Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/44abd0ff-d51d-3ff4-a65f-deefa265e042.roa
File:                     44abd0ff-d51d-3ff4-a65f-deefa265e042.roa (raw, json)
Hash identifier:          UJwVJ7PIvEuKVGugyIrdkTu4Fdx7m94UIx95oFxMmug=
Subject key identifier:   18:8C:6A:09:16:87:DA:EB:87:E2:26:6F:83:84:1C:4B:3C:C9:01:23
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CB4D43251D706CB1FADF50F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/44abd0ff-d51d-3ff4-a65f-deefa265e042.roa
Signing time:             Tue 25 Jan 2022 05:00:00 +0000
ROA not before:           Tue 25 Jan 2022 05:00:00 +0000
ROA not after:            Tue 01 Mar 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        139.56.0.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:b4:d4:32:51:d7:06:cb:1f:ad:f5:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 25 05:00:00 2022 GMT
            Not After : Mar  1 05:00:00 2022 GMT
        Subject: CN=b38b048a-93aa-44d3-97e5-9d15d835e80e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d2:6b:b5:da:f0:3f:42:09:77:d2:2a:42:84:
                    9b:f4:91:7f:92:fc:16:06:86:d8:43:1c:aa:b1:1b:
                    bd:9e:9c:fb:5f:e1:fb:cf:e2:58:95:bd:d3:30:f7:
                    83:1a:08:0e:0d:b2:44:22:f7:23:7e:42:38:43:1b:
                    83:e6:59:c7:89:f8:d0:ad:2c:e6:db:ef:df:62:50:
                    ae:10:b2:1b:62:df:3b:88:79:07:7a:bf:f0:88:8e:
                    b8:12:b9:0f:b7:d8:1d:84:cd:0e:45:60:a1:ff:25:
                    f4:20:18:e4:9c:9f:40:e2:cb:07:cd:c6:46:e4:fb:
                    91:19:fa:34:19:78:a6:61:f3:ee:f2:01:7f:d8:ee:
                    53:9a:c4:7b:d0:a1:12:c3:42:80:91:cb:bf:2b:59:
                    dc:6d:4b:22:ed:e5:14:10:5c:32:b6:a6:40:dc:6d:
                    0c:95:ed:05:cb:fc:4d:d2:13:3c:af:47:43:4c:1f:
                    a2:67:31:4f:30:24:ea:74:b1:ef:20:6f:e0:fd:e1:
                    90:b6:60:17:d8:ec:48:84:c4:a9:8d:8d:8e:f9:3c:
                    d2:5a:f9:ad:3c:22:d5:7c:74:17:bd:17:ca:73:6e:
                    fa:3b:9e:87:45:2e:8c:44:7a:e2:4c:93:e0:06:4c:
                    7b:cf:c5:62:63:8f:06:fb:b7:e0:92:f8:9c:fb:00:
                    1d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8C:6A:09:16:87:DA:EB:87:E2:26:6F:83:84:1C:4B:3C:C9:01:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/44abd0ff-d51d-3ff4-a65f-deefa265e042.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:44:83:a8:da:3c:08:ce:91:af:59:d9:3f:71:7b:e7:9b:7c:
         16:3c:df:63:84:d6:57:a0:b8:07:f7:d5:7b:de:74:85:bc:f7:
         57:e3:22:4f:2c:07:ae:68:1f:7e:fe:5b:40:9a:0f:ac:be:04:
         7c:68:9b:a5:5f:fb:67:f9:5d:7f:39:50:95:8b:37:e3:21:92:
         46:a0:12:e0:d5:58:03:fc:92:76:79:b2:44:99:71:6d:9f:81:
         0f:c0:2b:b6:1d:63:19:b7:ba:85:51:be:db:15:f9:42:7d:4c:
         92:31:09:96:cd:cf:77:46:c8:e6:76:5c:21:16:92:7c:ff:26:
         08:72:f3:f8:9e:45:84:16:65:ff:d6:a5:8c:a6:3b:8b:7d:c8:
         fb:b9:29:cf:97:b3:3d:cf:e1:7f:30:40:c4:9e:50:45:b9:28:
         db:82:8f:4f:62:e0:9e:1e:e7:97:60:4e:cd:f1:57:a7:01:19:
         24:cd:fb:5d:35:2e:d9:e7:cf:fc:e9:43:ff:c4:d2:4a:6d:34:
         65:44:c6:1a:7d:cb:34:50:04:30:ab:b3:d0:49:81:08:2e:83:
         df:45:fc:3c:71:39:ec:07:94:ef:47:a9:cf:17:13:eb:98:86:
         57:89:ff:7e:48:87:53:7c:30:8c:69:e2:c2:33:1e:0a:e4:d5:
         57:46:68:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDy01DJR1wbLH631DwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDEyNTA1MDAwMFoXDTIyMDMwMTA1MDAwMFowLzEtMCsGA1UEAxMk
YjM4YjA0OGEtOTNhYS00NGQzLTk3ZTUtOWQxNWQ4MzVlODBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNJrtdrwP0IJd9IqQoSb9JF/kvwWBobYQxyq
sRu9npz7X+H7z+JYlb3TMPeDGggODbJEIvcjfkI4QxuD5lnHifjQrSzm2+/fYlCu
ELIbYt87iHkHer/wiI64ErkPt9gdhM0ORWCh/yX0IBjknJ9A4ssHzcZG5PuRGfo0
GXimYfPu8gF/2O5TmsR70KESw0KAkcu/K1ncbUsi7eUUEFwytqZA3G0Mle0Fy/xN
0hM8r0dDTB+iZzFPMCTqdLHvIG/g/eGQtmAX2OxIhMSpjY2O+TzSWvmtPCLVfHQX
vRfKc276O56HRS6MRHriTJPgBkx7z8ViY48G+7fgkvic+wAduwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBiMagkWh9rrh+Imb4OEHEs8yQEjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNDRhYmQwZmYtZDUxZC0z
ZmY0LWE2NWYtZGVlZmEyNjVlMDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAizgAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA5Eg6jaPAjOka9Z2T9xe+ebfBY832OE1leguAf31XvedIW891fjIk8s
B65oH37+W0CaD6y+BHxom6Vf+2f5XX85UJWLN+MhkkagEuDVWAP8knZ5skSZcW2f
gQ/AK7YdYxm3uoVRvtsV+UJ9TJIxCZbNz3dGyOZ2XCEWknz/Jghy8/ieRYQWZf/W
pYymO4t9yPu5Kc+Xsz3P4X8wQMSeUEW5KNuCj09i4J4e55dgTs3xV6cBGSTN+101
Ltnnz/zpQ//E0kptNGVExhp9yzRQBDCrs9BJgQgug99F/DxxOewHlO9Hqc8XE+uY
hleJ/35Ih1N8MIxp4sIzHgrk1VdGaO4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:26 2025 by rpki-client