Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/42a78fb4-ee31-31e3-989b-0a57ac42f386.roa
File:                     42a78fb4-ee31-31e3-989b-0a57ac42f386.roa (raw, json)
Hash identifier:          NdLe3Groeb3+6hMXWwuvdHWerUg6QyUo2KWk957IfB0=
Subject key identifier:   59:F6:AB:42:93:31:0A:C2:5D:5F:02:03:9D:CF:C9:39:F2:2A:D7:D6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584086A176F1C6E8668D389DBAC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/42a78fb4-ee31-31e3-989b-0a57ac42f386.roa
Signing time:             Mon 09 Jan 2023 12:00:00 +0000
ROA not before:           Mon 09 Jan 2023 12:00:00 +0000
ROA not after:            Tue 14 Feb 2023 05:00:00 +0000
asID:                     6167
IP address blocks:        139.56.0.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:86:a1:76:f1:c6:e8:66:8d:38:9d:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  9 12:00:00 2023 GMT
            Not After : Feb 14 05:00:00 2023 GMT
        Subject: CN=93566fd3-9757-46f9-9b61-1ab33699613f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:84:50:2a:71:fd:1d:8f:f0:ed:6e:07:4d:fd:
                    c0:05:11:59:95:73:6e:56:5b:b2:55:9d:43:6f:c5:
                    75:3b:57:8f:16:89:2a:e7:51:a2:c0:03:00:2d:28:
                    3c:a8:c1:f8:a8:b4:20:b6:82:6c:8d:fb:ef:87:b2:
                    eb:2d:2c:37:84:01:83:4f:bd:30:4c:fd:fb:7b:a3:
                    25:16:39:bc:a7:3f:b0:5a:93:78:b5:4c:d1:4a:eb:
                    00:fe:6b:28:56:e3:01:00:02:8c:7a:b9:9c:5b:f2:
                    9a:65:bc:a0:fa:d8:39:18:64:73:c1:1f:d0:34:a8:
                    e5:2e:81:ea:1f:90:9d:b9:68:95:2b:3b:e8:d3:c8:
                    41:5b:14:96:b0:50:84:0b:20:62:9a:a3:ba:cc:af:
                    91:43:fd:4c:01:dc:4b:1d:76:ac:0e:8c:fa:b2:98:
                    87:b3:89:31:ae:a9:ce:22:a4:3f:a3:85:55:98:e2:
                    37:9f:cd:ba:1a:d2:e5:51:f5:a4:d8:9c:26:f0:4d:
                    da:94:07:5f:74:de:02:9c:bb:d2:6f:89:31:6e:36:
                    0e:8d:dd:30:2b:4e:4a:83:aa:18:57:3e:c6:4f:19:
                    15:63:bf:bf:f1:9b:e7:b6:09:5c:6c:df:0d:0c:e5:
                    c4:4e:3e:ed:a7:49:50:e7:a2:63:bf:2f:bc:31:05:
                    85:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F6:AB:42:93:31:0A:C2:5D:5F:02:03:9D:CF:C9:39:F2:2A:D7:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/42a78fb4-ee31-31e3-989b-0a57ac42f386.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:7d:f1:4e:73:50:0c:1b:7b:33:17:74:7f:c0:35:81:f9:77:
         a9:e8:9f:86:af:4b:8c:c6:02:6d:89:d5:c5:9b:67:94:fc:df:
         10:18:32:e6:6f:74:ba:0e:7a:ac:78:af:82:3c:d2:c9:27:1c:
         58:35:1c:52:8a:ff:9f:91:a5:23:82:3a:67:30:48:ff:94:44:
         3c:f3:61:91:17:06:e2:c7:0d:c8:42:96:f6:0e:20:34:0c:22:
         62:1e:05:38:91:ef:84:79:3e:2c:be:b7:d5:04:ad:25:5b:4a:
         bd:19:35:cd:25:08:b6:17:df:31:ea:89:e7:aa:82:bd:76:1b:
         d7:f5:ad:90:a8:cf:e5:33:47:8f:63:17:0e:d9:72:40:b9:67:
         d4:cc:75:43:ee:15:fd:cb:75:ce:7a:fe:5c:5b:df:51:ee:31:
         ef:51:26:e4:a7:d0:71:20:9d:45:75:3e:8e:92:3c:66:6e:70:
         4a:54:bd:cc:ff:f2:12:6e:98:fc:9b:62:f1:af:31:bc:09:95:
         ac:99:1e:c0:18:1d:bc:0d:9d:eb:d4:53:8c:f5:22:d0:97:3a:
         8e:01:0f:88:61:90:26:6d:92:9c:99:77:5e:07:bc:70:24:44:
         93:03:34:87:6f:97:ca:29:94:75:2d:a9:b7:b0:07:9a:2f:16:
         a0:84:a7:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWECGoXbxxuhmjTidusAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEwOTEyMDAwMFoXDTIzMDIxNDA1MDAwMFowLzEtMCsGA1UEAxMk
OTM1NjZmZDMtOTc1Ny00NmY5LTliNjEtMWFiMzM2OTk2MTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oRQKnH9HY/w7W4HTf3ABRFZlXNuVluyVZ1D
b8V1O1ePFokq51GiwAMALSg8qMH4qLQgtoJsjfvvh7LrLSw3hAGDT70wTP37e6Ml
Fjm8pz+wWpN4tUzRSusA/msoVuMBAAKMermcW/KaZbyg+tg5GGRzwR/QNKjlLoHq
H5CduWiVKzvo08hBWxSWsFCECyBimqO6zK+RQ/1MAdxLHXasDoz6spiHs4kxrqnO
IqQ/o4VVmOI3n826GtLlUfWk2Jwm8E3alAdfdN4CnLvSb4kxbjYOjd0wK05Kg6oY
Vz7GTxkVY7+/8ZvntglcbN8NDOXETj7tp0lQ56Jjvy+8MQWFiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFn2q0KTMQrCXV8CA53PyTnyKtfWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNDJhNzhmYjQtZWUzMS0z
MWUzLTk4OWItMGE1N2FjNDJmMzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAizgAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADZ98U5zUAwbezMXdH/ANYH5d6non4avS4zGAm2J1cWbZ5T83xAYMuZv
dLoOeqx4r4I80sknHFg1HFKK/5+RpSOCOmcwSP+URDzzYZEXBuLHDchClvYOIDQM
ImIeBTiR74R5Piy+t9UErSVbSr0ZNc0lCLYX3zHqieeqgr12G9f1rZCoz+UzR49j
Fw7ZckC5Z9TMdUPuFf3Ldc56/lxb31HuMe9RJuSn0HEgnUV1Po6SPGZucEpUvcz/
8hJumPybYvGvMbwJlayZHsAYHbwNnevUU4z1ItCXOo4BD4hhkCZtkpyZd14HvHAk
RJMDNIdvl8oplHUtqbewB5ovFqCEp4o=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:26 2025 by rpki-client