Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8110b25b-8761-304c-a5c9-4002c63d930e.roa
File:                     8110b25b-8761-304c-a5c9-4002c63d930e.roa (raw, json)
Hash identifier:          eNr58soaJxJU7qL1ejnDAJusWLJ50EwMfxjwmCLmlco=
Subject key identifier:   3C:1A:7A:6E:60:FE:BA:F3:A9:0A:F5:8C:1B:E9:B2:B2:D1:D2:EF:EE
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840C3AB8FF30AF8EC547E2CBB00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8110b25b-8761-304c-a5c9-4002c63d930e.roa
Signing time:             Tue 31 Jan 2023 12:00:00 +0000
ROA not before:           Tue 31 Jan 2023 12:00:00 +0000
ROA not after:            Wed 08 Mar 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        56.48.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c3:ab:8f:f3:0a:f8:ec:54:7e:2c:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 31 12:00:00 2023 GMT
            Not After : Mar  8 05:00:00 2023 GMT
        Subject: CN=d3761c4c-9e3f-486a-9485-043f8e5c045f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:65:46:be:40:6b:64:cd:8d:59:17:19:1e:83:
                    6b:c4:f0:80:a8:27:ca:2c:eb:8b:e6:dc:74:50:f5:
                    1f:dc:8f:dd:39:b4:bc:81:75:22:15:12:5d:ef:2c:
                    87:d4:9b:1a:74:92:ea:d6:53:b5:e0:cf:9f:56:06:
                    0d:7c:07:6b:13:9c:dc:23:bf:f2:a8:40:fe:21:ea:
                    ed:bb:6b:57:b4:dc:d9:9b:33:19:c9:bb:f2:0a:4f:
                    c9:17:64:db:21:0e:85:dd:0b:9d:2c:a0:97:17:95:
                    fa:ea:fb:9e:d8:46:78:36:f1:5f:e6:6c:c9:99:30:
                    64:5f:c1:1d:54:63:00:41:bb:08:cb:2e:83:96:76:
                    80:68:43:58:81:20:56:b2:25:67:be:e4:ef:c7:65:
                    c9:94:4d:92:18:c3:3c:4a:f3:0f:32:c9:f6:64:e9:
                    2d:7d:e7:04:fa:fa:ab:ce:87:98:a9:a6:38:21:24:
                    19:95:4e:c4:78:75:ce:13:d9:ba:ff:b6:85:30:40:
                    c8:16:49:c2:84:21:2a:6b:a8:fa:19:97:db:26:f2:
                    d5:16:f5:74:7d:b2:06:78:9d:26:81:95:af:50:b3:
                    69:8f:a3:11:17:4d:69:c0:c4:b1:f1:de:7f:53:85:
                    eb:e8:22:f8:2e:d1:1a:2e:46:b5:94:79:0a:31:df:
                    b2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1A:7A:6E:60:FE:BA:F3:A9:0A:F5:8C:1B:E9:B2:B2:D1:D2:EF:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8110b25b-8761-304c-a5c9-4002c63d930e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.48.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:3b:84:84:da:91:4e:51:e0:51:ae:6e:5e:54:bf:b3:ea:0c:
         e0:9a:e6:de:24:64:b6:23:a4:5a:d5:f7:49:cb:a1:a0:36:b6:
         da:e3:3a:4e:f1:7a:4b:df:23:14:2c:49:35:67:56:dc:86:5d:
         49:d6:c5:39:a9:9d:9f:bd:b0:2b:b9:48:65:49:49:f5:05:98:
         5e:04:6c:f7:16:9c:f4:05:f0:7c:56:51:cf:ef:af:ea:14:16:
         5f:67:a4:8f:48:36:a0:83:4e:9e:4f:c1:63:7b:01:4c:7e:00:
         70:19:93:12:31:ed:8a:20:33:9c:58:2d:a7:dd:35:83:4d:5c:
         95:42:c4:49:19:77:30:be:e0:92:78:d3:b2:96:29:f0:9e:20:
         19:a1:a6:0c:6d:20:53:f5:1a:0e:eb:a2:27:9d:9f:48:61:20:
         4e:34:f4:55:eb:81:b2:4a:69:fc:c8:99:3f:f2:0a:7d:2c:44:
         7b:8a:81:b6:7f:c1:f6:0d:eb:b4:02:c5:b8:26:ff:15:0d:de:
         b9:ac:9c:97:25:d0:35:af:7e:e3:a1:ff:ed:57:6c:55:7c:78:
         be:13:75:79:59:03:ec:52:a5:12:56:fd:7c:a1:43:e9:3a:f1:
         81:27:06:55:c1:ac:59:70:9d:a8:ef:e4:f1:a4:3b:de:36:cd:
         a7:d6:97:f8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEDDq4/zCvjsVH4suwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEzMTEyMDAwMFoXDTIzMDMwODA1MDAwMFowLzEtMCsGA1UEAxMk
ZDM3NjFjNGMtOWUzZi00ODZhLTk0ODUtMDQzZjhlNWMwNDVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmVGvkBrZM2NWRcZHoNrxPCAqCfKLOuL5tx0
UPUf3I/dObS8gXUiFRJd7yyH1JsadJLq1lO14M+fVgYNfAdrE5zcI7/yqED+Iert
u2tXtNzZmzMZybvyCk/JF2TbIQ6F3QudLKCXF5X66vue2EZ4NvFf5mzJmTBkX8Ed
VGMAQbsIyy6DlnaAaENYgSBWsiVnvuTvx2XJlE2SGMM8SvMPMsn2ZOktfecE+vqr
zoeYqaY4ISQZlU7EeHXOE9m6/7aFMEDIFknChCEqa6j6GZfbJvLVFvV0fbIGeJ0m
gZWvULNpj6MRF01pwMSx8d5/U4Xr6CL4LtEaLka1lHkKMd+yfQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDwaem5g/rrzqQr1jBvpsrLR0u/uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvODExMGIyNWItODc2MS0z
MDRjLWE1YzktNDAwMmM2M2Q5MzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAODAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAFzuEhNqRTlHgUa5uXlS/s+oM4Jrm3iRktiOkWtX3ScuhoDa22uM6TvF6
S98jFCxJNWdW3IZdSdbFOamdn72wK7lIZUlJ9QWYXgRs9xac9AXwfFZRz++v6hQW
X2ekj0g2oINOnk/BY3sBTH4AcBmTEjHtiiAznFgtp901g01clULESRl3ML7gknjT
spYp8J4gGaGmDG0gU/UaDuuiJ52fSGEgTjT0VeuBskpp/MiZP/IKfSxEe4qBtn/B
9g3rtALFuCb/FQ3euayclyXQNa9+46H/7VdsVXx4vhN1eVkD7FKlElb9fKFD6Trx
gScGVcGsWXCdqO/k8aQ73jbNp9aX+A==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:59 2025 by rpki-client