Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7062a705-868f-3268-881b-045a564fa7f7.roa
File:                     7062a705-868f-3268-881b-045a564fa7f7.roa (raw, json)
Hash identifier:          dHNBs6x7Z00LrOIJmuBor3nYwvsfC/zalIcQFCiR1oU=
Subject key identifier:   75:AC:21:FC:D5:4B:03:A5:2D:F8:0C:DC:D7:22:02:EB:B3:25:A4:BE
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E933AC80B3123468395E0C000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7062a705-868f-3268-881b-045a564fa7f7.roa
Signing time:             Thu 14 Jul 2022 21:12:08 +0000
ROA not before:           Thu 14 Jul 2022 21:12:08 +0000
ROA not after:            Fri 19 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        104.255.56.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:93:3a:c8:0b:31:23:46:83:95:e0:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 14 21:12:08 2022 GMT
            Not After : Aug 19 04:00:00 2022 GMT
        Subject: CN=4aab1308-ba33-406f-b1aa-770d9085d124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:db:67:90:a6:b1:56:76:3f:93:95:cb:89:d4:
                    52:32:ef:64:26:55:f9:6d:8c:98:be:08:6c:c2:2e:
                    e5:b1:ab:ed:aa:d3:0a:dc:c7:ec:7d:d8:d4:58:b7:
                    7d:81:62:35:da:34:58:cf:ee:88:d1:4a:dd:7f:a4:
                    43:80:8d:7c:8b:97:01:86:aa:2d:6f:f3:01:76:45:
                    73:ba:6b:e0:11:57:95:43:7f:04:d0:d9:c2:e8:83:
                    74:fd:27:3d:41:93:e6:24:92:21:c2:7b:15:f2:dc:
                    ab:ad:6e:4e:19:b3:5c:31:f8:58:99:4e:4b:3f:3f:
                    23:26:c6:65:a4:7a:8f:05:7a:f3:19:cd:b1:2a:16:
                    41:cc:43:26:85:71:79:e9:47:ca:4c:58:0c:c9:05:
                    b1:21:ef:7a:17:40:20:be:cf:d6:a4:f7:44:e5:64:
                    3f:67:7d:4c:a0:9d:aa:68:16:a8:a4:bb:a9:2f:a8:
                    75:8d:b8:69:e9:a4:bd:00:be:59:01:00:61:2e:53:
                    d8:5f:09:fb:02:cf:b0:72:24:57:58:ef:d7:10:fa:
                    45:16:44:75:72:dc:47:19:ab:df:3d:c9:b3:1b:bc:
                    aa:b7:d2:b9:7a:bf:7c:dc:1a:ea:ba:8e:5e:35:81:
                    7f:c1:73:64:b4:d7:d5:e5:bf:ba:0a:0b:9d:ba:d6:
                    6a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AC:21:FC:D5:4B:03:A5:2D:F8:0C:DC:D7:22:02:EB:B3:25:A4:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7062a705-868f-3268-881b-045a564fa7f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:8f:b4:72:c0:84:f2:40:0b:ea:5c:03:40:f0:5b:94:1d:7c:
         21:f7:e1:7d:ee:0c:8d:a2:b4:4c:72:98:c7:24:87:2a:c6:9e:
         58:7b:fb:c3:4c:55:06:b3:fb:97:ca:2e:2f:cb:e2:33:27:16:
         55:50:69:a0:d8:13:a4:83:71:c2:59:81:b8:35:df:35:ad:36:
         ed:36:a8:30:f4:be:d1:66:c7:11:6e:53:19:76:51:19:d1:b3:
         e9:37:19:a8:d6:e0:aa:11:aa:ee:2a:bf:dc:03:e4:1f:f2:2f:
         cf:99:a5:0f:12:7a:82:89:01:62:c1:a8:f5:1b:b5:e4:30:b1:
         df:9d:5f:6b:df:6b:0d:a5:53:45:b6:d7:2a:04:ec:a7:9b:a6:
         ef:ab:51:f0:e7:40:e6:14:11:0b:06:65:ba:56:fd:d7:eb:4d:
         1e:7f:86:11:f8:1b:0d:ec:36:29:60:db:b7:64:58:bf:df:90:
         1a:13:fd:8c:f8:b9:3e:5b:56:38:4e:c1:37:8d:7e:33:cd:1a:
         7a:7c:d0:fd:54:b7:52:fe:06:e7:61:0d:fb:0b:b9:3d:de:e4:
         b3:5f:52:38:eb:a0:e7:dc:7b:4e:d4:60:60:bc:fd:91:91:b6:
         c8:83:d7:97:26:95:1c:ac:d5:fc:7e:f4:e4:c4:8a:22:b0:96:
         79:21:13:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:41 2025 by rpki-client