Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/90691bce-ab56-3f3c-b57c-eba8af7b1382.roa
File:                     90691bce-ab56-3f3c-b57c-eba8af7b1382.roa (raw, json)
Hash identifier:          odMUvEuf4GG2Yk9/Vvx422QjBzR46qFPS9SMEM3mx8M=
Subject key identifier:   ED:F2:80:C9:63:C3:B2:68:38:1E:C5:62:ED:0F:9B:50:FC:2C:EC:08
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E0805447421C0F061DB7BB380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/90691bce-ab56-3f3c-b57c-eba8af7b1382.roa
Signing time:             Wed 25 May 2022 12:00:00 +0000
ROA not before:           Wed 25 May 2022 12:00:00 +0000
ROA not after:            Thu 30 Jun 2022 04:00:00 +0000
asID:                     22394
IP address blocks:        139.56.14.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:08:05:44:74:21:c0:f0:61:db:7b:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 25 12:00:00 2022 GMT
            Not After : Jun 30 04:00:00 2022 GMT
        Subject: CN=33a40e90-4989-4a31-9ec0-c7d7bf62dcc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:0c:08:1a:3d:16:7b:d1:49:80:29:25:aa:47:
                    eb:1f:45:87:9f:17:99:ff:08:12:f6:8b:04:ae:e5:
                    24:ca:c8:09:6f:59:79:40:b9:c2:5f:65:80:c3:f7:
                    1c:57:1b:56:61:ed:03:a0:e1:74:79:60:b4:34:b1:
                    1b:84:26:9f:14:05:ce:16:5a:4c:05:85:48:54:20:
                    d0:ef:5d:6a:9f:37:02:60:d0:f6:3f:a2:01:95:55:
                    21:23:75:0b:1b:39:b9:90:52:fd:b5:fc:58:bb:5f:
                    2b:19:44:14:00:74:13:fb:ea:ea:46:4f:2d:92:ac:
                    d0:65:46:c2:5f:48:5e:ed:a2:35:0f:c7:0d:38:75:
                    00:fb:2e:12:ab:5f:e8:e4:d4:45:38:a7:fd:d6:8c:
                    c6:30:72:bd:78:33:aa:2e:49:f6:86:db:61:2d:4d:
                    65:64:f1:6b:2f:a4:6f:24:71:34:15:6f:c3:68:95:
                    e7:61:6a:f8:c7:e9:40:0b:ce:f2:2f:d1:87:c5:39:
                    d4:dd:f6:0c:e9:26:07:31:e4:5e:63:5e:ef:ea:cf:
                    f3:30:fa:b0:f0:02:95:60:07:14:0e:80:b1:14:d8:
                    26:17:1a:6b:e0:ae:21:9f:df:a0:83:3e:83:d3:37:
                    be:4d:9f:a9:35:2f:6d:c7:77:01:b4:f9:e1:3c:91:
                    50:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F2:80:C9:63:C3:B2:68:38:1E:C5:62:ED:0F:9B:50:FC:2C:EC:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/90691bce-ab56-3f3c-b57c-eba8af7b1382.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:d7:ee:b3:26:e7:7a:37:4c:f6:d8:dc:49:82:fe:1c:ac:69:
         6c:d6:38:b6:2f:e6:5b:e2:19:c8:4a:aa:2e:37:41:72:82:da:
         e7:59:92:1d:b7:9d:19:e9:5a:c8:0a:79:50:b5:75:32:70:e1:
         b4:cd:c8:9f:e1:a8:a1:b7:27:1c:bc:cc:e8:b5:c9:56:35:8c:
         ef:94:4c:d6:75:94:2e:0c:d0:da:84:ac:27:97:20:c7:8a:0a:
         a8:a1:41:f8:73:d7:a3:86:d9:98:83:e1:68:17:ed:3c:9f:9c:
         5f:a3:3d:02:bc:30:87:36:c4:18:c6:87:ce:06:0e:6f:21:ef:
         a3:02:0c:01:18:50:51:d9:6c:d2:60:9c:fa:97:88:b5:c9:89:
         ca:19:e0:a6:3c:4e:d0:e5:1f:fa:5b:fb:53:7d:ac:e3:e2:69:
         74:07:05:94:90:67:cf:d5:db:dc:ac:c7:6a:22:01:21:81:24:
         23:54:c2:db:28:6a:ab:73:17:ed:67:1f:54:8b:0a:b0:d9:a6:
         68:de:77:5c:40:eb:6c:6c:8f:50:4f:8e:08:af:af:ad:9b:7f:
         4c:2c:07:be:2f:a0:00:17:a0:36:53:02:2f:62:64:7b:53:62:
         7e:78:a6:47:1a:aa:4d:1c:04:c4:47:21:c7:a5:ba:85:8b:b3:
         31:e1:8e:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD4IBUR0IcDwYdt7s4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDUyNTEyMDAwMFoXDTIyMDYzMDA0MDAwMFowLzEtMCsGA1UEAxMk
MzNhNDBlOTAtNDk4OS00YTMxLTllYzAtYzdkN2JmNjJkY2M4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+QwIGj0We9FJgCklqkfrH0WHnxeZ/wgS9osE
ruUkysgJb1l5QLnCX2WAw/ccVxtWYe0DoOF0eWC0NLEbhCafFAXOFlpMBYVIVCDQ
711qnzcCYND2P6IBlVUhI3ULGzm5kFL9tfxYu18rGUQUAHQT++rqRk8tkqzQZUbC
X0he7aI1D8cNOHUA+y4Sq1/o5NRFOKf91ozGMHK9eDOqLkn2htthLU1lZPFrL6Rv
JHE0FW/DaJXnYWr4x+lAC87yL9GHxTnU3fYM6SYHMeReY17v6s/zMPqw8AKVYAcU
DoCxFNgmFxpr4K4hn9+ggz6D0ze+TZ+pNS9tx3cBtPnhPJFQWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO3ygMljw7JoOB7FYu0Pm1D8LOwIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOTA2OTFiY2UtYWI1Ni0z
ZjNjLWI1N2MtZWJhOGFmN2IxMzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBizgOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGvX7rMm53o3TPbY3EmC/hysaWzWOLYv5lviGchKqi43QXKC2udZkh23
nRnpWsgKeVC1dTJw4bTNyJ/hqKG3Jxy8zOi1yVY1jO+UTNZ1lC4M0NqErCeXIMeK
CqihQfhz16OG2ZiD4WgX7TyfnF+jPQK8MIc2xBjGh84GDm8h76MCDAEYUFHZbNJg
nPqXiLXJicoZ4KY8TtDlH/pb+1N9rOPiaXQHBZSQZ8/V29ysx2oiASGBJCNUwtso
aqtzF+1nH1SLCrDZpmjed1xA62xsj1BPjgivr62bf0wsB74voAAXoDZTAi9iZHtT
Yn54pkcaqk0cBMRHIceluoWLszHhjk0=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:04:16 2025 by rpki-client