Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5506c2ae-727a-3b67-8d99-8d4aca184a31.roa
File:                     5506c2ae-727a-3b67-8d99-8d4aca184a31.roa (raw, json)
Hash identifier:          6cW0TDrgmGF9L27xAJlCN9UvQSSdKaCI9jsZjLKPmJQ=
Subject key identifier:   2D:DB:F5:15:53:6D:20:FD:46:38:E1:07:A6:78:D7:36:79:CD:19:72
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858405F938A7692F232940FF7A800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5506c2ae-727a-3b67-8d99-8d4aca184a31.roa
Signing time:             Mon 26 Dec 2022 12:00:00 +0000
ROA not before:           Mon 26 Dec 2022 12:00:00 +0000
ROA not after:            Tue 31 Jan 2023 05:00:00 +0000
asID:                     6167
IP address blocks:        139.56.3.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:5f:93:8a:76:92:f2:32:94:0f:f7:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 26 12:00:00 2022 GMT
            Not After : Jan 31 05:00:00 2023 GMT
        Subject: CN=278b0b5e-79b5-4795-86fe-ddd02a9934b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c8:f2:cd:90:aa:5d:5f:52:14:42:34:04:a2:
                    75:db:1c:85:f2:93:b1:fb:31:f6:16:e7:bf:71:83:
                    1e:54:37:20:d3:9a:7d:f5:aa:d5:ce:02:16:7a:6b:
                    80:d6:15:72:8e:2a:c1:43:6f:4a:ce:76:32:ba:bf:
                    51:29:86:4f:62:64:5e:57:f2:e8:d1:2c:58:4c:6b:
                    a9:54:9b:32:3c:18:76:e9:f6:ff:e5:b6:5c:d9:90:
                    3f:d5:ec:ff:a0:4a:a5:86:d3:7c:95:4e:9e:39:3a:
                    d2:62:0c:21:d9:f6:6c:f3:42:42:e8:84:8d:dc:a0:
                    aa:e3:28:f6:bd:ca:bd:15:47:85:2e:3f:b9:a6:90:
                    1d:ac:d7:f3:62:1b:7e:f9:67:74:8f:bd:4e:7b:cd:
                    0a:0b:63:34:07:0b:36:62:71:81:a6:ca:32:23:ff:
                    ba:97:38:9f:53:65:9f:fc:a8:1f:1e:07:28:fe:94:
                    43:ed:50:c3:8d:a6:2f:06:99:2d:4a:49:7e:66:bb:
                    ef:00:64:00:bb:d6:fa:c2:73:0a:e3:1e:38:f9:fb:
                    05:35:c4:e1:d6:3c:5b:2f:6c:73:be:fe:19:b4:49:
                    e7:6b:59:13:77:30:c7:77:8d:fd:ef:5f:15:8b:a1:
                    0b:8f:41:62:15:0a:a4:60:f6:a4:57:b6:f8:5d:cd:
                    63:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DB:F5:15:53:6D:20:FD:46:38:E1:07:A6:78:D7:36:79:CD:19:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5506c2ae-727a-3b67-8d99-8d4aca184a31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:79:ab:7e:45:58:29:b8:41:b6:b5:52:61:44:14:b0:16:23:
         cd:a5:29:bc:9d:3a:61:e6:ec:22:d3:35:15:04:a8:b2:16:ca:
         35:c0:cb:ee:eb:b9:3c:9d:a8:58:e8:62:c4:ef:3d:26:3e:a1:
         e4:85:dd:c8:68:ca:6b:8d:2f:b5:2a:9c:a0:a4:35:86:91:e4:
         2c:f5:66:12:b5:cc:71:9c:09:bc:72:0b:c7:2e:b7:a4:67:d5:
         d0:0b:14:27:51:72:fa:f9:9c:3c:ad:67:11:c7:41:ee:c6:4d:
         c0:d6:6b:71:b7:74:c6:10:be:ee:d9:8e:cb:3d:ce:01:ee:c1:
         49:41:1e:37:77:e5:31:3c:aa:08:a8:b0:35:80:70:11:37:81:
         93:57:51:09:98:56:e5:45:a9:07:3c:26:3c:db:39:32:e6:db:
         b9:7f:a2:f4:1e:f3:9e:ee:91:6a:96:d8:a3:ca:78:6f:bd:ae:
         5f:7f:30:fd:38:a7:dc:f0:ba:73:84:0c:b9:2c:0c:ee:77:31:
         2a:c5:d0:28:71:d6:c6:99:6c:65:c5:c2:1d:29:04:03:d8:87:
         c7:f6:90:88:32:32:f3:07:30:34:b1:f5:6b:c5:c4:16:43:46:
         a0:78:a3:bc:03:52:65:b6:82:4b:e2:56:7b:4a:db:8e:9d:27:
         ea:2a:42:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBfk4p2kvIylA/3qAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIyNjEyMDAwMFoXDTIzMDEzMTA1MDAwMFowLzEtMCsGA1UEAxMk
Mjc4YjBiNWUtNzliNS00Nzk1LTg2ZmUtZGRkMDJhOTkzNGI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosjyzZCqXV9SFEI0BKJ12xyF8pOx+zH2Fue/
cYMeVDcg05p99arVzgIWemuA1hVyjirBQ29KznYyur9RKYZPYmReV/Lo0SxYTGup
VJsyPBh26fb/5bZc2ZA/1ez/oEqlhtN8lU6eOTrSYgwh2fZs80JC6ISN3KCq4yj2
vcq9FUeFLj+5ppAdrNfzYht++Wd0j71Oe80KC2M0Bws2YnGBpsoyI/+6lzifU2Wf
/KgfHgco/pRD7VDDjaYvBpktSkl+ZrvvAGQAu9b6wnMK4x44+fsFNcTh1jxbL2xz
vv4ZtEnna1kTdzDHd439718Vi6ELj0FiFQqkYPakV7b4Xc1j9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC3b9RVTbSD9RjjhB6Z41zZ5zRlyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNTUwNmMyYWUtNzI3YS0z
YjY3LThkOTktOGQ0YWNhMTg0YTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAizgDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA55q35FWCm4Qba1UmFEFLAWI82lKbydOmHm7CLTNRUEqLIWyjXAy+7r
uTydqFjoYsTvPSY+oeSF3choymuNL7UqnKCkNYaR5Cz1ZhK1zHGcCbxyC8cut6Rn
1dALFCdRcvr5nDytZxHHQe7GTcDWa3G3dMYQvu7Zjss9zgHuwUlBHjd35TE8qgio
sDWAcBE3gZNXUQmYVuVFqQc8JjzbOTLm27l/ovQe857ukWqW2KPKeG+9rl9/MP04
p9zwunOEDLksDO53MSrF0Chx1saZbGXFwh0pBAPYh8f2kIgyMvMHMDSx9WvFxBZD
RqB4o7wDUmW2gkviVntK246dJ+oqQnE=
-----END CERTIFICATE-----
Generated at Wed Apr 16 07:27:41 2025 by rpki-client