Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/92a091d8-9fd1-3126-a55a-9cb94421d065.roa
File:                     92a091d8-9fd1-3126-a55a-9cb94421d065.roa (raw, json)
Hash identifier:          J/gb+TVQ8AT5JIMkpQo5c0y2e/emDomqxCCSy9NJMmQ=
Subject key identifier:   1B:EB:CE:18:74:52:76:FB:81:AA:A1:9B:1E:8F:72:86:5B:14:A6:AF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FDC1287EB5694F5471C81D8A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/92a091d8-9fd1-3126-a55a-9cb94421d065.roa
Signing time:             Wed 09 Nov 2022 12:00:00 +0000
ROA not before:           Wed 09 Nov 2022 12:00:00 +0000
ROA not after:            Thu 15 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        56.53.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:dc:12:87:eb:56:94:f5:47:1c:81:d8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  9 12:00:00 2022 GMT
            Not After : Dec 15 05:00:00 2022 GMT
        Subject: CN=f92d58f4-927f-4a00-87d5-af10c13dfc92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:04:26:ce:0d:93:bb:3e:b8:0e:37:15:6a:f0:
                    a8:8e:85:92:fd:c8:eb:4a:3c:1b:7e:1e:da:e4:af:
                    8f:02:30:fd:9c:07:5f:13:b5:f3:dc:02:80:34:9b:
                    8b:4b:3c:3b:22:36:f2:40:95:11:51:74:57:6c:5b:
                    18:d9:7e:81:f4:31:3e:37:7f:55:9c:f8:6b:26:ca:
                    d2:05:69:c4:b0:97:8a:eb:26:2b:4f:50:d7:52:9f:
                    7e:4f:18:b9:9b:bc:35:b4:56:ee:a9:df:fb:9f:dd:
                    ee:2e:cc:e3:37:83:a0:d5:c5:c4:ea:3e:bf:dc:37:
                    eb:6a:74:bc:b5:df:f1:5a:02:95:e1:6d:f8:a2:2b:
                    6e:81:57:c8:38:da:ff:31:01:bb:78:4f:e9:f1:1f:
                    1d:10:8e:a8:1d:d2:54:08:aa:6f:e6:49:49:f5:64:
                    ca:96:76:ab:0e:63:c1:88:4d:17:cb:85:29:57:b2:
                    58:40:73:a4:44:e8:ca:64:9c:bd:36:48:c6:df:82:
                    9d:fa:dc:6e:4f:f3:8c:32:f6:80:0f:5d:da:d5:4e:
                    2a:c3:7c:57:9b:4d:24:32:c3:db:40:a5:25:17:f0:
                    0c:c6:e1:08:1d:9c:b4:bc:23:46:72:8f:2f:0b:f8:
                    9c:22:de:31:4f:08:ad:af:7c:76:bd:1c:23:e3:46:
                    8d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EB:CE:18:74:52:76:FB:81:AA:A1:9B:1E:8F:72:86:5B:14:A6:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/92a091d8-9fd1-3126-a55a-9cb94421d065.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.53.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:03:01:45:7d:68:ce:71:d0:57:25:33:be:fa:53:22:4b:62:
         1c:7e:1d:15:62:1f:24:6c:07:69:84:09:b9:e8:ec:fa:e2:a4:
         6b:ab:e3:36:83:be:7f:90:48:7e:e4:63:05:4f:fa:bf:5b:fc:
         51:ed:79:56:67:33:67:1f:eb:d6:86:19:1a:6b:35:40:1d:2f:
         73:cf:23:c9:53:25:f6:0d:e6:98:d2:8f:57:a2:aa:99:e2:e6:
         86:66:a6:dd:0a:3b:8b:8f:5f:7e:6a:cf:cd:f5:ba:5e:94:a6:
         36:4d:30:46:c9:43:4d:c0:3b:8e:bf:73:73:44:45:c6:91:a4:
         fa:37:fe:75:f6:32:27:5b:a5:2c:50:7c:fc:a4:40:c8:fa:e5:
         48:d5:9e:b5:8a:d0:55:0b:30:40:a2:e0:bc:ce:f8:4c:7a:52:
         87:92:95:bb:fd:58:da:30:d0:4f:c8:8d:84:c0:f1:77:3b:d0:
         a7:46:82:a2:05:8c:5e:dd:fc:03:f9:17:a8:d9:81:b0:73:44:
         92:20:a3:43:00:d1:39:32:10:cf:42:5f:2f:9f:de:ac:28:a0:
         64:84:f6:e6:16:c6:93:ba:98:2f:0a:69:9a:00:95:a0:e0:80:
         9c:7d:d5:f6:3f:05:86:64:19:d8:e6:43:4d:fd:2c:5a:47:8a:
         03:ff:6a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:38 2025 by rpki-client