Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9feef4bf-acb0-3085-a221-ea86a06ef39c.roa
File:                     9feef4bf-acb0-3085-a221-ea86a06ef39c.roa (raw, json)
Hash identifier:          XjqxsgTISKJkm9n09Tdc62268rym5Yf5bUF1gQLpRyI=
Subject key identifier:   9B:3F:E9:E6:F5:23:B1:FB:00:B9:BD:F6:31:3A:DF:E8:CB:5C:7F:95
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DD0E9D61499DC21FE8EA1BB00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9feef4bf-acb0-3085-a221-ea86a06ef39c.roa
Signing time:             Thu 05 May 2022 12:00:00 +0000
ROA not before:           Thu 05 May 2022 12:00:00 +0000
ROA not after:            Fri 10 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        158.56.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d0:e9:d6:14:99:dc:21:fe:8e:a1:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  5 12:00:00 2022 GMT
            Not After : Jun 10 04:00:00 2022 GMT
        Subject: CN=a235a8b6-c373-4c26-9c91-1538b4ce47b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:af:37:a8:b3:f8:d5:73:2f:48:c1:3c:0d:32:
                    fc:00:14:df:d4:4d:e8:0d:85:4a:56:2b:b9:8f:80:
                    07:90:fb:a7:a2:60:17:e2:35:26:39:73:21:b5:cd:
                    b9:95:76:13:3d:fa:43:c7:8f:f4:0f:86:95:6c:af:
                    2b:4d:88:77:24:d3:86:26:37:fa:19:d2:98:fc:2e:
                    70:d7:f0:b2:98:a8:09:55:28:7e:2c:ab:e0:f2:a6:
                    6a:0c:ab:5d:1f:f9:67:4a:6e:13:f1:48:0c:0f:22:
                    49:9c:ba:dc:5e:c6:5a:52:d8:5c:68:71:86:d7:d1:
                    91:9d:92:d5:98:15:12:7e:07:b6:28:01:fe:34:b3:
                    c9:3d:0b:19:7f:39:ec:c3:91:b8:42:cf:a2:8c:df:
                    c0:0d:33:70:54:6d:44:2b:90:98:45:c4:27:ad:57:
                    40:b4:2d:be:12:f3:62:11:c8:e9:33:7b:3e:7b:3a:
                    f4:06:1e:4d:7e:3a:70:e5:cd:bc:ae:45:62:09:99:
                    2d:5d:d3:5a:5d:97:1e:8b:23:20:cf:6a:5a:55:ae:
                    90:3b:05:e5:5d:5f:97:96:52:a7:79:74:32:86:d6:
                    60:15:da:40:28:c9:df:0f:e0:b6:6a:9a:c2:20:f9:
                    9c:6f:3b:bd:7b:05:c3:75:7c:ab:45:41:a8:9c:c5:
                    3a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:3F:E9:E6:F5:23:B1:FB:00:B9:BD:F6:31:3A:DF:E8:CB:5C:7F:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9feef4bf-acb0-3085-a221-ea86a06ef39c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.56.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:bb:f7:1e:bd:00:18:5f:b9:10:3c:28:ab:18:49:40:a0:bb:
         73:27:b2:b4:fb:b5:26:91:c5:3f:f7:d1:c8:b0:f3:16:2b:bb:
         15:25:0f:02:0c:4e:8e:1c:28:84:bc:0d:e8:7e:8b:3e:35:b0:
         f1:7c:57:2e:10:7b:9b:d4:2d:8c:65:b0:b6:08:d0:5b:6e:60:
         e9:33:80:4f:47:07:10:f0:48:cf:e4:e2:46:be:db:ee:ff:e6:
         12:71:52:25:b2:df:5d:b7:71:4a:4a:90:32:bb:cf:46:f5:84:
         98:a9:48:9c:c5:13:18:0f:83:61:1c:3f:cf:0e:bf:04:c3:d2:
         57:ff:8f:83:f3:17:75:1e:e2:07:82:6e:ed:b0:23:48:2b:84:
         43:ad:61:d2:8d:2d:47:39:18:3e:a1:b6:84:4f:b7:fa:d0:73:
         01:b2:c7:57:47:db:77:b7:91:92:99:e0:a2:48:5d:65:6d:c4:
         b8:f0:07:c1:7d:8c:8e:0e:cd:1c:04:45:5e:24:6e:91:a1:4c:
         f9:e7:1f:92:a9:a2:0c:8f:8f:0d:da:d2:5d:31:94:07:49:75:
         d6:0e:fc:92:4a:25:bf:4f:d3:e6:76:0a:fe:12:a6:d5:8e:b3:
         c4:cc:08:e4:a0:7b:d5:d8:81:2c:85:39:49:5f:4c:fb:aa:9c:
         21:1b:22:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 01:22:33 2025 by rpki-client