Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/57c68bfb-1a2b-3764-b688-5408c1387dc5.roa
File:                     57c68bfb-1a2b-3764-b688-5408c1387dc5.roa (raw, json)
Hash identifier:          bs3XQkVahwQvw6ILuivF265ogwc1+vhcjjSq8BRdNpg=
Subject key identifier:   15:EA:EF:74:26:BA:81:20:65:AD:B3:BB:66:D9:92:3A:93:D9:5B:C2
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EB12744E6112CEB164FFB4900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/57c68bfb-1a2b-3764-b688-5408c1387dc5.roa
Signing time:             Mon 25 Jul 2022 17:39:07 +0000
ROA not before:           Mon 25 Jul 2022 17:39:07 +0000
ROA not after:            Tue 30 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        139.56.1.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b1:27:44:e6:11:2c:eb:16:4f:fb:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 25 17:39:07 2022 GMT
            Not After : Aug 30 04:00:00 2022 GMT
        Subject: CN=749fd3c6-e7c8-4f46-93e1-fdbe57ba02c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:be:f1:93:7e:a6:21:0a:6b:d6:1a:61:3c:fd:
                    c7:1c:b2:9d:11:32:68:d3:28:95:50:14:17:8a:ad:
                    61:70:f7:50:ce:17:3a:a2:5d:d0:dc:61:ac:fc:3a:
                    bf:ca:78:36:94:cd:96:9c:8c:b4:31:d8:ee:1c:4d:
                    48:dc:b8:84:1d:04:80:b4:61:1c:4f:48:b6:f8:47:
                    b1:a9:bf:ec:a8:c5:19:3a:4e:b6:51:77:4f:89:1a:
                    fd:dd:9f:65:77:26:c1:b3:6d:1b:39:ae:90:10:4a:
                    dd:07:bb:7f:a7:01:a7:5c:5f:98:29:8d:b2:29:66:
                    aa:c7:9a:80:d4:35:33:6d:1f:ae:f0:6a:a7:7d:be:
                    08:89:6f:d3:ec:47:df:96:3c:1d:a0:3f:8f:35:b4:
                    e1:44:61:eb:c0:36:df:a1:fb:ef:74:88:53:0b:d4:
                    2e:93:24:27:e5:e4:a1:07:d1:b9:95:e6:c5:c1:6e:
                    6e:0d:79:d5:9d:8e:d9:67:b9:df:92:04:e0:6b:08:
                    1c:82:03:fc:6a:df:0b:69:ef:45:fa:f3:24:c0:7e:
                    ec:03:47:22:fe:1c:07:af:c0:ac:1d:ee:49:dc:66:
                    1c:43:82:8d:aa:55:e7:5b:9e:f7:94:6e:47:94:52:
                    34:4e:1e:3b:8c:0e:ae:8b:d4:9e:4c:e1:94:60:44:
                    cc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:EA:EF:74:26:BA:81:20:65:AD:B3:BB:66:D9:92:3A:93:D9:5B:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/57c68bfb-1a2b-3764-b688-5408c1387dc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:8d:d0:25:5d:22:5d:55:7b:e4:be:b0:c0:cf:f9:bc:57:41:
         f5:61:17:7f:b0:63:bb:80:2d:ac:13:cb:9e:ca:7c:5c:b3:05:
         7e:fc:29:43:31:1b:af:77:28:9d:a8:3d:fe:05:d5:22:35:21:
         25:ac:1b:75:7b:50:c8:dd:e2:63:8f:d8:e0:07:b8:4a:4a:22:
         63:7e:5b:88:06:74:d2:e8:69:d4:d1:9c:24:4e:31:a6:3d:25:
         5a:17:64:bd:d9:36:a0:79:b0:97:a7:00:1b:bf:ff:ca:8b:4c:
         8f:04:91:da:af:65:a5:be:23:a4:c5:57:b3:a6:7e:19:91:d3:
         90:c1:2b:29:b4:e2:1f:1f:ab:5b:0b:5c:60:87:db:61:7f:6b:
         e4:1f:3f:aa:f7:97:89:e6:39:53:0e:12:bf:38:1f:aa:1c:ff:
         44:bf:1c:2a:79:e9:4b:3d:46:93:c7:87:4a:cc:bb:98:79:a8:
         67:68:6e:1c:ac:ab:e8:3d:d2:7e:88:83:cf:36:7e:b1:a0:96:
         c5:e3:45:d1:26:db:67:d4:34:fd:3f:d6:85:b1:84:14:e9:13:
         26:fc:cb:87:c9:e3:a9:7e:46:2f:9f:e7:64:f5:c7:5f:64:49:
         6e:a6:1c:08:33:3e:1a:16:cd:34:0c:23:01:1f:16:8a:98:56:
         d4:71:9e:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD6xJ0TmESzrFk/7SQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcyNTE3MzkwN1oXDTIyMDgzMDA0MDAwMFowLzEtMCsGA1UEAxMk
NzQ5ZmQzYzYtZTdjOC00ZjQ2LTkzZTEtZmRiZTU3YmEwMmM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn77xk36mIQpr1hphPP3HHLKdETJo0yiVUBQX
iq1hcPdQzhc6ol3Q3GGs/Dq/yng2lM2WnIy0MdjuHE1I3LiEHQSAtGEcT0i2+Eex
qb/sqMUZOk62UXdPiRr93Z9ldybBs20bOa6QEErdB7t/pwGnXF+YKY2yKWaqx5qA
1DUzbR+u8Gqnfb4IiW/T7EffljwdoD+PNbThRGHrwDbfofvvdIhTC9QukyQn5eSh
B9G5lebFwW5uDXnVnY7ZZ7nfkgTgawgcggP8at8Lae9F+vMkwH7sA0ci/hwHr8Cs
He5J3GYcQ4KNqlXnW573lG5HlFI0Th47jA6ui9SeTOGUYETMrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBXq73QmuoEgZa2zu2bZkjqT2VvCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNTdjNjhiZmItMWEyYi0z
NzY0LWI2ODgtNTQwOGMxMzg3ZGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAizgBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI+N0CVdIl1Ve+S+sMDP+bxXQfVhF3+wY7uALawTy57KfFyzBX78KUMx
G693KJ2oPf4F1SI1ISWsG3V7UMjd4mOP2OAHuEpKImN+W4gGdNLoadTRnCROMaY9
JVoXZL3ZNqB5sJenABu//8qLTI8EkdqvZaW+I6TFV7OmfhmR05DBKym04h8fq1sL
XGCH22F/a+QfP6r3l4nmOVMOEr84H6oc/0S/HCp56Us9RpPHh0rMu5h5qGdobhys
q+g90n6Ig882frGglsXjRdEm22fUNP0/1oWxhBTpEyb8y4fJ46l+Ri+f52T1x19k
SW6mHAgzPhoWzTQMIwEfFoqYVtRxnrk=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:17 2025 by rpki-client