Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/56992f18-b3ae-3635-b7ac-497dd63350be.roa
File:                     56992f18-b3ae-3635-b7ac-497dd63350be.roa (raw, json)
Hash identifier:          xxm/Jofzo4qaDVOuLZAMulgWj/r1liQkter1FHf/wls=
Subject key identifier:   18:D6:79:11:C0:39:25:D4:B3:7C:14:2A:DD:12:F1:7C:7B:8E:87:59
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FF392032250D1EDA1C5D5ACC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/56992f18-b3ae-3635-b7ac-497dd63350be.roa
Signing time:             Thu 17 Nov 2022 12:00:00 +0000
ROA not before:           Thu 17 Nov 2022 12:00:00 +0000
ROA not after:            Fri 23 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        130.171.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f3:92:03:22:50:d1:ed:a1:c5:d5:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 17 12:00:00 2022 GMT
            Not After : Dec 23 05:00:00 2022 GMT
        Subject: CN=9f1ff493-28ac-45ba-baac-c7c97c177b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2b:92:bf:2a:1b:dd:ae:22:3f:1b:9b:4b:37:
                    ab:05:11:4a:69:2d:8f:13:0a:fc:c1:c2:86:8a:21:
                    dd:c1:5d:e0:0f:91:20:cb:c0:c4:f1:58:43:49:6b:
                    1b:f3:23:d9:19:82:9f:ba:ec:79:92:ed:c8:ca:62:
                    f1:6b:9a:48:1d:41:d0:0a:ca:2b:2d:2e:8f:91:24:
                    11:e0:8a:9c:f6:fe:b0:be:ab:1b:82:d7:c8:52:d3:
                    62:04:35:cd:09:b4:ab:06:68:8d:7a:af:f4:78:9f:
                    80:96:7a:f2:09:d6:4f:27:a3:33:8b:76:a5:20:4d:
                    36:c8:e0:e8:b6:dd:d6:9c:d9:c7:e5:7f:64:84:9b:
                    6c:16:3b:32:bb:0f:a0:e1:c2:a7:b5:22:59:b0:26:
                    f3:5c:9a:be:6b:da:dd:17:99:6d:45:4f:6b:8e:d6:
                    cf:f7:b4:ee:11:83:55:4e:82:d7:ef:e8:a6:80:35:
                    d9:19:5f:d9:56:65:11:38:18:d4:cf:7f:9b:7f:d4:
                    67:a2:42:56:00:78:13:ed:a5:53:a2:b2:32:ec:36:
                    e7:ec:b6:26:e3:8b:71:f8:c2:38:b0:d8:cd:34:b9:
                    67:12:a2:5c:fb:e0:79:95:bd:a0:71:29:4d:29:2a:
                    f1:f3:e1:9a:07:5d:8d:a1:b4:8a:74:e6:37:d6:36:
                    65:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D6:79:11:C0:39:25:D4:B3:7C:14:2A:DD:12:F1:7C:7B:8E:87:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/56992f18-b3ae-3635-b7ac-497dd63350be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.171.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:d4:3b:16:db:a9:ec:a4:75:a7:db:dd:cb:ad:98:37:7e:17:
         4b:e1:b4:95:41:8e:14:f7:e8:6b:60:a0:97:62:c5:23:03:c7:
         d6:5b:83:1e:78:4d:f7:0a:6c:6d:83:9d:82:18:ff:27:75:fb:
         2e:7b:c6:0a:6e:30:ad:59:2b:c9:9b:ad:c3:a5:f2:82:bc:5e:
         19:8e:85:a6:57:6f:a1:a1:a5:b1:35:c7:09:ca:34:12:2a:fa:
         23:f5:05:c2:14:d2:9e:c8:c7:4b:01:39:9a:dd:23:5d:fd:af:
         5a:05:36:20:fa:80:0c:95:8f:aa:ec:a0:e1:da:16:5e:12:c7:
         28:6a:64:a3:bf:f4:e8:d9:96:78:26:c4:be:11:f3:2e:a6:63:
         87:c0:b7:c9:9b:74:ab:36:50:45:f2:db:a9:91:f8:69:02:c5:
         24:95:3b:51:c9:b1:67:32:9e:0d:c5:06:f4:66:d4:84:3e:37:
         70:b2:72:95:48:4d:00:82:4d:5f:0b:f6:ad:69:f7:3b:d3:06:
         6b:fa:03:3c:78:cf:f5:c8:68:36:68:9e:f8:16:55:fb:62:ca:
         13:02:c8:5f:55:47:a4:63:8e:6d:25:5a:63:44:da:3b:9d:db:
         9e:2e:c6:6e:8d:e7:05:69:89:8d:a5:8b:f0:59:9a:c8:58:11:
         67:45:9e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:27 2025 by rpki-client