Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/585f4806-04d0-33c9-81a4-b3b5ce37b6a3.roa
File:                     585f4806-04d0-33c9-81a4-b3b5ce37b6a3.roa (raw, json)
Hash identifier:          vNGWtXC4FykkG8PJLqnn2U+gm++IggK2Fwb956Lzfz4=
Subject key identifier:   CA:08:E2:E1:2E:75:6D:92:3F:A6:D6:55:A1:10:DC:09:8A:9F:18:B6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840278986226E220BF3D7A24980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/585f4806-04d0-33c9-81a4-b3b5ce37b6a3.roa
Signing time:             Tue 06 Dec 2022 12:00:00 +0000
ROA not before:           Tue 06 Dec 2022 12:00:00 +0000
ROA not after:            Wed 11 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        56.98.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:27:89:86:22:6e:22:0b:f3:d7:a2:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec  6 12:00:00 2022 GMT
            Not After : Jan 11 05:00:00 2023 GMT
        Subject: CN=2561fe89-25f5-43f6-82ca-65e21876600d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9a:b3:09:02:eb:4e:80:54:a9:5f:50:0b:d5:
                    0d:b3:5a:71:f9:4c:1e:7d:d3:a4:6e:52:83:83:b1:
                    e7:64:b6:51:de:ae:8c:97:0b:09:79:7e:8f:61:da:
                    fb:60:80:73:05:4c:1a:f9:a3:f3:79:91:ff:df:a5:
                    bb:9d:e7:f5:87:bd:b0:3b:de:46:0f:f5:34:f0:07:
                    75:ed:a6:5a:fc:0a:ee:e9:45:dc:b7:83:4a:ec:ae:
                    c5:f1:32:f3:42:0d:b4:89:0d:92:59:7c:41:49:ce:
                    61:33:e9:70:66:a0:54:c8:51:32:6a:9b:fe:29:ff:
                    67:fa:57:e5:fb:6f:59:d0:db:26:c7:dd:45:e3:2b:
                    44:2d:3b:08:82:2d:10:88:f5:ab:90:d9:46:02:97:
                    46:59:8b:19:c2:36:4a:16:f2:82:06:31:54:ff:74:
                    79:46:41:de:da:be:13:96:88:c7:7c:7e:db:19:22:
                    31:47:1c:94:a8:8b:fb:f1:84:b2:f9:4f:24:86:c4:
                    68:44:aa:5d:84:2b:9c:a8:b9:17:0b:d5:02:6d:ca:
                    c1:ac:dc:1a:79:70:6c:22:81:5b:4c:bd:b6:0a:26:
                    4d:ed:51:dc:80:d9:18:ae:e5:61:b0:c2:e7:f6:bf:
                    36:ce:d6:33:f2:cd:fd:39:33:7c:6c:4c:14:ea:5d:
                    28:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:08:E2:E1:2E:75:6D:92:3F:A6:D6:55:A1:10:DC:09:8A:9F:18:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/585f4806-04d0-33c9-81a4-b3b5ce37b6a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.98.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:e4:59:84:52:cf:1d:e8:25:72:ed:ec:b3:62:b0:98:d2:ff:
         e7:93:7e:b6:56:0e:cf:1f:7e:cc:ca:41:f8:e2:c0:6a:b9:4a:
         0c:dd:64:94:9b:9c:e7:c3:65:95:92:c7:3c:d3:43:dd:db:b0:
         01:20:02:49:c7:c9:a5:5e:6e:6c:6e:0d:55:c5:4a:22:25:f4:
         9e:13:2c:f0:1b:00:15:67:dc:50:c9:84:16:99:c1:d1:78:fa:
         df:d4:37:ce:80:af:aa:20:ec:b8:c3:93:90:e1:b3:5a:8a:13:
         c7:fa:88:fa:39:d8:d2:9d:51:53:89:c2:5a:6d:68:07:39:14:
         8f:43:b9:89:8e:be:6e:37:df:99:d0:7f:13:a9:b6:05:8f:51:
         58:2b:7f:91:86:a9:b7:60:42:f6:8b:71:2b:8a:47:08:d0:76:
         59:1e:b4:16:3c:04:6a:ed:c6:e8:68:40:ba:80:f2:66:a2:d1:
         72:14:00:ea:a6:34:c0:4f:cb:ef:ae:73:0f:fd:85:1b:ea:01:
         aa:12:37:d5:8e:81:21:53:46:23:21:87:4d:91:9e:5f:1f:39:
         ae:5c:1f:19:ff:c8:fe:02:2a:c6:a8:1a:90:80:20:6a:f3:65:
         7e:35:53:73:fd:df:cf:1e:bb:55:ad:ab:e4:38:20:14:b3:05:
         f6:d2:ac:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:41 2025 by rpki-client