Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/939750aa-8e70-365e-b8b5-596191dbd28b.roa
File:                     939750aa-8e70-365e-b8b5-596191dbd28b.roa (raw, json)
Hash identifier:          YXnYoEVykg82pO334NCk1meHACGZFvOirUd4I4tWlDU=
Subject key identifier:   97:FA:6A:B1:B9:DE:74:EA:E8:F6:B9:CB:2A:28:5D:09:AA:FA:C1:5A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DC688499CFABA2FE6A9FAAFD0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/939750aa-8e70-365e-b8b5-596191dbd28b.roa
Signing time:             Mon 02 May 2022 12:00:00 +0000
ROA not before:           Mon 02 May 2022 12:00:00 +0000
ROA not after:            Tue 07 Jun 2022 04:00:00 +0000
asID:                     22394
IP address blocks:        139.56.4.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:c6:88:49:9c:fa:ba:2f:e6:a9:fa:af:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  2 12:00:00 2022 GMT
            Not After : Jun  7 04:00:00 2022 GMT
        Subject: CN=91deaa7e-be77-4f48-9761-bc7d35cb0c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:85:ca:e9:95:51:fb:c3:f4:7e:07:c0:94:b7:
                    ef:d9:88:dd:70:c3:b9:c3:99:bf:e3:74:be:52:fd:
                    17:89:86:d7:e4:c2:6c:f3:7a:33:3c:6d:0b:10:33:
                    80:54:a0:9c:d8:3c:9a:57:b1:c6:76:1b:68:8d:fb:
                    73:12:b7:cc:96:23:14:79:9d:20:a2:59:e3:33:25:
                    4a:f1:7a:92:bb:57:aa:16:05:ff:0d:01:ce:1f:a9:
                    d9:66:38:9d:bb:02:08:5d:6a:58:db:5b:e5:6e:0c:
                    50:0a:f0:92:57:d4:53:56:22:cd:fc:82:0e:4a:2b:
                    ef:65:3f:cf:93:10:49:ee:92:a3:54:46:d8:7b:7d:
                    d1:7e:60:74:0f:5e:80:fd:32:b1:97:7a:dc:5a:bd:
                    f8:c8:66:e4:e2:db:87:19:b4:85:3c:f8:b5:69:83:
                    c8:58:c1:e0:4a:c6:3d:60:09:19:d5:60:6c:da:b9:
                    cc:70:5c:6a:36:b3:0f:da:cf:c4:f7:4a:84:35:02:
                    aa:de:2a:0b:e7:51:0c:5c:58:ad:ca:51:02:41:b3:
                    af:4e:30:d0:5d:b5:83:cf:d6:93:26:8e:a2:7e:74:
                    74:e9:fd:94:02:bd:68:52:67:62:84:47:89:94:96:
                    78:aa:9a:d3:f1:34:d1:f2:17:a9:c7:fc:a9:b8:05:
                    df:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FA:6A:B1:B9:DE:74:EA:E8:F6:B9:CB:2A:28:5D:09:AA:FA:C1:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/939750aa-8e70-365e-b8b5-596191dbd28b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:64:74:5c:81:fd:5e:42:0e:e9:12:a3:52:5a:44:25:4f:98:
         f4:96:b5:c1:30:7e:31:b8:cf:55:6a:6f:71:42:33:21:5c:86:
         57:b9:45:68:1a:61:95:d1:1c:66:23:3b:75:0c:38:72:b4:26:
         ac:64:d4:dd:b3:3c:51:a4:26:0d:53:66:c4:44:b5:ed:de:34:
         38:7e:ca:22:d4:90:74:b8:dc:42:51:9d:c7:31:2d:2f:c2:ec:
         d1:b9:7e:d9:5c:ba:47:fb:0d:7d:74:06:e1:1b:7a:cc:be:2e:
         c8:31:09:db:21:15:68:d1:d9:9a:54:4e:2f:80:3c:99:ef:49:
         0b:aa:78:b1:05:13:bc:62:ed:cc:87:29:39:6f:0c:0c:8c:9e:
         1b:6e:1f:73:87:ff:7b:bf:3f:20:64:77:c9:93:eb:a9:44:57:
         45:74:86:89:b8:0e:45:9e:6f:3b:a4:95:c0:fd:85:bd:23:e3:
         06:84:b3:e2:8b:f9:2a:28:01:04:0e:ea:02:ff:ed:96:ba:05:
         42:7f:dc:55:26:89:09:ba:18:c5:05:a6:3d:43:84:5e:81:b9:
         75:f7:64:5a:ff:df:a2:8f:4c:a9:6a:04:80:e2:de:74:c6:10:
         5f:34:c1:52:58:e5:64:83:7f:2a:57:41:49:17:90:ad:a2:2e:
         2b:c3:fe:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD3GiEmc+rov5qn6r9AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDUwMjEyMDAwMFoXDTIyMDYwNzA0MDAwMFowLzEtMCsGA1UEAxMk
OTFkZWFhN2UtYmU3Ny00ZjQ4LTk3NjEtYmM3ZDM1Y2IwYzYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4XK6ZVR+8P0fgfAlLfv2YjdcMO5w5m/43S+
Uv0XiYbX5MJs83ozPG0LEDOAVKCc2DyaV7HGdhtojftzErfMliMUeZ0golnjMyVK
8XqSu1eqFgX/DQHOH6nZZjiduwIIXWpY21vlbgxQCvCSV9RTViLN/IIOSivvZT/P
kxBJ7pKjVEbYe33RfmB0D16A/TKxl3rcWr34yGbk4tuHGbSFPPi1aYPIWMHgSsY9
YAkZ1WBs2rnMcFxqNrMP2s/E90qENQKq3ioL51EMXFitylECQbOvTjDQXbWDz9aT
Jo6ifnR06f2UAr1oUmdihEeJlJZ4qprT8TTR8hepx/ypuAXfMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJf6arG53nTq6Pa5yyooXQmq+sFaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOTM5NzUwYWEtOGU3MC0z
NjVlLWI4YjUtNTk2MTkxZGJkMjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAizgEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABNkdFyB/V5CDukSo1JaRCVPmPSWtcEwfjG4z1Vqb3FCMyFchle5RWga
YZXRHGYjO3UMOHK0Jqxk1N2zPFGkJg1TZsREte3eNDh+yiLUkHS43EJRnccxLS/C
7NG5ftlcukf7DX10BuEbesy+LsgxCdshFWjR2ZpUTi+APJnvSQuqeLEFE7xi7cyH
KTlvDAyMnhtuH3OH/3u/PyBkd8mT66lEV0V0hom4DkWebzuklcD9hb0j4waEs+KL
+SooAQQO6gL/7Za6BUJ/3FUmiQm6GMUFpj1DhF6BuXX3ZFr/36KPTKlqBIDi3nTG
EF80wVJY5WSDfypXQUkXkK2iLivD/jc=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:05 2025 by rpki-client