Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/54d4c31e-273f-3906-9929-68d1f61ba989.roa
File:                     54d4c31e-273f-3906-9929-68d1f61ba989.roa (raw, json)
Hash identifier:          uwArs+CU9lNUv4lVXvxN8IQE5YYbPwtN0l559xdQhGE=
Subject key identifier:   FC:97:99:B6:B1:C7:D2:E2:AB:A1:4A:D7:B4:84:42:8D:8F:CA:04:2E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EDA2FCFB82252E2CF6FA13E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/54d4c31e-273f-3906-9929-68d1f61ba989.roa
Signing time:             Mon 08 Aug 2022 12:00:00 +0000
ROA not before:           Mon 08 Aug 2022 12:00:00 +0000
ROA not after:            Tue 13 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        56.67.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:da:2f:cf:b8:22:52:e2:cf:6f:a1:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug  8 12:00:00 2022 GMT
            Not After : Sep 13 04:00:00 2022 GMT
        Subject: CN=bcb93674-fe74-4387-924e-e9b285d27b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6f:09:03:d1:ee:99:b9:eb:c8:32:46:3f:25:
                    55:c9:b5:25:12:97:6e:96:db:d9:fa:d9:06:1f:51:
                    c1:93:58:f9:7b:ce:3f:35:42:55:42:d2:a5:57:b8:
                    b9:b7:e3:82:2c:45:a0:26:cb:b7:83:ad:ae:59:55:
                    55:93:f8:56:0f:1a:ab:ce:94:ac:2a:2b:28:db:44:
                    fa:56:fb:e6:bd:fd:63:7a:f0:d0:3e:fa:99:37:84:
                    e1:ff:4f:f7:c9:0b:cf:f6:ed:ed:5b:1b:2d:3b:d2:
                    75:28:49:37:96:9d:39:4e:b1:ea:2c:9e:ff:e3:69:
                    a8:b4:76:12:45:04:6d:16:5b:5b:dd:7a:d2:58:33:
                    39:a5:7d:91:74:f9:6d:df:13:75:ae:fa:74:07:ab:
                    8d:ed:2a:18:77:20:5b:55:a0:4c:46:6e:25:3f:fe:
                    d1:09:40:14:ad:15:91:d0:6e:4d:17:b9:ef:52:24:
                    35:47:87:a5:dd:e6:9d:d0:16:7d:32:65:b0:48:86:
                    8d:23:6c:8a:35:4d:f6:72:25:f4:1e:89:54:6f:8f:
                    81:24:10:6b:c7:64:27:7b:4c:91:a0:c0:b4:60:f1:
                    7d:bf:63:cb:f0:11:55:c9:00:ef:83:39:76:ca:ed:
                    e0:c6:72:31:95:fe:93:06:0c:25:37:1c:17:4d:db:
                    67:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:97:99:B6:B1:C7:D2:E2:AB:A1:4A:D7:B4:84:42:8D:8F:CA:04:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/54d4c31e-273f-3906-9929-68d1f61ba989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.67.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:71:00:74:8d:5c:6f:68:23:62:5f:87:a9:00:6e:47:c6:40:
         ee:18:bd:5c:c6:e9:d5:24:5e:f2:47:22:c3:53:7f:f4:50:8c:
         b6:04:d1:c1:2f:5c:9b:cb:3c:30:19:58:f1:15:f0:a3:7d:eb:
         e5:4e:f5:c4:cd:7c:b1:fb:60:ee:44:b9:cf:a4:c5:fe:fb:14:
         bd:4e:4a:85:4d:e9:b7:d0:ad:bc:25:f5:f6:2c:ac:3c:c2:9b:
         d2:b8:d4:3e:bd:54:28:17:1a:36:db:55:b3:f4:cf:6a:df:76:
         6e:8a:b1:ee:c7:f8:f8:cc:bc:42:86:b8:6d:b7:21:4c:01:ec:
         e3:9a:75:b3:d5:bd:85:21:65:77:62:fb:b6:c1:46:8a:6c:d0:
         2a:86:ab:ca:31:c7:26:db:0d:b0:48:1b:f5:93:b0:7e:b9:ea:
         46:8f:c2:8c:d9:8c:91:ce:28:e1:f9:e8:e3:a5:76:52:df:c8:
         64:31:58:a1:a4:c3:bc:28:ef:76:1c:84:12:71:66:81:bb:f2:
         a1:cb:02:17:3f:1b:be:a1:bb:aa:38:e7:64:7d:e3:0b:9d:a1:
         50:98:f6:2b:62:28:0e:d0:d1:df:9f:68:3b:be:2a:e6:1f:6e:
         08:31:01:aa:a6:de:dd:28:0c:7c:fc:c6:76:7b:71:b7:74:cc:
         57:e6:5a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:05 2025 by rpki-client