Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3f56746c-891f-369d-8901-a299c1ef1ab7.roa
File:                     3f56746c-891f-369d-8901-a299c1ef1ab7.roa (raw, json)
Hash identifier:          DrEfMpP8poUex2Nuyibk/W3IUdYuntfsUIceog07kxU=
Subject key identifier:   85:68:E3:13:35:DA:C8:91:3C:90:CE:71:67:D8:97:73:D7:63:90:80
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584051E8291B14A46101032F36C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3f56746c-891f-369d-8901-a299c1ef1ab7.roa
Signing time:             Wed 21 Dec 2022 22:15:08 +0000
ROA not before:           Wed 21 Dec 2022 22:15:08 +0000
ROA not after:            Thu 26 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        139.73.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:51:e8:29:1b:14:a4:61:01:03:2f:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 21 22:15:08 2022 GMT
            Not After : Jan 26 05:00:00 2023 GMT
        Subject: CN=a13d2ddc-5c40-4279-a4b0-0746cbb32ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a4:71:68:18:51:37:ea:a3:c5:df:a5:2e:37:
                    32:82:e9:1d:14:21:50:ae:53:02:dc:b5:15:08:eb:
                    43:eb:1a:a8:7a:8e:28:3f:e8:6b:7d:32:d0:3b:c6:
                    9c:cf:51:6a:fc:3a:27:ab:48:dd:73:9a:2a:99:6a:
                    46:16:47:68:53:26:e9:d1:d1:e1:8d:fb:e2:3c:08:
                    1d:1d:ae:17:e8:8c:32:39:9c:02:a6:e0:ff:12:d4:
                    90:75:41:94:21:ef:b8:6d:11:fb:bb:2c:45:cf:24:
                    a6:0d:72:c7:b2:7d:81:f9:91:6c:5f:08:3d:a3:a9:
                    b9:2d:58:9c:8f:7d:5a:58:f1:e0:d6:6c:31:3e:0c:
                    67:7a:53:05:9f:1c:68:6f:8e:2a:24:5c:53:52:ce:
                    4d:e1:67:11:06:c2:66:58:5d:97:a4:e5:b6:9e:0f:
                    51:dd:b7:a7:fd:e1:b0:f7:01:e0:56:41:0f:92:7f:
                    82:45:07:bc:9d:37:a7:d2:f9:38:14:69:cf:64:5a:
                    14:31:b6:91:af:0a:71:c1:6e:5d:1c:f3:a0:de:42:
                    6c:62:7e:15:20:e2:28:cf:31:4d:37:41:63:58:9e:
                    b8:06:98:28:61:f5:4b:26:e1:cf:88:ad:6c:38:65:
                    4f:70:44:28:74:59:ea:f1:ad:1f:9e:40:49:0d:d3:
                    b7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:68:E3:13:35:DA:C8:91:3C:90:CE:71:67:D8:97:73:D7:63:90:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3f56746c-891f-369d-8901-a299c1ef1ab7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.73.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:59:80:60:71:6b:5d:cf:1d:90:a2:ae:29:94:01:33:31:97:
         3f:4a:44:04:96:a9:86:67:77:83:f6:13:6c:9f:49:0c:e5:21:
         34:0f:bf:d0:9a:cc:5f:64:96:7f:be:b7:ea:07:d1:dc:0f:16:
         ae:af:bb:6f:a3:13:22:28:8c:62:97:12:f3:d4:39:fa:69:a4:
         d8:c3:13:4c:62:bc:2d:05:a1:18:da:ea:20:74:30:86:b5:08:
         30:f0:fb:30:b3:f7:73:f9:bc:cc:42:98:eb:3a:53:f2:36:2a:
         aa:ac:8a:d0:6a:b8:3a:df:be:05:32:65:80:37:cd:34:2f:29:
         11:62:2b:e2:8d:26:de:1e:6c:5f:4b:95:52:fd:10:b5:76:7f:
         04:96:9b:d9:2d:74:ec:7e:1d:73:77:f9:b9:c9:cf:f4:51:e8:
         d1:fe:ff:25:f4:3d:1e:61:2f:a7:1f:f4:d4:b9:7a:6f:3b:4a:
         9e:5c:d3:70:07:75:46:82:5b:5c:3c:92:99:e4:62:b4:f8:22:
         07:b3:38:53:f2:23:84:0d:4b:59:dc:bf:c2:cf:b9:bc:2b:79:
         fa:2b:f8:f1:1a:09:af:b3:f7:12:10:5d:33:f7:b1:68:6b:52:
         27:91:0c:1b:75:28:15:b0:13:e9:a2:3b:06:de:cd:f4:89:2a:
         70:b0:f7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:17 2025 by rpki-client