Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4aaf3bdd-481d-3198-ba07-dcc80b886b29.roa
File:                     4aaf3bdd-481d-3198-ba07-dcc80b886b29.roa (raw, json)
Hash identifier:          jhzLXn9B40lyFY3wAoBOliMJ8yNKYk9RieoU+7fCINo=
Subject key identifier:   B6:88:34:62:34:F1:AE:B6:0D:49:FC:7C:3C:8F:EB:17:0E:D6:CB:5A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F679746F029BA244F5BE4BC00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4aaf3bdd-481d-3198-ba07-dcc80b886b29.roa
Signing time:             Wed 28 Sep 2022 17:57:08 +0000
ROA not before:           Wed 28 Sep 2022 17:57:08 +0000
ROA not after:            Thu 03 Nov 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        56.53.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:67:97:46:f0:29:ba:24:4f:5b:e4:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 28 17:57:08 2022 GMT
            Not After : Nov  3 04:00:00 2022 GMT
        Subject: CN=bd471840-4d66-46b8-8b15-e35e91bd4914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4c:fb:8d:a5:92:1d:a7:2f:19:76:7d:0c:85:
                    5c:71:09:4b:77:7e:60:6c:cf:10:5f:fa:8f:24:74:
                    d6:d3:5a:ad:39:d2:2e:bd:15:3c:90:6a:28:8a:28:
                    08:4e:97:03:b4:51:77:fa:02:b8:ce:99:d4:89:fb:
                    bf:a3:28:26:16:72:4c:01:b0:3d:c1:d9:a9:51:03:
                    b4:d1:8b:bb:2d:c5:2d:93:82:b8:d3:a7:ff:24:ab:
                    28:72:5c:2c:24:5f:4b:e3:3b:d6:5f:31:cd:61:72:
                    b8:57:bf:34:b2:e3:b4:71:6d:3d:84:d7:30:96:1d:
                    36:2d:76:7d:2e:31:f8:b7:a4:69:93:a7:33:05:67:
                    ba:13:4e:d1:48:e1:9c:35:24:66:bb:93:db:fa:e8:
                    d8:cc:77:24:0c:a4:02:ca:ed:48:2a:19:17:c7:8a:
                    d4:72:cf:e0:de:bd:53:b5:33:4a:76:44:1d:e1:05:
                    0b:26:91:30:ff:04:97:15:0c:24:a7:ac:82:13:d2:
                    a6:cb:db:06:f9:91:23:86:94:e2:32:3e:63:53:30:
                    b6:90:3c:57:05:77:c7:26:9f:c7:ce:8f:16:fc:8c:
                    10:3b:1a:ab:b7:f5:bb:7d:f7:af:9c:b2:e1:ec:66:
                    e1:7f:29:a3:3d:fd:ec:15:7a:29:44:14:30:61:6f:
                    49:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:88:34:62:34:F1:AE:B6:0D:49:FC:7C:3C:8F:EB:17:0E:D6:CB:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4aaf3bdd-481d-3198-ba07-dcc80b886b29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.53.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:8f:25:b8:3d:db:95:1b:31:00:12:c2:ab:a0:07:95:3d:d3:
         d0:da:0e:d4:34:d7:87:83:71:db:dc:8b:11:29:b2:ed:5d:79:
         07:ef:c7:6a:a6:7c:9d:ac:e3:ba:e5:71:86:ec:d3:60:2c:a1:
         bf:ba:04:d4:96:d9:20:b4:32:06:04:fa:aa:3e:74:04:e4:bd:
         0a:fd:60:dd:41:c5:9e:28:34:e7:2a:e5:5e:a6:61:e0:ca:ca:
         da:2e:85:c4:93:a1:d4:84:f4:fd:cc:35:1b:31:ac:1f:3e:4f:
         47:14:e0:89:f8:2c:6b:09:fe:2c:53:eb:d3:fa:53:39:1a:38:
         47:36:94:e2:51:94:ae:31:27:4f:66:86:62:7b:00:d0:76:47:
         8d:32:58:56:7f:12:3d:4a:cc:a3:28:26:5e:81:76:c4:0d:5d:
         3b:c7:7f:de:a2:65:ea:7d:e9:f8:f9:50:19:25:c4:94:6c:a8:
         5a:50:87:12:d6:1f:a7:5a:25:3f:34:49:c8:c0:da:f1:6c:94:
         58:e6:26:a3:74:e7:68:1c:c0:98:22:66:1c:66:ae:8a:42:9b:
         0e:07:ec:c7:63:2e:bb:b0:d5:43:74:73:36:01:cb:9b:10:c2:
         e5:c7:55:a6:69:56:58:ff:5d:a0:e8:1b:ee:26:4f:a7:53:52:
         27:2b:33:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:35 2025 by rpki-client