Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6fa47f92-05de-3208-b290-d4741e536b8e.roa
File:                     6fa47f92-05de-3208-b290-d4741e536b8e.roa (raw, json)
Hash identifier:          SlwDLyaOh973L2ZilQ99u4kg5DMVvw5APQ182LSow4E=
Subject key identifier:   AA:24:91:0E:01:E2:E3:BC:12:1A:9A:50:17:9E:F4:17:90:13:56:C3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840004E8C9ADF687404375F5240
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6fa47f92-05de-3208-b290-d4741e536b8e.roa
Signing time:             Tue 22 Nov 2022 12:00:00 +0000
ROA not before:           Tue 22 Nov 2022 12:00:00 +0000
ROA not after:            Wed 28 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        56.96.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:00:4e:8c:9a:df:68:74:04:37:5f:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 22 12:00:00 2022 GMT
            Not After : Dec 28 05:00:00 2022 GMT
        Subject: CN=d9e1e2e8-f531-4f42-bf52-b850a69bd08a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6a:da:19:24:c7:5b:47:72:38:b4:80:bb:df:
                    10:7b:a5:f5:13:b3:25:10:1e:51:a0:7a:b8:95:59:
                    a8:14:67:f4:26:ac:7c:d2:d9:f5:be:b7:7f:55:1b:
                    94:7f:1c:da:1f:b8:8a:47:7d:b1:ba:c8:cf:45:9f:
                    36:b6:48:81:74:c6:bf:0a:38:c9:ac:f7:35:37:39:
                    4c:a7:13:ea:e0:01:d7:59:f2:7a:57:25:40:d2:f7:
                    fa:c3:fd:f5:f3:8a:e8:71:03:5b:c0:8a:0b:c8:12:
                    c5:07:97:17:4a:e9:f1:5d:6a:20:33:a7:64:83:e6:
                    8f:74:e8:72:ef:15:4a:4e:e3:76:9c:24:c6:22:8f:
                    d4:2e:15:96:76:ac:a2:c1:dc:b4:f6:1c:a1:ea:52:
                    4f:7e:b2:45:10:e0:1a:09:b7:0d:10:85:88:de:4b:
                    e6:c5:be:f8:fc:58:e0:7e:7d:e3:fd:fb:c6:7c:27:
                    84:2f:7c:ee:80:2e:09:97:5c:04:f9:6a:da:db:f9:
                    53:ec:7d:0f:0b:8c:82:e8:12:0b:bd:dd:c8:26:e4:
                    1f:01:f0:ad:5e:2a:6e:42:88:5a:ee:86:ef:56:6a:
                    22:91:6f:bd:7c:71:82:f0:ff:e3:b9:ac:c0:0c:e5:
                    03:ba:1b:44:43:1a:22:8b:fa:09:39:94:ef:20:e8:
                    1a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:24:91:0E:01:E2:E3:BC:12:1A:9A:50:17:9E:F4:17:90:13:56:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6fa47f92-05de-3208-b290-d4741e536b8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.96.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:c8:24:14:01:84:35:43:63:64:b4:f0:13:b2:29:03:d5:26:
         34:37:d8:ed:dd:01:f6:0d:d4:3a:b6:27:10:92:66:41:c6:83:
         a0:36:6f:02:25:d1:16:6d:a5:72:1b:f3:03:ad:64:7c:a4:b6:
         04:a7:c2:17:d0:63:43:a6:cd:a2:6d:07:d3:cd:a0:ad:8c:80:
         43:e9:cb:48:eb:27:5a:d2:b8:02:0f:58:29:6e:5e:e9:7b:34:
         82:8b:4f:06:9a:1b:c3:bd:8d:5a:6d:25:fd:da:fb:d8:3e:5d:
         d7:05:77:61:4d:9b:03:ed:01:c1:29:fd:ca:5f:8e:7e:c6:5c:
         a4:f4:ea:6c:8c:d3:15:59:a6:3b:3f:e2:e4:b1:33:c9:cb:12:
         ff:44:45:6c:f5:12:c0:b4:d9:57:75:97:12:04:08:7e:e5:d5:
         8e:66:63:37:bc:9f:ea:6d:ea:62:1e:fa:39:1e:af:35:fe:89:
         f4:7b:50:f9:41:2a:73:ff:7a:80:83:1a:2a:65:76:e0:c0:ee:
         7c:a3:21:d4:e4:2f:42:5d:90:e6:0a:ea:a3:b7:34:a8:ce:3e:
         a2:29:aa:64:c4:4a:1e:e1:a8:42:0c:93:e4:56:b6:39:ee:68:
         e9:73:af:d6:9e:ab:88:44:25:fd:56:8e:64:ee:63:f2:ef:3f:
         6c:8c:b0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:22:26 2025 by rpki-client