Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d119fd1-388e-3e95-a23b-94b9926eeb7e.roa
File:                     7d119fd1-388e-3e95-a23b-94b9926eeb7e.roa (raw, json)
Hash identifier:          v5Ejx90+KHNuIbjxSaJl+FG7NgQrwZnkPdPci3F23NQ=
Subject key identifier:   D6:34:47:C7:A0:45:69:0D:DB:B1:77:25:74:80:89:B3:17:1E:F8:21
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DEDD1DCB039387A5452947980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d119fd1-388e-3e95-a23b-94b9926eeb7e.roa
Signing time:             Mon 16 May 2022 12:00:00 +0000
ROA not before:           Mon 16 May 2022 12:00:00 +0000
ROA not after:            Tue 21 Jun 2022 04:00:00 +0000
asID:                     22394
IP address blocks:        139.56.3.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ed:d1:dc:b0:39:38:7a:54:52:94:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 16 12:00:00 2022 GMT
            Not After : Jun 21 04:00:00 2022 GMT
        Subject: CN=d365b929-88f9-4eb8-9adc-c773d6c93c63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8a:6d:cf:25:37:e4:78:1b:12:eb:5b:99:43:
                    a7:59:1a:92:c2:ee:e3:83:e3:f5:a6:c7:1d:a4:c1:
                    98:35:17:96:16:e7:8f:d9:79:ce:39:fd:f0:a3:6b:
                    23:40:ec:23:30:49:0b:5e:18:46:b5:25:dc:90:99:
                    47:9d:23:aa:48:9b:36:ca:22:f8:28:1e:bd:6e:06:
                    64:d9:68:e3:a2:ff:dc:ac:f9:f9:a6:6a:13:54:64:
                    9a:b0:4b:59:50:70:81:0d:8d:50:64:80:b9:16:a6:
                    f4:89:88:56:b3:a3:20:9c:66:f8:7d:a9:05:84:df:
                    6c:7e:51:ef:a7:72:87:c9:40:d1:14:f7:d9:b8:58:
                    7b:f3:ad:b3:3e:24:f3:27:9a:ca:92:50:01:86:76:
                    c5:0f:f3:38:10:1f:94:f9:9a:1a:18:f1:3f:34:f8:
                    dc:ab:20:06:69:9d:c4:4b:39:83:bd:25:2e:03:15:
                    1e:9d:06:1b:ca:2b:9e:fa:1e:e6:4c:55:d1:df:22:
                    1b:34:6d:cb:8b:de:4d:42:31:aa:4e:28:c5:63:79:
                    f3:62:41:f4:21:9e:00:ae:0f:59:8e:2e:ba:70:e1:
                    ce:81:cc:81:76:51:26:da:fa:8d:64:e2:b0:da:2a:
                    d9:94:e1:5a:b7:63:40:fe:cf:4c:6b:54:27:5f:db:
                    f1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:34:47:C7:A0:45:69:0D:DB:B1:77:25:74:80:89:B3:17:1E:F8:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d119fd1-388e-3e95-a23b-94b9926eeb7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:b2:75:06:31:c1:61:28:f0:de:5a:f5:4e:13:43:9d:40:17:
         9a:85:47:61:62:cf:4a:54:84:62:81:cf:09:67:cc:44:25:70:
         ed:bf:fc:07:29:ef:1a:74:12:d7:c6:a3:a0:11:de:ea:45:9f:
         6d:6d:69:15:8b:ab:8a:bf:a0:28:48:f9:4a:87:8c:b9:86:7a:
         30:4a:22:4b:88:ae:66:7c:0b:1e:99:0b:72:3a:6f:da:14:3c:
         17:24:34:90:27:d5:d5:c1:d6:93:c3:be:bf:f1:82:2e:e1:72:
         69:c9:8d:0e:81:a6:ad:d7:1d:0d:f7:6e:8b:22:5f:e4:48:66:
         b1:e2:25:69:07:5a:5b:24:b0:a1:60:de:a1:fb:0d:8f:b3:a5:
         81:3e:af:38:fd:79:24:85:ae:ad:99:3b:d4:a8:f5:64:fc:13:
         5c:8a:ad:cf:49:05:34:29:fb:bc:44:6a:53:33:6f:a8:53:83:
         66:58:3e:12:d4:5d:60:a0:cd:bc:57:e4:0b:ce:83:23:4d:19:
         0b:3d:74:cb:6a:06:ac:1d:ff:fe:e1:80:b0:88:c3:65:19:de:
         58:e5:03:da:bf:59:08:3e:5e:61:7e:dc:e8:6e:75:79:11:e2:
         69:0c:09:50:67:ca:61:bc:4b:f2:21:63:9e:5c:2c:f7:3e:2d:
         17:07:c3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:16 2025 by rpki-client