Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7e8766dd-6ef1-387c-b17d-2af5e798d6fe.roa
File:                     7e8766dd-6ef1-387c-b17d-2af5e798d6fe.roa (raw, json)
Hash identifier:          acQFsoD32jY2/02ZkX8ramyCgbZLC7qDA1BFHrLrG3s=
Subject key identifier:   E6:DF:3D:37:B8:4D:FB:81:8F:9B:88:4D:60:29:AE:AE:CE:05:E4:12
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CDBCB3354EA1B7E2719B4E700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7e8766dd-6ef1-387c-b17d-2af5e798d6fe.roa
Signing time:             Tue 08 Feb 2022 05:00:00 +0000
ROA not before:           Tue 08 Feb 2022 05:00:00 +0000
ROA not after:            Tue 15 Mar 2022 04:00:00 +0000
asID:                     22394
IP address blocks:        139.56.1.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:db:cb:33:54:ea:1b:7e:27:19:b4:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  8 05:00:00 2022 GMT
            Not After : Mar 15 04:00:00 2022 GMT
        Subject: CN=713c097a-4ba2-40fa-8bf1-7b1be1920579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3f:25:5c:8b:38:a9:d6:84:d7:76:02:20:68:
                    f1:82:f3:07:d1:e6:c1:3d:cf:cb:2d:35:02:95:34:
                    c2:f2:c8:a4:8f:5e:1c:48:71:5d:9d:9d:d1:9c:de:
                    2c:be:15:c5:99:51:06:ee:c9:94:c9:3a:2d:b0:54:
                    63:37:48:81:af:64:78:8d:c6:8b:4f:1f:cf:ff:ed:
                    47:df:e8:74:59:7b:5b:b2:38:7c:dc:1c:43:44:7f:
                    32:9a:3b:75:63:db:4c:87:7b:46:d1:13:c1:6e:75:
                    04:cd:99:a6:7e:7c:5a:34:1d:ff:a7:31:61:22:55:
                    f1:97:9c:ed:1b:d2:ef:c5:5d:2b:a9:fd:78:39:cd:
                    d3:fd:cb:b1:23:05:74:e7:95:0c:94:65:46:4c:18:
                    b3:29:71:27:40:00:59:c4:00:43:59:64:62:4d:37:
                    23:29:be:db:ac:e7:ab:f4:00:e8:c9:e7:d5:eb:71:
                    18:be:0b:e3:c5:f2:24:3a:85:ec:58:33:c4:20:61:
                    3f:03:87:63:4b:52:2b:cf:ad:18:16:7b:4a:04:6b:
                    5b:56:f0:a1:d8:4a:4c:04:83:f2:dd:97:1d:fe:72:
                    45:c0:79:69:54:12:2b:45:c5:7c:43:b3:a6:3f:6d:
                    02:88:4a:00:20:7a:87:a6:6f:67:39:ec:48:fc:e6:
                    dc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:DF:3D:37:B8:4D:FB:81:8F:9B:88:4D:60:29:AE:AE:CE:05:E4:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7e8766dd-6ef1-387c-b17d-2af5e798d6fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:eb:e1:ce:2c:b8:50:d0:6f:82:07:03:f9:5c:46:b7:cb:43:
         f0:7e:85:05:c5:b3:14:c8:5d:42:fe:8f:75:a0:b2:c2:39:c7:
         ed:cb:1b:e8:c6:80:f2:bb:f4:a5:58:bd:0e:fc:1d:b4:3a:fd:
         1c:4b:c2:0c:34:db:d7:6e:67:35:72:e3:77:7f:53:41:49:75:
         a0:ae:d1:67:cd:a9:73:63:dd:19:f8:d9:36:72:c0:b5:7f:a6:
         29:9d:11:e8:6c:93:1b:13:dd:6d:8f:6b:f7:c6:bb:74:4f:71:
         c1:67:2f:a9:01:4b:f0:0e:e9:cc:d6:a4:3b:f9:39:19:e5:af:
         7c:fc:f0:2b:3e:77:95:4f:4f:09:57:91:8d:0b:4b:63:ce:32:
         2b:aa:1c:79:b9:14:02:82:4b:69:b5:f6:97:30:96:03:ef:33:
         a3:c5:db:63:1f:7b:b4:0c:1f:a1:01:a4:cf:cf:24:7f:ef:2a:
         d6:0a:ed:20:e9:6d:5a:3a:8d:7a:35:b9:fb:3a:3c:8d:d2:a3:
         38:f4:ce:16:c8:a8:41:a5:98:f0:7a:da:3e:c1:d5:43:b5:59:
         da:49:62:65:9b:3c:c2:90:5c:ee:da:dc:cb:11:98:8c:e5:1a:
         cc:2f:95:98:d5:ce:29:03:00:62:56:ce:80:96:da:77:7e:57:
         af:54:31:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:49 2025 by rpki-client