Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/743bfcd5-7615-3941-83a9-b6c5ae9e1685.roa
File:                     743bfcd5-7615-3941-83a9-b6c5ae9e1685.roa (raw, json)
Hash identifier:          v6xMICun58sq4Sdq973Hc2dr1JlgdyRfiwQJVHXoppc=
Subject key identifier:   B2:7B:C9:B1:C3:FD:22:03:47:62:E8:63:52:80:5F:2F:D8:E7:CC:6B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F3DFDC4DF62B33D89E84302E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/743bfcd5-7615-3941-83a9-b6c5ae9e1685.roa
Signing time:             Tue 13 Sep 2022 12:00:00 +0000
ROA not before:           Tue 13 Sep 2022 12:00:00 +0000
ROA not after:            Wed 19 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        56.109.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:3d:fd:c4:df:62:b3:3d:89:e8:43:02:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 13 12:00:00 2022 GMT
            Not After : Oct 19 04:00:00 2022 GMT
        Subject: CN=da7be795-bf95-4dd3-93d0-0430405f6553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1a:f9:14:20:6e:fe:0d:85:ae:73:9d:2e:82:
                    29:7b:2a:b0:ee:b0:15:af:9e:a6:31:54:05:9f:3d:
                    31:1e:bc:cd:90:ee:20:39:f5:84:08:3b:9f:84:20:
                    ea:14:e4:69:68:9e:37:57:d2:97:0f:04:65:c5:6c:
                    1f:b4:1d:6e:cd:90:16:5b:a9:f3:0d:a0:8e:4d:33:
                    04:1c:68:e1:be:80:96:a8:cc:3e:a9:14:7f:e7:b6:
                    34:bd:be:fe:30:ea:47:5f:97:cc:ca:21:2d:cf:fa:
                    ff:c8:28:7a:a5:d8:f5:96:34:59:8d:96:fe:e5:be:
                    a6:6a:0e:ce:2e:e0:96:f8:15:69:1a:8c:0e:c1:5d:
                    9e:b4:91:48:e9:fa:0f:bc:a5:69:e7:a5:57:29:db:
                    c1:ff:05:6c:ca:8d:84:4a:65:9b:dd:bf:40:4f:be:
                    6e:71:e7:bb:53:93:7f:75:c9:b1:a3:87:90:b9:f5:
                    3e:a3:4a:7b:f9:2e:59:77:96:4a:39:3a:bf:1c:59:
                    38:e2:90:47:86:ec:1b:a3:51:c2:21:7e:d2:45:59:
                    6c:7e:99:1c:02:46:72:b9:fd:1d:7c:1b:ac:59:ff:
                    d2:d3:e5:15:e7:c3:4f:75:e1:b9:68:07:4d:12:9d:
                    00:f7:8d:ea:fb:a8:31:58:56:be:39:9a:ac:50:ed:
                    cd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7B:C9:B1:C3:FD:22:03:47:62:E8:63:52:80:5F:2F:D8:E7:CC:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/743bfcd5-7615-3941-83a9-b6c5ae9e1685.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.109.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:f1:2a:af:93:e7:66:ad:09:4e:e6:f7:b1:06:10:0a:2b:b0:
         1a:c6:39:61:92:5a:75:eb:c3:86:49:68:8a:21:13:6d:05:df:
         d5:32:82:0a:ac:83:94:13:cb:69:03:45:1d:28:36:e4:37:ed:
         27:36:78:ac:07:5f:04:d4:ce:9e:ca:8b:0c:4f:c1:ca:8f:34:
         37:c3:f6:a7:4b:b2:dc:38:c7:dd:01:04:14:c1:2d:ee:79:b9:
         b9:26:b3:fe:86:c3:0c:7b:cb:49:f6:bc:e9:6a:59:c5:a9:4e:
         eb:4a:fe:86:0c:36:fc:1f:b8:a5:55:b2:38:d6:81:f2:88:30:
         8b:fa:ec:a2:8e:ee:63:25:dd:16:c1:ab:9c:37:c0:01:48:19:
         3b:f6:f7:0b:4d:cc:fa:a5:be:45:51:9a:9d:87:7d:39:a0:c5:
         e1:40:64:5c:c4:64:73:10:57:eb:b4:39:36:fb:45:98:15:5c:
         32:31:2a:c0:3d:09:4b:8e:70:15:38:93:4b:1e:41:10:c0:67:
         fd:fd:47:43:4d:ef:c8:d7:c9:23:31:fc:4c:67:57:7e:42:65:
         f8:05:b3:4e:04:d6:39:95:49:98:f6:49:7a:31:65:ae:97:a7:
         a0:9e:24:4f:51:dd:76:48:07:4c:bf:65:0e:20:ce:04:48:b4:
         ef:03:04:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:27:10 2025 by rpki-client