Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4fa04d6b-adf0-3307-82ae-9343e4f917f4.roa
File:                     4fa04d6b-adf0-3307-82ae-9343e4f917f4.roa (raw, json)
Hash identifier:          UkcNbE9HGz0Eb24awCgGfBY38n60+Dr67IQpOFWLrQI=
Subject key identifier:   F4:7F:56:8D:6D:5B:E4:5B:65:CD:B7:23:6C:40:77:F0:78:B5:B6:7A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840515AE7897B68D51B5A686200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4fa04d6b-adf0-3307-82ae-9343e4f917f4.roa
Signing time:             Wed 21 Dec 2022 22:15:08 +0000
ROA not before:           Wed 21 Dec 2022 22:15:08 +0000
ROA not after:            Thu 26 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        56.66.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:51:5a:e7:89:7b:68:d5:1b:5a:68:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 21 22:15:08 2022 GMT
            Not After : Jan 26 05:00:00 2023 GMT
        Subject: CN=4569b816-714a-4c71-8c67-1a388ac9e429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4c:c6:4b:60:e1:df:3c:cf:63:3b:4a:9b:34:
                    0c:73:d4:04:1d:d5:4f:72:6e:04:f9:66:2c:ba:69:
                    92:39:e2:94:1d:c7:96:69:75:e5:d0:d5:f1:f5:0b:
                    e1:9e:95:fb:e0:3f:ed:67:7a:ae:b4:1f:d7:08:63:
                    9a:a1:85:f3:71:6b:a2:00:fe:f1:97:2a:35:9e:43:
                    17:4c:1b:8e:8e:0e:a6:e6:e7:1a:88:66:5f:6f:c0:
                    d2:94:af:ec:59:d2:77:c6:60:3f:ac:d0:17:8f:82:
                    91:dd:50:59:e2:3f:d0:06:cf:b2:15:65:80:8d:87:
                    c1:7c:03:01:7b:ea:7e:11:f9:ba:34:3e:73:4a:2a:
                    83:cf:9a:13:9a:c2:53:65:d0:c3:32:92:20:0f:b1:
                    80:1a:82:58:7c:ba:cd:a6:41:57:37:bc:9d:81:6c:
                    68:c3:ab:4f:28:35:fa:6b:3b:4a:4c:1a:6a:2e:ba:
                    ea:83:12:69:93:a2:fd:5a:ca:a6:db:27:59:99:e3:
                    94:06:9c:90:e3:90:a0:53:b2:81:c9:f6:81:87:a2:
                    11:04:cf:e2:49:6e:98:be:0f:a9:91:65:bf:a8:56:
                    ab:dd:8c:1e:24:83:37:86:f9:f9:bc:0e:d5:dc:53:
                    29:58:7a:69:cc:14:6a:71:bb:f3:e5:4b:84:58:d9:
                    fe:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7F:56:8D:6D:5B:E4:5B:65:CD:B7:23:6C:40:77:F0:78:B5:B6:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4fa04d6b-adf0-3307-82ae-9343e4f917f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.66.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:ad:a2:e6:49:9e:b9:45:40:37:2c:94:df:41:f6:c9:4b:90:
         34:a1:74:6b:f1:51:12:4a:bb:41:fd:3f:e6:1d:9f:89:bb:d9:
         7e:f3:57:80:0d:41:f0:85:74:e5:e6:8b:8c:78:bb:a2:11:d9:
         04:89:7a:80:e2:61:2c:a0:50:5d:ba:14:48:32:94:a8:e2:ba:
         b2:74:94:c7:15:fe:3b:27:cb:6a:ef:08:35:1b:b2:12:b0:97:
         b7:02:eb:3b:a9:e1:cc:d8:48:79:86:b9:cf:f3:bf:e1:01:4e:
         94:73:5c:ea:49:f1:07:f0:ee:c8:2e:87:a3:0c:44:cd:e2:7d:
         72:ba:fc:3a:28:24:13:10:65:83:1e:60:dd:fb:77:65:c0:eb:
         9b:82:4f:a2:84:5a:23:a4:70:84:b9:61:74:58:c0:4a:13:87:
         df:3d:80:ac:71:57:94:c8:0b:2c:71:fe:dd:70:30:7f:b9:d5:
         e8:02:5e:11:28:16:fd:f5:d2:06:5e:18:2b:81:ed:1f:8c:f7:
         62:aa:39:00:12:1a:e5:9c:7a:15:32:02:67:52:76:5a:c3:0b:
         47:06:ee:56:f4:b1:85:b3:1f:fc:13:8d:1d:c8:80:17:4a:37:
         32:4e:88:11:0f:bd:b2:e7:52:fb:04:0e:4d:33:7a:c8:56:91:
         29:e7:f9:b7
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBRWueJe2jVG1poYgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIyMTIyMTUwOFoXDTIzMDEyNjA1MDAwMFowLzEtMCsGA1UEAxMk
NDU2OWI4MTYtNzE0YS00YzcxLThjNjctMWEzODhhYzllNDI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEzGS2Dh3zzPYztKmzQMc9QEHdVPcm4E+WYs
ummSOeKUHceWaXXl0NXx9QvhnpX74D/tZ3qutB/XCGOaoYXzcWuiAP7xlyo1nkMX
TBuOjg6m5ucaiGZfb8DSlK/sWdJ3xmA/rNAXj4KR3VBZ4j/QBs+yFWWAjYfBfAMB
e+p+Efm6ND5zSiqDz5oTmsJTZdDDMpIgD7GAGoJYfLrNpkFXN7ydgWxow6tPKDX6
aztKTBpqLrrqgxJpk6L9Wsqm2ydZmeOUBpyQ45CgU7KByfaBh6IRBM/iSW6Yvg+p
kWW/qFar3YweJIM3hvn5vA7V3FMpWHppzBRqcbvz5UuEWNn+CQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPR/Vo1tW+RbZc23I2xAd/B4tbZ6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNGZhMDRkNmItYWRmMC0z
MzA3LTgyYWUtOTM0M2U0ZjkxN2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOEIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAQK2i5kmeuUVANyyU30H2yUuQNKF0a/FREkq7Qf0/5h2fibvZfvNXgA1B
8IV05eaLjHi7ohHZBIl6gOJhLKBQXboUSDKUqOK6snSUxxX+OyfLau8INRuyErCX
twLrO6nhzNhIeYa5z/O/4QFOlHNc6knxB/DuyC6HowxEzeJ9crr8OigkExBlgx5g
3ft3ZcDrm4JPooRaI6RwhLlhdFjAShOH3z2ArHFXlMgLLHH+3XAwf7nV6AJeESgW
/fXSBl4YK4HtH4z3Yqo5ABIa5Zx6FTICZ1J2WsMLRwbuVvSxhbMf/BONHciAF0o3
Mk6IEQ+9sudS+wQOTTN6yFaRKef5tw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:31 2025 by rpki-client