Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8e1d43a0-e659-3c2c-8e01-d490e2b23070.roa
File:                     8e1d43a0-e659-3c2c-8e01-d490e2b23070.roa (raw, json)
Hash identifier:          8ZTX9qanAPwly1DfK6qXVkifj7QvN9EB90ggjy5OkuQ=
Subject key identifier:   18:8B:C5:55:5C:B8:06:34:BF:B4:69:C5:2E:A8:13:B3:B0:13:E7:84
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FFFCFFF12A0CB711C4D834A60
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8e1d43a0-e659-3c2c-8e01-d490e2b23070.roa
Signing time:             Tue 22 Nov 2022 12:00:00 +0000
ROA not before:           Tue 22 Nov 2022 12:00:00 +0000
ROA not after:            Wed 28 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        56.254.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ff:cf:ff:12:a0:cb:71:1c:4d:83:4a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 22 12:00:00 2022 GMT
            Not After : Dec 28 05:00:00 2022 GMT
        Subject: CN=bafe4278-0fb9-41b9-a0b5-4665a9623a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:07:60:bf:f3:b9:14:e5:d4:07:08:8b:5a:1f:
                    8b:cb:2c:7b:91:4e:95:93:29:27:75:01:ae:52:19:
                    e3:16:24:c8:e3:2f:1d:8e:db:7d:bb:82:4d:7d:03:
                    61:b9:28:5c:f3:fc:c4:60:1e:28:81:d6:d1:e9:eb:
                    50:1a:ec:52:87:1b:90:de:1c:91:81:8e:ac:ca:c4:
                    33:08:1e:5e:7b:a6:b6:b2:c2:b0:68:dd:67:5e:21:
                    f8:d2:b6:de:b7:4d:65:88:66:92:d9:e9:52:43:22:
                    51:d0:95:40:5a:a4:f0:05:70:35:db:d2:95:a9:45:
                    cd:b8:4e:83:a5:94:3c:75:c5:35:16:6f:c4:1e:b0:
                    86:c7:b6:0d:7d:db:0b:e4:ad:26:0c:1b:4c:43:a0:
                    50:35:c8:b4:07:aa:50:1b:b0:4d:ba:e7:19:e4:26:
                    eb:8b:8c:1b:a2:54:0f:00:87:78:86:1c:8c:1c:93:
                    10:03:5d:e1:90:0a:3e:ff:1f:00:f4:68:65:63:1b:
                    4b:41:0d:33:68:df:d8:b1:33:c9:19:b7:ed:87:3f:
                    77:45:68:1a:dc:3d:db:31:2a:4d:30:f2:18:69:70:
                    c6:04:65:ab:c3:b1:a0:cd:5b:cd:cf:db:1f:f2:f1:
                    ee:f1:27:95:2d:ed:65:4a:0f:26:ca:5e:bb:91:3a:
                    31:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8B:C5:55:5C:B8:06:34:BF:B4:69:C5:2E:A8:13:B3:B0:13:E7:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8e1d43a0-e659-3c2c-8e01-d490e2b23070.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.254.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:5f:b3:f3:4b:53:9d:03:5f:ca:6d:da:a8:4e:c7:12:28:72:
         e7:11:70:b6:43:20:ac:8c:59:34:93:74:14:a7:b3:06:4d:76:
         98:9b:b7:37:09:4e:cf:9a:40:b6:68:c5:03:50:80:08:4b:b8:
         69:65:eb:ef:09:b4:ae:8c:bb:fb:5b:c0:ea:41:88:e8:78:47:
         99:23:5e:cc:82:5b:b3:d1:95:5b:58:25:8d:fb:67:42:23:76:
         aa:da:12:a1:f3:91:78:9a:34:53:4c:8f:39:61:3e:15:e2:c8:
         a1:72:e5:4d:64:49:d0:25:fb:29:39:78:15:af:8b:39:05:9f:
         25:ce:5a:76:41:3c:3d:7a:a6:d8:c8:3e:5a:5a:9e:21:81:e5:
         23:39:ac:64:62:0a:30:c5:8e:da:5a:67:d8:fd:c2:8e:ac:fa:
         04:36:4f:62:53:7b:62:16:6d:a2:31:46:6d:0d:bb:32:c4:34:
         51:da:ee:ba:af:de:2e:fb:38:2d:7d:ff:ff:2d:24:fb:bd:f1:
         91:68:e3:4c:a8:30:84:16:c2:88:93:22:0e:5d:df:d3:cc:28:
         07:5e:2f:e0:27:82:a3:12:b7:f0:14:52:04:05:0e:3a:ba:ef:
         a8:47:75:a3:ff:cf:b7:4a:5a:04:bb:66:a6:e5:93:e3:88:c1:
         ee:4f:6e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 11:08:21 2025 by rpki-client