Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4cf9b2e9-67ff-3928-93ee-342e2b4725b0.roa
File:                     4cf9b2e9-67ff-3928-93ee-342e2b4725b0.roa (raw, json)
Hash identifier:          BlaUzs7tWpePzoBvumVbdls0eWiu+6kGcOyXCvwCM60=
Subject key identifier:   CC:A2:99:CB:D8:C5:72:67:DB:4A:13:4B:CD:D7:90:55:19:F8:CD:EA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F63813647DD7111BFB8765C40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4cf9b2e9-67ff-3928-93ee-342e2b4725b0.roa
Signing time:             Tue 27 Sep 2022 17:27:07 +0000
ROA not before:           Tue 27 Sep 2022 17:27:07 +0000
ROA not after:            Wed 02 Nov 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        56.133.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:63:81:36:47:dd:71:11:bf:b8:76:5c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 27 17:27:07 2022 GMT
            Not After : Nov  2 04:00:00 2022 GMT
        Subject: CN=b7dbb7fc-949d-46dd-aaca-ab4b46b7ce78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a5:b4:52:bd:18:9d:11:53:d3:94:1d:87:04:
                    84:56:c3:59:c0:6b:99:09:36:56:d6:f0:d0:c4:13:
                    8e:c4:bc:a9:8b:25:8e:b8:ef:62:e3:f9:b0:45:87:
                    bc:f4:5a:30:63:e5:f4:a3:5c:53:bf:8a:a4:c3:4e:
                    20:47:18:a9:3f:95:57:60:4a:b8:62:30:ab:4f:c5:
                    48:2f:8f:2d:dc:af:33:4a:10:05:95:62:5a:77:45:
                    f6:bf:06:8f:01:5d:12:c8:c7:d3:4d:2c:ba:b7:af:
                    31:ea:90:84:7b:ca:73:78:11:0f:f7:c5:c5:1f:18:
                    94:03:b1:82:9b:01:c8:8d:92:1d:13:51:e8:07:45:
                    9a:fe:23:7c:b5:2c:68:a8:6b:21:c1:13:37:2c:f8:
                    83:01:78:06:a9:6e:f8:a1:58:b0:80:dd:ac:7f:16:
                    6d:0e:ef:ba:fe:fd:8d:98:a7:60:b5:76:b8:9f:de:
                    4f:21:2e:43:f9:40:9b:f4:35:79:b3:cc:d5:dc:d3:
                    25:47:af:3a:37:d5:26:4c:3d:0c:14:e7:17:7a:fa:
                    89:62:fc:42:1e:c8:2e:5f:ae:b5:c2:3a:35:72:0a:
                    1f:97:90:27:74:24:74:b6:a8:ba:bb:58:31:38:64:
                    78:77:d3:b2:18:fa:31:95:c9:44:25:c0:71:4b:b0:
                    9b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A2:99:CB:D8:C5:72:67:DB:4A:13:4B:CD:D7:90:55:19:F8:CD:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4cf9b2e9-67ff-3928-93ee-342e2b4725b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.133.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:dc:ca:4a:9e:bd:9e:93:db:9c:79:3c:84:86:a1:00:d3:26:
         63:aa:5e:26:4b:c8:fa:39:6f:b4:35:7c:24:b2:3e:8e:d5:26:
         dc:dd:5f:4e:dd:61:a4:09:5d:94:0b:4c:6e:73:05:c7:f0:e5:
         9e:c2:01:4d:f9:4a:5d:7f:89:66:ec:e3:5f:14:da:df:ef:13:
         48:bb:47:3c:74:31:96:76:4c:52:20:08:19:64:c0:d5:7a:82:
         d8:5a:ae:39:3f:c4:51:66:72:9a:1f:05:03:eb:13:d8:3d:7e:
         93:bb:b9:d4:20:08:a9:a4:2a:4a:c2:0c:47:23:f5:da:70:89:
         c5:47:14:a7:7c:3e:e7:f4:de:e6:6b:ff:ad:d5:69:8c:21:f6:
         9b:51:a7:d2:2e:ce:1c:c4:de:df:1e:88:37:41:cc:54:bc:14:
         ff:12:0a:18:1c:ee:3e:25:96:b1:42:35:1d:64:f4:b7:f9:d5:
         05:01:56:92:47:1c:b2:85:7c:e7:2e:b4:c2:22:9a:71:90:c8:
         12:37:a4:49:21:5f:f8:a2:5a:ab:e3:2c:6a:96:47:0c:be:de:
         ef:b0:38:40:45:5c:d2:ab:25:17:0c:cf:f8:8f:f4:12:62:d2:
         d5:7f:e6:2d:e9:89:47:db:df:1d:5d:21:9d:bf:da:77:96:13:
         89:8a:d6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:11:35 2025 by rpki-client