9b:d8:63:c6:08:a4:54:09:d0:67:30:e0:f2:42:1d:
                    bc:fc:d1:11:08:16:7b:d1:75:20:73:be:d4:4e:50:
                    59:1d:0e:c4:67:36:83:68:04:0c:26:e3:de:69:b6:
                    21:ed:fb:21:09:e0:bf:db:29:fc:4d:d2:28:ba:93:
                    81:fb:7a:00:91:9d:91:7c:9e:ad:9b:6a:e4:c8:90:
                    f7:e0:b0:3b:ea:74:62:28:d9:89:18:60:79:17:78:
                    f1:46:0b:4e:ee:62:0f:26:28:d6:a9:b1:f5:b0:f2:
                    fe:ef:a1:7c:40:89:f6:aa:0c:64:4f:23:7a:20:06:
                    07:25:09:3d:f5:73:51:58:ea:54:34:48:44:fd:a0:
                    2e:1a:a2:b5:c1:bb:07:60:aa:e5:3c:35:53:4d:ed:
                    23:66:c3:bb:71:89:0b:cb:70:18:3e:57:fe:82:45:
                    10:a8:82:94:a4:21:b0:3c:e6:36:2f:10:24:d0:c0:
                    d9:4f:07:d5:28:cc:c1:e8:f7:b8:d1:42:e1:be:8a:
                    96:77:2c:88:e8:ef:e2:1a:ef:fd:c8:e3:cb:3b:eb:
                    2d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:12:AA:FD:35:C7:FF:55:12:AD:C1:CE:BF:28:77:15:08:D1:7A:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/387de263-cdc6-37a3-9350-9cd081a1b992.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.126.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:df:81:4a:69:cf:5f:56:04:81:f3:98:cd:ab:5a:83:c0:cd:
         e6:86:97:79:4d:20:e4:05:9e:df:77:03:ec:fd:5a:00:c8:7a:
         66:f6:94:91:6a:d1:e8:72:17:75:7e:02:57:b0:d9:44:6b:7c:
         c3:80:0f:35:f3:66:cd:73:f4:2e:18:e8:47:5d:a7:30:dd:b8:
         a4:a2:66:4a:d1:ea:5a:75:a6:65:11:3d:24:46:70:f9:07:b3:
         79:7c:eb:a6:2c:93:63:bc:ee:94:21:1c:70:41:bd:ed:45:5c:
         c8:f5:5f:38:73:c4:2a:d5:5b:a5:34:49:07:86:34:23:ef:e9:
         c8:af:1a:47:4f:ad:03:52:1a:95:78:93:0c:bd:84:99:09:c9:
         bd:38:0a:54:8b:78:c4:d6:a2:9d:7b:80:be:f7:9e:0f:23:16:
         b4:b6:0b:98:91:f1:11:ce:a1:5f:10:db:e3:4f:40:c3:64:de:
         ec:e0:0a:39:27:89:03:68:d1:42:69:61:d6:f9:c2:41:18:cf:
         5a:9c:de:1b:6d:a9:25:8a:e9:72:a5:4c:ee:93:5e:c9:3a:a7:
         21:87:43:d9:cf:88:a2:cd:ac:2c:1a:91:94:f5:a1:9c:e4:3b:
         7b:c4:9b:41:73:cb:4b:cb:f4:3b:23:39:63:4a:0b:db:91:30:
         5c:86:2f:ae
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+NWfBbYTOr24VBn8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAxMjEyMDAwMFoXDTIyMTExNzA1MDAwMFowLzEtMCsGA1UEAxMk
OWUxN2U2YTMtZWY0My00OGRhLTg1NjUtNjdkZDhjNjgyZmRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0TTiq4flXAhgOiGIqDbRHs2+JaTRQQFjJ9d
e/ZjqZdoRIB73yCvQlQK0z2b2GPGCKRUCdBnMODyQh28/NERCBZ70XUgc77UTlBZ
HQ7EZzaDaAQMJuPeabYh7fshCeC/2yn8TdIoupOB+3oAkZ2RfJ6tm2rkyJD34LA7
6nRiKNmJGGB5F3jxRgtO7mIPJijWqbH1sPL+76F8QIn2qgxkTyN6IAYHJQk99XNR
WOpUNEhE/aAuGqK1wbsHYKrlPDVTTe0jZsO7cYkLy3AYPlf+gkUQqIKUpCGwPOY2
LxAk0MDZTwfVKMzB6Pe40ULhvoqWdyyI6O/iGu/9yOPLO+stOQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEkSqv01x/9VEq3Bzr8odxUI0Xq5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzg3ZGUyNjMtY2RjNi0z
N2EzLTkzNTAtOWNkMDgxYTFiOTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOH4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAsN+BSmnPX1YEgfOYzatag8DN5oaXeU0g5AWe33cD7P1aAMh6ZvaUkWrR
6HIXdX4CV7DZRGt8w4APNfNmzXP0LhjoR12nMN24pKJmStHqWnWmZRE9JEZw+Qez
eXzrpiyTY7zulCEccEG97UVcyPVfOHPEKtVbpTRJB4Y0I+/pyK8aR0+tA1IalXiT
DL2EmQnJvTgKVIt4xNainXuAvveeDyMWtLYLmJHxEc6hXxDb409Aw2Te7OAKOSeJ
A2jRQmlh1vnCQRjPWpzeG22pJYrpcqVM7pNeyTqnIYdD2c+Ios2sLBqRlPWhnOQ7
e8SbQXPLS8v0OyM5Y0oL25EwXIYvrg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:07 2025 by rpki-client