Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/86b4fe21-cee3-37de-ad3d-6d661b22cb42.roa
File:                     86b4fe21-cee3-37de-ad3d-6d661b22cb42.roa (raw, json)
Hash identifier:          7Nb8R6wtOjQ+AGh/jBMDkq0QsFkjhnknOXy4lYJKpWU=
Subject key identifier:   06:D8:2E:1F:85:12:AA:E6:F5:36:6B:03:EE:72:C0:F5:AE:C8:F6:B3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840C08F03D456BD566200BE0380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/86b4fe21-cee3-37de-ad3d-6d661b22cb42.roa
Signing time:             Mon 30 Jan 2023 22:42:07 +0000
ROA not before:           Mon 30 Jan 2023 22:42:07 +0000
ROA not after:            Tue 07 Mar 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        56.57.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c0:8f:03:d4:56:bd:56:62:00:be:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 30 22:42:07 2023 GMT
            Not After : Mar  7 05:00:00 2023 GMT
        Subject: CN=c93f79c9-f58f-4454-82fc-9de39588479c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:00:4e:ff:99:1a:f0:ab:39:22:dd:45:3b:fe:
                    72:44:f0:42:62:4c:44:f4:a3:a1:ba:ba:36:e8:c8:
                    27:43:55:1e:a4:89:9c:01:a4:8f:39:29:fb:22:c9:
                    e6:8d:3d:82:67:4a:f5:26:00:f9:74:59:a7:cb:ae:
                    83:bf:8a:8e:2d:a8:61:4b:96:dd:16:12:98:5c:18:
                    f6:b9:60:4e:b6:f8:30:b7:fb:1c:29:ab:3e:e1:13:
                    d6:3d:11:45:0d:2a:6a:ca:fb:99:0a:da:d6:bc:7d:
                    e2:7d:99:21:b9:a8:9e:64:22:3c:f2:c7:4e:fc:d0:
                    6f:87:5a:a8:de:de:9d:b7:c3:94:4a:7f:73:35:77:
                    28:8b:28:e8:73:cc:9f:8c:63:55:eb:c4:2a:66:13:
                    60:60:cd:1c:28:39:00:5a:64:f0:5d:3d:32:75:31:
                    38:17:62:3a:70:96:59:e9:7d:4f:da:20:15:ab:c7:
                    30:6e:92:a4:e0:19:c3:4a:6d:2a:fc:c4:10:9a:13:
                    cc:e4:47:97:97:8d:d9:16:b3:44:c4:87:e2:c7:c2:
                    5b:e7:75:7b:d7:7d:d6:d8:b0:59:3d:db:cb:c9:f4:
                    f4:b9:cf:41:5b:07:c4:81:34:cb:a3:b7:5c:5c:28:
                    10:28:3b:d2:67:0e:9e:49:3a:46:5a:38:ed:65:0f:
                    46:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D8:2E:1F:85:12:AA:E6:F5:36:6B:03:EE:72:C0:F5:AE:C8:F6:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/86b4fe21-cee3-37de-ad3d-6d661b22cb42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.57.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:af:d3:2b:94:a9:e3:a0:e7:94:9a:d4:1e:54:1b:c5:87:9c:
         2f:2b:03:6a:25:aa:91:42:4c:00:aa:21:3b:31:30:04:7d:76:
         fc:7d:6d:b2:b2:f0:b9:2d:be:98:98:ba:f1:05:2f:db:15:f7:
         c5:64:d4:ef:0e:71:34:d6:b1:f3:fc:35:d9:e2:43:8c:63:b7:
         91:71:ee:f3:44:b8:f8:cf:b0:42:93:14:d1:c2:80:a4:82:e0:
         c0:26:1e:bd:35:c5:de:b5:f6:d9:6a:ff:a8:04:32:de:17:1f:
         f5:69:a1:1d:8b:70:2b:67:f0:18:d2:d6:e6:c2:8e:dd:31:ec:
         6e:b4:8f:95:96:9c:6a:9f:a6:d2:f3:5b:d4:14:28:2a:b2:bb:
         55:26:8d:fc:29:4a:a7:91:af:50:30:a1:4b:1c:c0:0b:cd:72:
         18:ff:52:7c:d6:8f:9f:5a:0d:e0:b5:49:02:be:c1:7f:3b:38:
         b3:0d:95:84:c5:fd:0e:80:bb:6f:46:d2:8a:88:c8:0e:a6:03:
         4e:72:d5:fa:11:b0:46:24:c1:13:bf:55:94:d9:75:55:56:89:
         b2:1d:f9:96:88:dd:47:b2:75:2d:4f:af:4d:22:18:85:dd:1f:
         f6:fe:81:28:c0:62:c1:38:67:3b:3c:66:e4:33:22:e9:09:86:
         65:7a:22:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:28 2025 by rpki-client