Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6724b3cd-01bb-34f0-9a6a-8709598c9d61.roa
File:                     6724b3cd-01bb-34f0-9a6a-8709598c9d61.roa (raw, json)
Hash identifier:          CJv9wE0zNPgd0A6ZiefhqqggcI13FvOTw4Y6xXOK+Cs=
Subject key identifier:   3A:93:50:B6:2D:5D:AA:AC:FE:6A:67:8E:CD:B2:EF:B7:D9:72:D7:17
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DC86494F096B25815268A2B08
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6724b3cd-01bb-34f0-9a6a-8709598c9d61.roa
Signing time:             Mon 02 May 2022 12:00:00 +0000
ROA not before:           Mon 02 May 2022 12:00:00 +0000
ROA not after:            Tue 07 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        56.67.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:c8:64:94:f0:96:b2:58:15:26:8a:2b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  2 12:00:00 2022 GMT
            Not After : Jun  7 04:00:00 2022 GMT
        Subject: CN=0963ec64-fe20-43ba-9d36-3e89c0e02f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:18:58:7f:ec:3d:93:62:00:6e:03:70:be:75:
                    77:14:68:b7:6d:a1:f6:92:f8:65:6a:57:dc:5e:9e:
                    00:09:08:24:cf:55:40:f3:97:23:35:96:67:b8:07:
                    79:f9:e0:09:59:c7:d3:d0:26:04:9d:f5:6c:4a:27:
                    ae:ab:92:da:3a:ac:42:43:72:d3:db:e1:64:a8:c9:
                    98:4c:a2:5c:cd:a4:fc:58:ba:61:81:15:df:80:be:
                    da:f4:c1:b9:39:e7:88:7d:a1:a8:a3:8f:a1:f6:85:
                    91:e5:f6:8d:8b:fe:62:83:40:55:fd:1e:27:23:b4:
                    d4:60:da:be:ef:ff:98:3d:5e:f8:96:9c:3b:74:e2:
                    da:ad:0a:dd:41:9e:96:25:ea:ff:ce:73:6b:3f:a3:
                    bf:68:3f:3e:17:37:98:41:b8:2d:34:ab:d4:4d:2e:
                    6f:07:8d:4c:46:91:a0:98:5d:82:7e:2d:d2:84:3c:
                    32:c3:6d:d1:66:c1:7a:ec:e3:54:1e:02:81:57:6c:
                    e3:66:d1:d6:1b:a3:ec:04:66:55:61:7e:f2:77:3d:
                    4d:fc:58:0b:b5:dc:c7:cb:5c:b5:41:4e:67:7d:5c:
                    39:a4:e1:e8:49:e4:cb:4a:05:b2:87:1d:71:ea:cd:
                    0b:61:a9:2f:ba:c8:a9:cf:82:b8:6a:ea:2d:46:c1:
                    2b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:93:50:B6:2D:5D:AA:AC:FE:6A:67:8E:CD:B2:EF:B7:D9:72:D7:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6724b3cd-01bb-34f0-9a6a-8709598c9d61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.67.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:13:73:e3:5e:71:33:37:63:56:ce:b4:c3:3f:4f:7a:ae:30:
         43:be:ec:9c:6d:10:53:ff:1c:fd:ac:58:d2:1f:ea:30:62:d7:
         9c:78:62:ca:92:bf:39:0c:6c:64:97:33:9f:dd:61:29:e6:53:
         da:28:56:3f:6c:ea:a5:6f:6e:a4:0e:f6:7a:4e:7c:76:73:eb:
         d7:c8:d9:7c:13:c9:a9:76:94:03:cc:14:27:0b:99:33:27:dc:
         ef:04:79:22:14:1a:02:21:7d:31:3c:c9:29:ae:4b:0c:c9:83:
         6e:da:48:ce:72:72:a9:fa:9c:76:3d:57:5e:ca:b6:fc:a6:c2:
         1e:9b:5b:4f:67:f9:be:cf:c6:c2:77:70:2e:a9:33:da:0d:fd:
         f1:25:74:32:e6:31:4c:de:1e:0e:a6:9f:72:e0:25:5d:46:26:
         e8:32:39:79:aa:b9:a2:b5:4d:e7:17:6e:40:62:4b:da:58:38:
         65:50:b5:71:13:d0:dd:57:28:db:87:ba:77:a4:4d:72:24:b4:
         93:f9:ab:18:f1:4a:3e:0c:d4:53:dc:71:e6:1f:93:7a:fb:1e:
         c4:5d:ce:a0:f3:78:89:91:c2:cb:20:2d:52:a3:c5:f4:b1:85:
         37:b3:fe:18:0c:0f:01:20:d2:fe:cc:8b:13:17:3d:23:08:31:
         7e:b0:1a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:12:38 2025 by rpki-client