Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/93252feb-9f08-3f84-bd7c-b99e06e6e226.roa
File:                     93252feb-9f08-3f84-bd7c-b99e06e6e226.roa (raw, json)
Hash identifier:          AlUVAuq2C+pNUOCToiPiNxfRq3jW77AfrPKUxSBOEx4=
Subject key identifier:   42:D9:E4:74:B7:E6:92:59:A0:1F:0E:38:0E:E1:ED:07:04:9F:C2:D1
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584051626C18F6BC7B0E0DAD86E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/93252feb-9f08-3f84-bd7c-b99e06e6e226.roa
Signing time:             Wed 21 Dec 2022 22:15:08 +0000
ROA not before:           Wed 21 Dec 2022 22:15:08 +0000
ROA not after:            Thu 26 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        56.44.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:51:62:6c:18:f6:bc:7b:0e:0d:ad:86:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 21 22:15:08 2022 GMT
            Not After : Jan 26 05:00:00 2023 GMT
        Subject: CN=3f7bbc03-1417-4df9-8c2a-820fd33444e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cc:ac:1d:de:d2:b3:d5:6b:09:6c:15:d3:5a:
                    a8:23:eb:4e:bf:08:a6:2f:e4:9b:37:05:57:fd:0a:
                    63:68:c8:8a:a3:0f:4c:c4:5d:63:3d:21:36:be:0b:
                    0e:02:2f:01:3f:0a:5b:bf:73:4a:f9:3e:cb:f3:16:
                    1b:bd:db:96:74:83:ca:67:fd:ac:e3:65:1f:9c:87:
                    47:89:80:6d:91:00:40:93:87:76:0a:ad:a5:f3:61:
                    98:53:23:f4:72:a3:06:90:f5:0a:a8:8c:7a:76:f0:
                    10:26:b5:4d:e1:2f:d2:ca:06:c1:6f:eb:69:f2:d1:
                    a3:c4:98:89:f3:ea:56:f8:d9:63:f6:7d:4b:da:9a:
                    93:f4:5c:e1:d8:97:93:0b:5b:28:89:4f:e9:fb:6f:
                    ba:70:5f:ad:85:21:c7:b6:9d:1a:20:3d:17:1f:53:
                    bd:95:23:66:0e:b9:35:a6:de:2b:0c:78:9e:07:69:
                    7c:68:72:7c:1a:5d:65:b2:a9:0b:0c:26:ac:39:23:
                    c2:2e:b5:03:cb:6e:c8:a6:87:1e:3c:bc:31:92:46:
                    d4:d8:b6:48:f6:d9:5d:32:3e:fe:96:19:73:8f:b2:
                    15:bc:18:cc:cc:6b:37:fb:54:86:f8:69:b2:34:64:
                    cb:5c:5f:97:14:a4:34:39:28:d0:d7:49:14:47:cd:
                    91:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D9:E4:74:B7:E6:92:59:A0:1F:0E:38:0E:E1:ED:07:04:9F:C2:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/93252feb-9f08-3f84-bd7c-b99e06e6e226.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.44.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:f5:be:fa:7e:7e:a8:7b:26:59:18:04:ea:14:3c:d9:69:56:
         51:e7:69:25:83:8d:5e:85:81:31:9e:47:f2:d9:bf:3e:8a:9e:
         4e:48:9a:e4:f1:8f:be:ff:e7:ff:b3:b9:31:e4:ff:c4:85:8a:
         ed:5d:bc:08:dd:1d:e9:76:5d:f8:9f:a2:c5:fa:3a:f6:b6:37:
         ad:6b:24:f4:97:89:d9:a1:4a:6d:74:ea:22:34:1f:60:4c:f6:
         08:a2:b0:06:a5:f8:0e:04:1b:9c:56:fb:8c:5e:64:76:7e:35:
         32:a7:9d:95:1f:c0:96:1d:51:6b:cc:3b:07:01:43:e8:61:c7:
         4a:38:18:a8:05:df:7e:61:0b:98:b8:ad:78:78:40:46:fe:bd:
         77:37:ab:96:01:b7:aa:d6:ff:9d:3d:a6:36:79:2c:ff:28:af:
         90:6b:68:3a:31:24:44:ed:1b:44:1f:44:b8:66:41:cc:9f:ce:
         8e:da:53:2b:70:a7:3b:2a:68:fe:e3:2a:02:b7:4b:58:5e:8a:
         ce:b3:24:ba:5b:c1:7b:af:bf:fd:00:dd:58:17:e6:e0:7d:74:
         85:1f:17:dd:6f:ee:c8:cb:44:ab:1d:58:c6:38:a0:87:86:26:
         88:37:74:c5:c4:c9:46:19:9c:bc:b9:00:87:0d:65:0a:e4:1a:
         c8:1f:c8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:58 2025 by rpki-client