Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6ee18832-6ad7-3569-b0a3-22cb509a87b2.roa
File:                     6ee18832-6ad7-3569-b0a3-22cb509a87b2.roa (raw, json)
Hash identifier:          U2skWjFOmoR3bVssfhD18hXKtHYNWiTL7R7IH2tRlW8=
Subject key identifier:   7E:9B:52:8D:8E:32:EF:CC:00:43:3E:67:1E:E1:DE:89:5F:80:BD:A4
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840D4557F2D4296E96803B1E840
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6ee18832-6ad7-3569-b0a3-22cb509a87b2.roa
Signing time:             Mon 06 Feb 2023 12:00:00 +0000
ROA not before:           Mon 06 Feb 2023 12:00:00 +0000
ROA not after:            Tue 14 Mar 2023 04:00:00 +0000
asID:                     8987
IP address blocks:        114.56.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:d4:55:7f:2d:42:96:e9:68:03:b1:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  6 12:00:00 2023 GMT
            Not After : Mar 14 04:00:00 2023 GMT
        Subject: CN=6261ff41-ca01-4072-bc95-369da65d70c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cd:de:c9:69:dc:1d:e3:f3:1d:3a:7e:24:b2:
                    1c:01:8f:b1:88:b1:e6:62:17:03:c7:4f:f5:84:36:
                    11:c4:77:f1:2c:99:83:89:5a:1c:df:6f:22:4b:4b:
                    cc:ce:9c:34:08:5c:a4:23:4f:8f:b7:13:cd:77:c4:
                    36:b4:dc:fb:1d:7a:78:da:14:06:96:9b:5b:de:4a:
                    0f:7a:01:24:af:e7:0e:bd:90:35:99:76:de:81:eb:
                    b0:ee:3b:6f:3f:81:bb:d4:12:09:80:19:31:90:7a:
                    b7:70:7c:6e:6c:00:1b:3e:2f:04:8a:ab:f1:9d:3d:
                    dc:f1:81:a8:92:82:c5:01:d5:77:bb:a0:d5:7f:a4:
                    2f:bb:fa:98:80:af:53:de:77:64:0c:66:71:6d:17:
                    58:45:51:cc:48:20:20:3d:27:b7:bf:44:c2:2a:c6:
                    9f:9f:1d:cd:30:d0:23:79:4a:66:1b:71:97:83:08:
                    34:60:e1:32:72:13:79:1d:23:36:ca:6e:67:03:c7:
                    3e:4b:ba:b8:bd:74:b7:82:0b:4a:11:cb:2a:c6:5c:
                    95:91:91:15:04:16:f1:cc:d9:b4:78:e8:63:ae:75:
                    58:8a:86:f0:39:cb:92:ee:50:6c:e8:29:47:f9:4e:
                    7f:36:31:c0:fd:25:a7:a2:89:37:f1:cc:d0:b8:85:
                    65:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9B:52:8D:8E:32:EF:CC:00:43:3E:67:1E:E1:DE:89:5F:80:BD:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6ee18832-6ad7-3569-b0a3-22cb509a87b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.56.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:83:17:45:9b:00:a2:be:d6:18:44:43:d3:61:78:2a:c0:38:
         18:19:e4:f3:c2:08:df:dc:c2:24:a2:9c:d5:fc:37:65:85:30:
         23:bb:61:d5:43:60:61:d6:47:f0:b1:d3:8a:1f:41:e2:04:87:
         c4:5b:3a:41:7e:e1:70:64:09:81:20:d1:d2:dd:20:82:fb:c9:
         ea:ae:79:84:31:10:aa:e5:9c:2c:7b:f5:b4:08:cf:03:e3:97:
         74:35:bf:a0:73:5c:37:28:8f:09:dd:a3:0f:25:0c:ff:d1:8f:
         a7:f1:ce:31:26:c8:12:38:32:9c:2c:f3:e9:60:17:03:b7:6e:
         69:4b:b8:12:05:58:da:1c:16:36:85:0f:96:e2:65:5b:c5:d9:
         12:fb:15:1f:bf:4c:00:fb:23:d0:b1:ac:31:24:c0:cf:a0:eb:
         d3:42:26:9a:6f:ac:03:c9:7a:92:1c:da:67:fe:65:42:30:b3:
         07:7d:46:16:f2:fa:b4:05:18:a3:79:6e:61:21:c4:7a:5a:88:
         0c:d2:88:26:93:a5:2e:9c:a1:ef:3d:66:e5:85:76:5c:fc:75:
         ee:61:01:d8:ae:87:d0:7d:3f:5b:f7:d5:0b:9b:1f:97:73:1c:
         57:2f:3b:31:1f:6c:fe:44:5d:22:79:bd:54:33:f3:0c:4f:73:
         e3:a3:ae:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:25:08 2023 by rpki-client on console-fra.rpki-client.org