Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/651e7e5d-9924-3607-a644-5cd24d2a9e8e.roa
File:                     651e7e5d-9924-3607-a644-5cd24d2a9e8e.roa (raw, json)
Hash identifier:          XNzUrdFolLL5iwJie+dS36rKlJRLgzdtodTZZswO3HM=
Subject key identifier:   54:18:7D:0B:49:53:C1:CD:18:4E:D0:28:AB:11:BC:7E:D6:F8:45:C9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FE9DB53F932ADC9FD86B6BBE0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/651e7e5d-9924-3607-a644-5cd24d2a9e8e.roa
Signing time:             Mon 14 Nov 2022 12:00:00 +0000
ROA not before:           Mon 14 Nov 2022 12:00:00 +0000
ROA not after:            Tue 20 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        139.56.5.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:e9:db:53:f9:32:ad:c9:fd:86:b6:bb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 14 12:00:00 2022 GMT
            Not After : Dec 20 05:00:00 2022 GMT
        Subject: CN=a26a2905-cd37-4e69-b68b-e7bc30cefba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:98:57:c7:70:00:2c:26:6b:b9:3e:3e:06:58:
                    72:7d:de:b1:1f:1e:d4:2f:65:6c:ab:bd:b3:ba:9b:
                    5c:6a:83:d8:83:c5:da:d1:cd:b4:c5:d5:8f:40:35:
                    61:15:71:04:3b:05:26:80:a3:f3:dd:d7:d7:a2:02:
                    dd:6e:31:63:f9:c0:c6:f2:ef:00:45:46:55:9a:19:
                    b2:66:7f:df:a9:00:7d:dc:56:94:9c:26:dd:63:f3:
                    71:33:68:da:68:86:24:96:9d:58:2d:34:f1:41:0c:
                    0e:46:9b:a1:ce:2d:ea:9c:ae:b1:09:59:ad:5b:53:
                    83:de:eb:0b:b7:fe:c0:62:3d:70:ce:ee:7b:9c:5f:
                    93:a1:a5:78:0e:11:a4:3e:73:29:19:3e:1c:d3:55:
                    d7:36:6d:4a:fb:a2:b9:a9:3f:8e:a6:24:cc:bb:1c:
                    2b:52:0e:8a:bb:4b:4a:cb:70:f5:3b:63:a3:a7:76:
                    a1:48:32:5f:9f:c8:71:92:9d:b9:eb:bf:5e:11:64:
                    a1:2d:a1:78:36:82:45:63:cf:43:5c:1e:d8:11:fb:
                    54:ed:c8:cb:3c:97:1e:c9:34:04:6b:1e:d9:38:89:
                    0e:8e:ee:52:57:96:1e:79:af:43:e6:28:0e:03:c3:
                    0a:4b:19:9e:7c:14:b5:14:7a:6d:e1:52:a6:71:4a:
                    66:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:18:7D:0B:49:53:C1:CD:18:4E:D0:28:AB:11:BC:7E:D6:F8:45:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/651e7e5d-9924-3607-a644-5cd24d2a9e8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:4a:32:1b:ce:de:ee:01:07:3a:a5:ed:6a:48:35:4e:8f:c7:
         6e:24:a5:01:b8:08:e5:18:7f:44:a5:d3:c9:01:a9:62:6e:29:
         1c:4c:1c:5a:48:66:fb:38:c1:6d:e9:94:2f:83:a7:20:e9:07:
         40:54:6d:0f:30:ae:2e:81:96:90:3c:1d:16:9e:0e:e8:26:7a:
         60:bd:9c:c5:45:5f:bc:7b:47:84:01:73:b2:c8:e8:1e:6e:46:
         7f:a5:1d:23:7f:10:8e:78:26:8b:c7:4b:2e:47:f4:7a:dc:e7:
         ec:6f:39:01:33:53:28:26:eb:07:08:fd:c4:4c:e7:ea:59:28:
         ee:44:1d:c0:af:3e:e4:2b:78:27:dc:df:d0:cd:4e:08:40:18:
         8b:d6:3c:1f:83:b3:fa:5f:37:63:ec:e8:09:0a:05:05:bb:bf:
         a2:f8:00:f7:dc:72:2f:66:56:16:ca:a9:56:d9:79:2c:e2:5e:
         70:58:65:c4:65:7f:54:8a:e7:73:ec:46:8d:04:53:9e:15:38:
         89:60:21:50:4b:f1:f8:aa:ba:fd:18:8a:21:72:96:49:87:2b:
         59:c9:68:5b:6a:d8:6f:ec:34:91:06:63:07:cd:5e:ac:06:13:
         13:c7:de:09:b8:3e:a0:16:64:a1:c5:8e:15:a9:86:0c:c4:a9:
         62:11:32:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:44 2025 by rpki-client