Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/69cf752a-18e8-340e-82ba-ce92a4b991d9.roa
File:                     69cf752a-18e8-340e-82ba-ce92a4b991d9.roa (raw, json)
Hash identifier:          BAbx0EU+rODVyQQuQ3BOdiG79a5cFQ7+qCQn9UXzqaQ=
Subject key identifier:   BF:38:3A:11:53:EB:0E:D6:8E:19:8A:41:A5:05:58:F5:F9:35:12:FA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EEFCB61246F1FE68F0497F590
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/69cf752a-18e8-340e-82ba-ce92a4b991d9.roa
Signing time:             Tue 16 Aug 2022 12:00:00 +0000
ROA not before:           Tue 16 Aug 2022 12:00:00 +0000
ROA not after:            Wed 21 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        56.109.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:ef:cb:61:24:6f:1f:e6:8f:04:97:f5:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 16 12:00:00 2022 GMT
            Not After : Sep 21 04:00:00 2022 GMT
        Subject: CN=8b8f1bb5-6e31-4637-b00d-49e543798292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2e:23:2b:8c:1d:58:c1:e9:5c:d9:35:52:95:
                    67:3f:23:77:34:67:92:66:d2:3d:72:d4:73:f1:91:
                    ad:4a:05:fb:08:e7:b1:50:d6:08:e0:e2:a7:00:ea:
                    e8:da:c9:13:61:05:f6:3b:67:38:7a:68:a2:3e:71:
                    60:0c:e9:90:16:62:e8:00:2b:5e:0c:58:15:36:e1:
                    5a:3b:a6:0e:ee:4d:ed:dd:78:2f:a8:96:1f:9e:34:
                    dc:50:49:63:36:75:4c:18:80:ff:46:9d:b2:62:a8:
                    3e:3f:9f:78:16:cc:12:40:9c:95:af:92:fc:7f:10:
                    89:24:6b:6a:07:c8:3a:ef:4d:f3:8e:10:1f:07:83:
                    eb:03:95:56:5b:9c:37:fc:92:67:a1:d3:aa:09:55:
                    25:d1:6a:1a:3b:31:2d:62:0c:09:88:e1:3e:49:df:
                    b7:2b:5d:e9:ca:64:38:5b:39:9d:17:67:08:9a:8a:
                    f9:9d:dc:3b:13:51:bd:fe:26:0c:d0:a0:79:2a:b6:
                    81:84:cd:50:71:1e:50:b3:2d:d3:2d:88:b4:be:81:
                    a1:c3:12:f0:81:81:54:f3:54:2e:c3:2f:0a:05:e3:
                    3c:ca:e9:64:95:c5:4b:99:75:7b:e3:5d:ca:08:71:
                    3a:2a:78:9c:97:f2:a5:a1:3b:e4:58:e5:6b:90:cd:
                    cc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:38:3A:11:53:EB:0E:D6:8E:19:8A:41:A5:05:58:F5:F9:35:12:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/69cf752a-18e8-340e-82ba-ce92a4b991d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.109.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:90:60:69:93:09:15:c4:24:08:db:d9:4c:91:84:87:f4:58:
         9a:d1:d4:46:70:d5:da:25:2e:e1:0a:b7:1f:af:35:51:fa:84:
         6f:3a:7e:80:a7:cb:ad:64:2b:63:2c:02:bd:7d:b0:b8:77:9b:
         71:18:26:d4:86:82:d3:e7:ee:b1:86:ca:87:72:65:4a:22:00:
         a7:89:5a:f7:47:c9:05:24:24:2d:bf:b9:4d:2b:f8:a5:a2:56:
         46:76:5c:42:17:d4:df:7f:2b:67:84:be:35:60:26:95:d0:23:
         30:f7:70:77:69:bd:f6:da:86:52:d1:9f:88:a6:ec:fa:26:b9:
         85:87:6a:08:01:14:c8:d2:f4:1c:92:cd:b6:f1:41:5c:d5:13:
         d0:81:8f:cc:fb:04:e1:78:98:a1:80:3f:f0:62:58:36:05:57:
         be:13:c9:5f:db:9f:8a:28:45:18:02:06:1f:05:b3:ad:86:e4:
         c7:59:55:eb:9b:9b:45:de:37:12:dd:2b:c8:20:4f:b3:fa:2e:
         b0:ef:c3:12:b5:97:82:0d:b7:5c:ce:c1:54:58:b6:4b:36:31:
         37:c9:f6:25:a5:6a:41:9e:09:e6:32:4a:fe:2f:1c:64:4a:a0:
         ec:0d:e2:8d:4e:47:05:a8:f6:a0:c1:34:17:74:f4:c1:36:34:
         0b:be:fe:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:59:09 2025 by rpki-client