Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9fe822e6-0229-3f16-9664-5cc47ea540f9.roa
File:                     9fe822e6-0229-3f16-9664-5cc47ea540f9.roa (raw, json)
Hash identifier:          G+WS5h3A0cnpkldMkuF6q10h55uoUJcHXpWQoMu1Fhc=
Subject key identifier:   9F:62:A6:84:2C:71:3C:44:48:E0:57:BB:1D:38:19:64:26:33:4D:61
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FA6C4BF2B019F5EC18B28DA40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9fe822e6-0229-3f16-9664-5cc47ea540f9.roa
Signing time:             Fri 21 Oct 2022 16:30:08 +0000
ROA not before:           Fri 21 Oct 2022 16:30:08 +0000
ROA not after:            Sat 26 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        156.5.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a6:c4:bf:2b:01:9f:5e:c1:8b:28:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 21 16:30:08 2022 GMT
            Not After : Nov 26 05:00:00 2022 GMT
        Subject: CN=7de41709-5e11-408d-8c37-51ac79d3dace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:36:e2:2b:8b:bb:73:2c:59:9c:00:b3:07:71:
                    86:f0:fd:78:8e:44:76:fa:d7:f8:05:c2:05:8a:39:
                    a4:cb:38:e4:d0:43:90:14:e2:87:7f:83:d6:fe:8d:
                    c4:1e:43:91:45:63:41:37:b9:29:b1:1c:2b:a0:4c:
                    c3:5f:97:b7:f5:ea:3b:d0:c5:db:54:3f:9a:4e:62:
                    b0:1e:22:69:c3:8e:38:6a:5e:a6:25:1d:4e:9a:b0:
                    f7:52:4b:f9:85:9e:e2:53:96:96:0c:02:b1:4b:90:
                    7f:58:b8:f6:d7:27:7c:09:96:f3:b4:09:1b:2e:37:
                    ce:49:69:40:f0:52:a8:6c:62:ba:2a:5a:3e:5b:11:
                    6b:60:bf:d5:4c:61:26:5d:af:aa:43:81:26:e2:f2:
                    22:68:dd:79:2d:15:27:c3:7c:02:09:e5:8b:41:c3:
                    e4:ab:9f:12:39:f5:44:6a:88:a2:f6:0d:bf:ed:fc:
                    f4:7b:df:19:ab:e6:6a:7d:f2:33:04:8e:9d:e8:b6:
                    c9:66:f4:40:3a:8b:59:46:08:7e:03:d4:0c:b4:14:
                    58:7c:1b:6e:a8:3d:a2:05:79:4a:62:75:3f:c7:72:
                    41:b6:5a:2f:1e:c3:fd:46:f9:42:6b:97:ba:01:f2:
                    22:b1:f9:92:9d:de:21:d0:9b:80:7d:64:06:d8:45:
                    82:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:62:A6:84:2C:71:3C:44:48:E0:57:BB:1D:38:19:64:26:33:4D:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9fe822e6-0229-3f16-9664-5cc47ea540f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.5.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:e7:eb:d6:9b:04:ae:0c:97:e9:c4:10:f4:59:98:c7:6c:55:
         cc:c2:55:05:1b:19:c1:87:e4:4f:8a:e2:65:4d:f9:d4:39:b7:
         ec:4a:c8:07:b1:ad:60:9a:35:92:7d:82:ec:30:0d:12:2a:8e:
         59:81:5d:82:57:f0:cc:3e:67:17:27:71:a8:f0:9a:c0:02:20:
         30:26:d5:b8:c6:2f:ff:9a:5e:70:32:c5:a7:ef:99:c3:c8:4d:
         9c:b2:0c:2d:9d:6b:d9:df:07:a0:2e:b2:92:ad:34:20:1e:b5:
         23:fa:63:f7:be:9f:fb:03:41:ec:a0:0b:e0:8d:e0:aa:ae:77:
         11:3b:26:e0:a9:ec:7f:1f:74:46:b3:d8:2c:83:5e:87:ac:ec:
         ba:47:94:30:b4:25:1e:1b:dc:0b:f2:39:9d:71:d2:4b:4e:87:
         6e:04:ed:ec:d3:4f:17:15:11:d1:ff:26:4a:01:e6:b2:ee:af:
         df:c5:86:61:84:53:59:c3:d5:44:08:64:f4:75:e8:6d:72:b3:
         29:3b:19:4f:7d:06:0b:00:e5:54:16:a8:59:c9:21:6e:d0:80:
         8f:49:f1:6d:81:1f:ef:d9:bc:b5:79:48:04:34:c3:46:38:fd:
         00:93:22:b6:32:c9:8e:5c:65:47:fe:e8:84:5c:d1:e4:1a:36:
         97:cc:31:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:55:03 2025 by rpki-client