Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7bb4319f-dcba-3c72-9ae3-d571237c7368.roa
File:                     7bb4319f-dcba-3c72-9ae3-d571237c7368.roa (raw, json)
Hash identifier:          jZ4l4FpBrNEzB456PRv3g+rePOvO9suhqlw94RkMuKg=
Subject key identifier:   BE:3F:BF:91:E2:23:E8:FC:E1:DE:D7:A9:01:FE:B9:C1:EA:BD:53:B6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840625DD6B162F1ED466BE65D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7bb4319f-dcba-3c72-9ae3-d571237c7368.roa
Signing time:             Tue 27 Dec 2022 12:00:00 +0000
ROA not before:           Tue 27 Dec 2022 12:00:00 +0000
ROA not after:            Wed 01 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        56.55.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:62:5d:d6:b1:62:f1:ed:46:6b:e6:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 27 12:00:00 2022 GMT
            Not After : Feb  1 05:00:00 2023 GMT
        Subject: CN=b771511a-dbd4-49df-b844-95606cccb663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:02:04:fa:bf:f6:67:0f:40:dc:9f:ba:7d:6a:
                    b1:1f:b2:40:9c:a6:2b:d4:74:a8:39:e6:46:c7:7d:
                    a5:0a:4d:f1:c6:d6:f0:7d:59:cf:10:2b:f1:bd:ba:
                    4c:27:6f:57:96:bd:5e:60:36:fb:0e:ff:c3:7c:2c:
                    0c:cc:b8:3b:09:84:52:53:63:62:87:54:4e:ac:98:
                    45:40:81:ce:c9:09:03:14:e8:f7:cb:eb:e7:cb:36:
                    5b:1d:c4:67:34:ab:d5:fd:c6:fe:da:80:62:fa:2c:
                    b2:41:e1:05:db:b4:59:97:75:da:dd:bd:3f:7c:9e:
                    81:90:b1:d3:96:3b:94:81:9d:ee:73:fd:ac:30:fa:
                    2f:2d:e4:fd:5c:3d:ae:2a:d6:67:9a:b7:61:00:9f:
                    f8:b8:97:71:bd:47:44:79:83:1d:00:47:d7:5a:60:
                    7f:26:6a:47:27:e1:00:b1:5b:54:26:25:d1:fe:43:
                    8b:f0:a9:27:4a:27:cf:e6:67:f2:e2:86:66:b2:7e:
                    73:f4:4c:97:70:5f:ee:03:95:0a:08:2b:c0:8e:4d:
                    41:28:64:3d:f0:e0:93:b6:3a:23:17:75:e5:00:13:
                    c3:0d:f5:ed:63:47:31:84:64:bc:03:d7:96:19:9b:
                    8c:6e:8e:35:10:76:85:17:f4:be:1c:5a:85:cf:43:
                    85:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3F:BF:91:E2:23:E8:FC:E1:DE:D7:A9:01:FE:B9:C1:EA:BD:53:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7bb4319f-dcba-3c72-9ae3-d571237c7368.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.55.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:08:69:b2:a1:75:9b:84:bc:a1:00:17:a5:2b:2a:60:7b:eb:
         f2:fc:9f:7b:66:3e:36:45:dc:72:01:a6:c9:2d:76:df:37:f4:
         fb:0d:0c:a3:a6:d7:a6:e5:e5:2d:1c:be:04:8c:26:39:e1:fb:
         df:28:8a:26:58:8a:95:87:51:9a:ba:d1:be:5d:71:d2:6b:0b:
         cc:d5:bd:a8:dd:6b:c2:a0:7a:fe:59:8a:ee:b5:b2:13:c1:f2:
         a8:24:1a:09:c3:c8:a5:c9:3a:53:4c:99:22:35:07:ee:b3:bb:
         89:bb:82:69:67:df:d9:03:59:35:62:4d:62:fa:fe:18:91:90:
         5f:46:fc:94:51:f2:7a:34:82:71:18:2a:2f:cd:8d:16:24:2d:
         5c:03:ec:7b:e0:6d:cf:b1:73:93:b3:8a:36:94:dd:d4:17:be:
         df:9f:6f:a0:c8:e3:55:f6:9c:4b:3e:e2:60:d4:ec:27:6d:5c:
         10:f2:ff:99:81:15:70:73:c0:0c:4a:7f:77:05:b0:df:4d:87:
         45:1c:d6:90:6c:ed:6e:46:eb:e0:9b:20:5d:14:77:64:29:7b:
         52:b9:a5:30:e6:10:21:1d:ae:cf:53:59:46:37:8d:58:71:2f:
         0f:66:05:22:31:96:7b:52:dc:49:62:be:68:0e:c4:6c:72:49:
         ab:62:c4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:24 2025 by rpki-client