Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/406a2bf3-1c43-3c6b-9c52-63261b725316.roa
File:                     406a2bf3-1c43-3c6b-9c52-63261b725316.roa (raw, json)
Hash identifier:          YSjvNPXv8iiNl7TL2m4F8N/1/7/+WSDUDJ6BbKm3W9E=
Subject key identifier:   06:11:B4:3F:BE:11:15:B3:AE:49:87:1F:74:7F:43:2E:3D:B0:F1:8D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858403B4845785891DB21CECF7160
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/406a2bf3-1c43-3c6b-9c52-63261b725316.roa
Signing time:             Tue 13 Dec 2022 12:00:00 +0000
ROA not before:           Tue 13 Dec 2022 12:00:00 +0000
ROA not after:            Wed 18 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        56.55.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3b:48:45:78:58:91:db:21:ce:cf:71:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 13 12:00:00 2022 GMT
            Not After : Jan 18 05:00:00 2023 GMT
        Subject: CN=3446ad38-3ab9-49f6-a2c7-2abcee754b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7c:55:82:49:83:5e:81:d5:15:54:3b:e2:6f:
                    ed:59:9f:a1:b5:50:ec:69:9e:1c:b0:36:a5:fe:1c:
                    a3:3e:18:fd:ab:6f:f0:27:70:cc:3a:f5:d6:ce:b6:
                    dd:26:d6:1d:00:17:7a:0f:a1:06:06:b1:52:0e:7c:
                    13:7a:d9:13:df:94:8b:24:3a:bb:8f:5f:83:f3:97:
                    61:d6:06:36:36:50:76:c2:4f:75:74:90:3f:f4:11:
                    ef:98:32:af:1d:69:52:5c:6f:03:53:48:12:c6:db:
                    53:22:22:47:ee:16:a6:00:49:98:71:a1:a4:95:ba:
                    a0:ab:1d:5e:b3:36:17:ef:36:c4:9e:13:94:3f:22:
                    41:09:e2:91:1c:66:ad:0f:05:b6:40:d3:25:0d:aa:
                    c1:a2:f0:9c:cc:54:ee:e1:cc:62:aa:fd:1a:14:6b:
                    1e:1a:f6:96:2e:35:ea:75:fc:4f:62:37:94:be:51:
                    d6:c6:47:7e:60:09:b5:f3:01:47:e6:be:0c:10:b7:
                    89:20:a2:42:b0:3d:dc:3e:36:a9:4d:52:83:25:a2:
                    a4:e7:5d:11:2b:90:bd:50:21:1d:e7:ae:9d:45:17:
                    19:49:39:b0:ab:a7:ff:c7:a0:e4:98:4a:98:82:d4:
                    8e:81:57:d0:08:ef:23:17:04:5a:c5:20:59:3f:74:
                    f1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:11:B4:3F:BE:11:15:B3:AE:49:87:1F:74:7F:43:2E:3D:B0:F1:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/406a2bf3-1c43-3c6b-9c52-63261b725316.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.55.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:ca:7c:03:1c:92:ed:0e:47:71:55:de:a2:d2:e3:90:b6:e8:
         4a:23:1a:b4:2b:2e:62:ef:90:02:4d:45:6b:9f:83:2c:b9:8d:
         47:3a:ae:fa:fa:e0:ad:47:dd:90:96:ba:3a:75:d3:b0:3a:97:
         3d:16:a3:03:77:0f:f3:e1:fb:d9:aa:fd:31:d3:d3:85:7b:8e:
         5d:40:de:ec:fe:a3:4b:1c:d6:fa:36:46:06:b3:8a:a3:cc:fc:
         d4:06:80:93:0e:64:64:04:9b:8f:0f:be:27:d2:37:e2:98:67:
         9e:a0:69:20:37:63:9b:cf:7b:8f:6b:54:45:e7:40:f6:de:a1:
         92:e8:10:5e:33:13:cd:4b:24:7a:c5:77:75:24:47:27:b6:a8:
         0d:dc:72:c1:68:ee:6d:18:e8:7b:53:90:e1:85:ad:25:16:d9:
         c6:a0:ca:5f:cb:91:6c:8a:c5:0d:52:3c:40:0b:b2:72:50:34:
         b7:d7:a1:b0:75:29:d7:05:74:71:3d:93:87:86:71:1d:93:7d:
         12:a7:ba:af:1b:51:13:b1:be:10:1a:02:62:c0:91:a3:23:e3:
         e1:56:ea:9e:00:ea:03:d3:ce:71:ec:5b:80:94:33:22:9d:4c:
         6c:0a:e5:64:09:7d:09:67:f7:21:fd:b9:f4:a5:57:7a:68:64:
         f7:03:0a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:58:11 2025 by rpki-client