Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/900593c0-fc7d-3823-97cb-3242631fa87a.roa
File:                     900593c0-fc7d-3823-97cb-3242631fa87a.roa (raw, json)
Hash identifier:          6Rjw7GrM3q2i4wSkavr+XdCvVEEtkjNWNODDe2aY8YI=
Subject key identifier:   4E:40:05:0C:C5:48:01:B8:82:B9:54:B9:A3:2D:40:00:C8:D8:CC:18
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F8AC391177C7D556E87CC9080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/900593c0-fc7d-3823-97cb-3242631fa87a.roa
Signing time:             Tue 11 Oct 2022 18:48:07 +0000
ROA not before:           Tue 11 Oct 2022 18:48:07 +0000
ROA not after:            Wed 16 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        56.176.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:8a:c3:91:17:7c:7d:55:6e:87:cc:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 11 18:48:07 2022 GMT
            Not After : Nov 16 05:00:00 2022 GMT
        Subject: CN=94820f0d-5be4-4c5e-ac03-d80e5f2ce4f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:44:88:07:b8:ae:26:a6:9e:e6:d2:b5:75:c0:
                    55:29:14:dc:9e:0f:a1:5a:87:e5:22:c7:7b:c7:4f:
                    1b:27:d1:a3:81:31:78:e7:98:45:b1:86:2a:61:12:
                    37:2f:50:88:a1:c1:1f:eb:da:d4:49:d1:2f:80:cc:
                    57:52:73:fc:88:84:12:9f:e3:8e:a6:00:d1:b2:19:
                    1d:eb:ff:93:5c:0c:26:a4:16:e2:d1:cb:90:fb:16:
                    96:94:e0:1e:2f:cf:21:90:42:80:0f:01:e5:8b:37:
                    ac:e1:86:40:1c:5e:ec:7c:f1:8d:ec:1f:c0:98:de:
                    ac:72:20:2d:75:28:ee:57:38:11:e4:0c:0e:58:9c:
                    c1:eb:8b:54:99:72:e7:2d:71:40:a5:d1:3b:c7:ed:
                    31:5b:ef:da:64:e2:7a:24:fd:24:e9:54:9a:90:53:
                    5d:38:4e:e2:45:bf:67:0d:a4:a8:8a:f4:99:f1:16:
                    97:3d:9f:1d:79:d6:5c:b6:e2:69:66:f3:7a:81:09:
                    d7:79:7e:59:65:1a:2b:f5:6e:ef:49:c3:92:fa:ad:
                    93:14:6c:fb:a9:f2:38:05:38:64:3f:7f:64:a6:e2:
                    43:8e:a6:b3:a3:e7:ce:2f:47:b9:7b:77:cc:25:ed:
                    9e:3f:7e:42:fc:2d:d5:1f:17:c2:61:3f:55:28:c3:
                    2a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:40:05:0C:C5:48:01:B8:82:B9:54:B9:A3:2D:40:00:C8:D8:CC:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/900593c0-fc7d-3823-97cb-3242631fa87a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.176.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:7c:57:a5:26:d8:78:57:a4:76:31:4c:81:48:90:3d:35:c1:
         6e:a1:04:c5:1b:42:1b:ba:88:91:8d:54:56:6d:d9:69:67:e6:
         88:d2:c2:23:44:e4:2c:4a:55:7f:99:86:0c:29:6f:e2:3e:ec:
         cb:cc:06:91:d3:47:b4:7c:9d:31:40:e3:a6:ba:80:10:15:65:
         3b:91:50:84:65:96:35:3b:39:77:c6:38:42:fc:9d:db:bf:1f:
         d2:8c:68:d6:d3:3b:32:b2:5b:b9:f3:f3:c7:32:ea:df:b6:2e:
         c5:db:54:af:c1:ec:29:b5:09:fe:3e:94:c0:33:48:57:23:78:
         bc:18:b3:7a:58:14:04:85:8f:c6:6a:34:7a:1a:e2:aa:e5:3a:
         2c:46:94:88:84:7d:a6:c0:d7:26:e1:00:7e:90:af:72:09:1b:
         6a:9d:20:f0:df:87:9d:58:6f:99:4d:54:1c:ed:2a:0c:84:9d:
         dd:58:26:aa:58:88:a7:c9:e6:be:75:0a:d0:61:86:e8:7f:19:
         c8:20:2d:0e:a5:6f:e0:ac:e0:97:e7:76:aa:ab:ba:58:c9:db:
         15:d0:78:ca:ca:18:2a:93:f8:d7:d8:81:02:7c:75:52:fd:84:
         b2:67:23:23:4c:aa:d4:b8:de:39:2f:db:c8:dc:fa:69:00:e6:
         ed:d6:e4:22
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+Kw5EXfH1VbofMkIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAxMTE4NDgwN1oXDTIyMTExNjA1MDAwMFowLzEtMCsGA1UEAxMk
OTQ4MjBmMGQtNWJlNC00YzVlLWFjMDMtZDgwZTVmMmNlNGYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUSIB7iuJqae5tK1dcBVKRTcng+hWoflIsd7
x08bJ9GjgTF455hFsYYqYRI3L1CIocEf69rUSdEvgMxXUnP8iIQSn+OOpgDRshkd
6/+TXAwmpBbi0cuQ+xaWlOAeL88hkEKADwHlizes4YZAHF7sfPGN7B/AmN6sciAt
dSjuVzgR5AwOWJzB64tUmXLnLXFApdE7x+0xW+/aZOJ6JP0k6VSakFNdOE7iRb9n
DaSoivSZ8RaXPZ8dedZctuJpZvN6gQnXeX5ZZRor9W7vScOS+q2TFGz7qfI4BThk
P39kpuJDjqazo+fOL0e5e3fMJe2eP35C/C3VHxfCYT9VKMMqaQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFE5ABQzFSAG4grlUuaMtQADI2MwYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOTAwNTkzYzAtZmM3ZC0z
ODIzLTk3Y2ItMzI0MjYzMWZhODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOLAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEADHxXpSbYeFekdjFMgUiQPTXBbqEExRtCG7qIkY1UVm3ZaWfmiNLCI0Tk
LEpVf5mGDClv4j7sy8wGkdNHtHydMUDjprqAEBVlO5FQhGWWNTs5d8Y4Qvyd278f
0oxo1tM7MrJbufPzxzLq37YuxdtUr8HsKbUJ/j6UwDNIVyN4vBizelgUBIWPxmo0
ehriquU6LEaUiIR9psDXJuEAfpCvcgkbap0g8N+HnVhvmU1UHO0qDISd3VgmqliI
p8nmvnUK0GGG6H8ZyCAtDqVv4Kzgl+d2qqu6WMnbFdB4ysoYKpP419iBAnx1Uv2E
smcjI0yq1LjeOS/byNz6aQDm7dbkIg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:33:12 2025 by rpki-client