Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/66e557e2-4d97-3bb3-b7fb-46c428cc6dff.roa
File:                     66e557e2-4d97-3bb3-b7fb-46c428cc6dff.roa (raw, json)
Hash identifier:          wiel21aKLCQf4V/A2XYeTCPyLtS4F/uYtEnMD16OboA=
Subject key identifier:   91:1E:A1:D0:87:86:78:16:DB:8C:E4:CC:E1:43:E2:F1:E5:AA:56:0E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F28627D487BBED08DBEFDF590
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/66e557e2-4d97-3bb3-b7fb-46c428cc6dff.roa
Signing time:             Tue 06 Sep 2022 12:00:00 +0000
ROA not before:           Tue 06 Sep 2022 12:00:00 +0000
ROA not after:            Wed 12 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        56.67.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:28:62:7d:48:7b:be:d0:8d:be:fd:f5:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep  6 12:00:00 2022 GMT
            Not After : Oct 12 04:00:00 2022 GMT
        Subject: CN=d10e4789-c5de-4608-b295-82117ac12802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6e:0b:bf:18:82:2a:8c:73:4a:51:43:7d:46:
                    d8:f2:e9:9f:04:8d:6c:b4:49:76:ea:86:14:64:77:
                    cd:85:a9:71:8e:03:47:ec:da:75:d2:8e:84:af:32:
                    05:15:3a:41:6e:56:f4:bd:82:2b:51:d7:5f:15:db:
                    ce:80:de:d9:3f:e4:06:12:25:e1:43:a0:2b:c3:9b:
                    95:d6:76:d9:78:77:4e:f0:a0:0a:49:75:73:18:6a:
                    bc:63:9a:4b:5d:c2:cd:b9:7a:53:64:df:06:f3:e3:
                    49:fd:28:bd:22:92:aa:ab:61:9f:56:c2:79:5c:af:
                    da:c7:3f:38:29:ea:fd:9e:25:5d:ea:53:a6:a8:89:
                    60:4a:c6:78:b0:1a:15:d6:57:68:a2:9b:ad:7f:99:
                    ea:22:f9:fc:55:32:20:bf:20:a8:c7:01:a7:88:58:
                    84:5e:27:e0:93:c3:54:cf:be:e1:5c:17:a4:d5:12:
                    2b:29:45:94:6b:93:96:c4:91:61:44:20:93:ce:a0:
                    ba:59:4e:aa:39:a8:c4:5c:f2:ac:c2:4d:78:22:b5:
                    e8:63:46:62:9a:5c:1a:91:a2:09:99:ab:d7:18:fc:
                    60:de:4b:59:f8:46:87:33:92:4f:91:2c:4d:e3:8c:
                    94:01:c2:34:ec:a9:8b:95:83:45:42:44:0e:77:cb:
                    c8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:1E:A1:D0:87:86:78:16:DB:8C:E4:CC:E1:43:E2:F1:E5:AA:56:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/66e557e2-4d97-3bb3-b7fb-46c428cc6dff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.67.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:9e:c7:11:78:56:a8:55:20:ba:71:4b:5e:aa:e7:2d:35:88:
         c3:ee:53:80:7e:69:c1:14:91:3f:aa:b8:a5:db:31:8b:0a:7f:
         be:bd:29:b6:7d:82:06:11:11:7c:83:a4:d2:59:0f:8d:8c:45:
         f4:0b:db:54:b3:e7:ee:7d:33:ea:6f:12:03:1a:96:4b:a1:b9:
         b4:3b:d2:b0:14:bb:65:d0:7a:39:fd:6f:43:8b:47:0f:c4:ea:
         82:9e:c1:4b:8a:eb:2d:7e:33:34:e8:e7:bc:e8:8c:b9:d4:90:
         f3:fb:c3:66:ec:00:b4:e2:bf:4b:a6:4f:ef:23:cc:16:8a:6f:
         3e:f9:c8:12:b2:57:75:c1:2b:8c:ab:9d:25:49:09:90:e9:af:
         75:2f:71:50:22:75:08:9f:07:b3:9d:1b:c3:1b:9b:d1:5b:dc:
         b4:76:bf:00:3c:1c:30:97:22:71:3e:2b:19:9a:b5:52:76:5d:
         e5:7d:31:8c:d1:c0:04:9e:6f:91:57:91:ca:62:e8:b6:9e:77:
         e0:be:7e:f8:b4:42:56:9c:c2:e5:ec:0c:48:ec:c6:b3:58:9d:
         04:6c:7a:07:d3:72:54:51:72:1a:5d:f3:ff:64:6f:80:33:e3:
         c3:10:ee:7c:14:f2:ee:ed:8b:5d:d1:85:dd:8c:71:83:1e:41:
         d7:5d:77:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:15:11 2025 by rpki-client