Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/550ade19-b994-3114-9fc9-3bf4631f7e3f.roa
File:                     550ade19-b994-3114-9fc9-3bf4631f7e3f.roa (raw, json)
Hash identifier:          jqbbOS/uUXtBVFxC1OBUungpFbz1DJHTxZWz51JuEug=
Subject key identifier:   FF:2C:72:FE:71:47:6F:9B:0C:B2:92:C5:DE:C0:7D:D1:55:86:2D:0F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584029CE0921057F3528104E4040
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/550ade19-b994-3114-9fc9-3bf4631f7e3f.roa
Signing time:             Wed 07 Dec 2022 12:00:00 +0000
ROA not before:           Wed 07 Dec 2022 12:00:00 +0000
ROA not after:            Thu 12 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        56.126.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:29:ce:09:21:05:7f:35:28:10:4e:40:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec  7 12:00:00 2022 GMT
            Not After : Jan 12 05:00:00 2023 GMT
        Subject: CN=5456ac88-7bf0-4d0e-80a4-864090f8286d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3b:b9:ee:d9:65:31:d6:76:29:dc:e7:19:a5:
                    f4:aa:26:b0:1c:45:56:ed:5c:d8:31:2a:62:f5:34:
                    00:38:06:41:df:d1:1b:cd:8e:53:d2:8a:45:4e:fd:
                    7f:61:31:c3:40:2c:19:c3:0f:d8:b1:8b:52:81:cb:
                    bc:a5:ac:f2:5d:e1:2c:80:65:3d:db:c2:77:e6:41:
                    c2:81:15:55:c7:a6:59:42:4b:8c:8e:eb:5c:f0:fa:
                    cb:b2:96:45:df:a4:0b:e7:0e:0d:57:cb:cd:00:55:
                    b8:21:b8:31:3c:5c:b2:5c:8e:e4:4b:2c:82:99:e8:
                    b2:1e:42:e0:02:9b:83:af:10:4a:ce:08:23:9c:a5:
                    41:62:06:fc:73:a4:f4:32:c1:ad:c1:26:57:60:e9:
                    66:9f:bd:ee:a5:f8:bf:9d:11:58:81:6e:5a:8d:30:
                    8b:a9:b1:51:f9:0d:83:a3:5d:67:af:4e:47:7b:34:
                    5f:2f:ef:f1:1d:7b:c5:a4:0d:1f:31:0c:55:c9:c6:
                    7c:ac:f9:a7:cd:72:cb:18:dc:f5:cb:a0:e5:e5:00:
                    4d:80:8b:bf:04:0e:de:79:d2:e1:ce:9c:e3:da:47:
                    a0:b3:b0:32:00:a3:4d:8e:58:a3:e3:da:08:d7:fb:
                    05:42:6d:a9:f0:99:a0:b9:21:94:a7:b5:50:8a:a1:
                    81:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:2C:72:FE:71:47:6F:9B:0C:B2:92:C5:DE:C0:7D:D1:55:86:2D:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/550ade19-b994-3114-9fc9-3bf4631f7e3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.126.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:e4:da:ee:e1:47:52:90:65:42:34:83:ae:cb:13:b9:cc:24:
         2d:ad:26:ac:cf:5f:02:c3:bd:9e:72:8a:9b:bd:66:e2:e3:1c:
         ca:79:0a:c6:cd:47:0f:6c:f2:85:be:31:ec:eb:e1:08:02:26:
         af:e0:c9:19:b4:18:23:86:a6:11:08:d0:d9:f3:25:71:1e:bc:
         a3:61:db:db:49:9f:56:5c:73:3a:25:5d:a2:96:97:24:cd:55:
         7d:2b:b7:c2:9b:2f:c9:7a:0b:23:e2:34:4b:8a:15:49:84:5a:
         bf:96:ef:ab:1f:be:ec:f6:35:b3:ab:1c:43:2f:74:10:80:54:
         f7:9d:ed:dc:55:41:29:7d:33:8d:d1:ba:5c:c9:3b:29:84:84:
         22:f9:82:5f:d3:cf:25:36:07:00:5e:36:fb:ee:d2:89:a3:1a:
         68:a4:25:30:13:82:bb:51:94:ee:82:40:bd:52:0d:8c:ba:22:
         b0:ee:56:c4:3c:d3:00:3b:98:a9:be:9c:3e:f8:3c:e1:ae:c2:
         5d:29:d3:90:e6:70:61:e1:02:6b:bb:ba:1c:00:76:70:ac:5a:
         ad:0e:d9:53:82:7d:1c:d0:ed:22:cd:86:50:92:a9:08:87:da:
         82:e5:ac:13:1a:85:f9:74:fe:7a:ac:40:48:75:f7:14:75:06:
         d9:e7:aa:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:49 2025 by rpki-client