Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/63cbb34d-9901-3d6c-a984-b273d6ad3db3.roa
File:                     63cbb34d-9901-3d6c-a984-b273d6ad3db3.roa (raw, json)
Hash identifier:          y7d9v3Rzvsc0zUsVbptVcO0O/LYiyDebIYeskcg+WGg=
Subject key identifier:   15:06:9E:D6:2B:3B:02:79:5C:62:A8:C0:BA:FA:1B:D3:45:F0:5D:C0
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584051969700E2090E36427401C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/63cbb34d-9901-3d6c-a984-b273d6ad3db3.roa
Signing time:             Wed 21 Dec 2022 22:15:08 +0000
ROA not before:           Wed 21 Dec 2022 22:15:08 +0000
ROA not after:            Thu 26 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        56.56.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:51:96:97:00:e2:09:0e:36:42:74:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 21 22:15:08 2022 GMT
            Not After : Jan 26 05:00:00 2023 GMT
        Subject: CN=456b9502-cb0d-4020-bea4-da51984b2b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fe:e4:aa:99:0f:d6:de:5c:6d:85:10:d0:8e:
                    21:b3:e0:0c:18:89:82:40:c4:63:f0:37:97:39:6a:
                    ae:45:1a:30:b0:6f:f7:42:31:4d:fc:9d:e3:3e:29:
                    35:35:ee:bd:03:21:5f:6b:5b:f2:2e:cb:c8:2e:34:
                    e1:44:87:c3:ce:1c:21:77:8f:2f:9b:1e:b7:1e:68:
                    16:f5:e0:80:fe:ce:81:f3:b0:48:14:7c:ab:c3:19:
                    46:3d:16:1a:cc:08:fd:e8:17:5f:35:98:69:3b:11:
                    a0:00:8f:cb:ba:91:ae:6b:28:09:a8:44:ed:62:55:
                    7a:a0:63:e4:5a:bf:fc:a8:62:ce:e2:f5:e8:c6:e9:
                    88:77:fb:80:93:1b:56:d8:14:9e:49:c2:c5:4b:1b:
                    49:2c:65:e8:e5:97:fe:3e:e8:00:c2:31:dd:71:f1:
                    83:f6:bb:fa:c5:61:bf:bf:85:2e:b2:7b:7b:14:66:
                    78:2b:ba:cc:2e:ac:e5:cc:5d:f8:51:9f:c9:ce:34:
                    d0:57:85:50:91:f4:ba:d4:d8:2a:66:ae:da:cc:d6:
                    5a:a9:01:7d:a3:8c:4c:fa:6c:12:95:d6:45:2a:bc:
                    4e:4c:7c:e4:85:61:45:df:16:ae:c0:70:15:d3:7f:
                    9c:c6:9c:36:34:44:43:aa:a9:2a:b3:36:5b:ed:b3:
                    54:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:06:9E:D6:2B:3B:02:79:5C:62:A8:C0:BA:FA:1B:D3:45:F0:5D:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/63cbb34d-9901-3d6c-a984-b273d6ad3db3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.56.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:07:06:fb:9e:57:f9:d0:1b:e7:3c:c2:87:d5:a7:d4:b3:22:
         91:cc:34:0b:6b:9c:38:f5:cc:e7:a9:9e:cc:2b:fb:33:07:33:
         21:84:78:44:b6:ef:ea:aa:db:40:d2:96:ab:5e:ad:99:96:1b:
         09:29:8c:20:d9:1e:eb:93:aa:4f:f5:de:9a:13:51:fa:d9:14:
         88:43:4a:5a:6e:e4:5c:27:5b:2a:57:6a:35:50:6a:14:a1:db:
         a5:d1:a4:db:f1:08:23:6f:db:e0:a1:c8:95:e8:1e:3b:47:ae:
         0b:b7:41:22:9d:f2:e7:35:88:1e:3f:a2:d8:d6:75:3d:d1:32:
         30:f0:15:9d:d2:12:0e:aa:e5:92:52:1c:12:a5:98:96:6c:18:
         9f:e4:53:91:e7:5d:03:3c:8b:e1:0a:d6:3c:ef:8c:3c:b1:45:
         8f:35:7b:21:2e:36:37:62:1f:ec:5d:26:f1:53:57:3b:ef:17:
         58:9c:d1:e0:71:1e:c2:3a:7b:d5:e2:50:17:83:45:c2:9a:06:
         cf:52:34:fa:fc:9d:be:8e:f2:c7:4c:a3:2f:8b:a5:62:40:77:
         79:de:90:86:0e:e0:22:b8:4b:58:8c:3f:a1:cc:96:41:f8:cc:
         68:56:19:d6:2a:01:44:aa:56:88:7e:d2:d6:c3:88:8d:4e:e0:
         43:0f:b6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:29 2025 by rpki-client