Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a0bc43ad-9b47-3b7c-8911-33366b8b1775.roa
File:                     a0bc43ad-9b47-3b7c-8911-33366b8b1775.roa (raw, json)
Hash identifier:          gkIY9Egzkzgf27frkZxvLKE2xCCd01Ji9BZ9jpbyp+M=
Subject key identifier:   D7:B0:44:80:5E:69:B0:D2:0E:AE:80:75:40:8E:AA:9D:1A:21:D4:E7
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CB4B5C84B9B65A45B5C8F15C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a0bc43ad-9b47-3b7c-8911-33366b8b1775.roa
Signing time:             Tue 25 Jan 2022 05:00:00 +0000
ROA not before:           Tue 25 Jan 2022 05:00:00 +0000
ROA not after:            Tue 01 Mar 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        139.56.4.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:b4:b5:c8:4b:9b:65:a4:5b:5c:8f:15:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 25 05:00:00 2022 GMT
            Not After : Mar  1 05:00:00 2022 GMT
        Subject: CN=bc4610b7-113f-4a1b-b016-4e7f3adcced5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:60:be:dc:6f:f8:e9:78:1f:b4:d5:86:f2:8d:
                    6a:f9:80:86:25:5b:68:a4:cb:5a:8a:33:e1:a4:38:
                    5b:8f:2d:bd:0f:ec:9b:78:4b:52:37:45:a0:61:eb:
                    5a:7d:d2:12:41:bb:2b:40:d8:e5:21:3d:0d:aa:af:
                    66:51:cd:16:57:44:a5:37:17:a6:8e:74:ab:22:9e:
                    8d:df:31:a5:24:c6:3c:3b:06:07:0f:91:50:e0:4b:
                    85:0b:78:47:f1:b8:11:21:d7:8e:29:3b:7a:d1:5b:
                    cd:e6:8a:5c:78:13:31:2f:1d:35:76:4b:f6:99:e7:
                    55:e2:a1:ac:1c:e6:2c:3f:6c:3d:46:d7:d6:58:06:
                    1a:c5:10:7e:37:89:59:24:e1:29:3b:78:7c:20:fa:
                    fd:02:f7:9b:a2:d1:24:74:ce:c3:e1:60:24:ae:48:
                    24:54:48:9d:6c:a7:2b:f1:01:5d:cd:43:c1:19:14:
                    e1:2d:01:da:20:f5:0d:59:b2:cf:ce:7f:71:c8:07:
                    a2:0c:6a:f2:4d:69:fb:3d:61:0a:e4:3c:d6:c7:f9:
                    62:d5:33:24:75:d6:6b:5f:e9:97:05:be:c4:a3:43:
                    e8:aa:44:20:d2:e6:f4:d8:fa:25:37:f2:bc:ee:5b:
                    8f:29:78:ec:7c:80:5b:5f:c7:96:25:78:30:f1:55:
                    99:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B0:44:80:5E:69:B0:D2:0E:AE:80:75:40:8E:AA:9D:1A:21:D4:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a0bc43ad-9b47-3b7c-8911-33366b8b1775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:e9:74:1c:d4:5d:27:9e:db:3d:a6:44:b6:9b:cf:64:2d:f6:
         1f:7a:87:88:88:5f:d2:7b:dc:f2:1e:2b:71:e5:e9:ae:d1:5a:
         b4:53:8a:71:8f:76:7b:fd:9a:30:9d:b8:3a:d9:0f:4b:ee:79:
         10:39:53:09:fa:3c:e6:7d:58:f4:f0:74:f4:03:05:6a:8a:22:
         39:e6:c0:c8:37:40:e4:23:68:21:f1:05:ec:39:3a:8f:8d:2f:
         78:4e:f1:ad:51:7b:c3:ce:15:28:8b:d4:d2:a2:25:de:89:be:
         2d:a6:51:43:90:47:8f:fd:2c:3e:d8:7f:0f:5d:64:95:af:2f:
         3b:00:a3:0a:27:8a:f8:77:e5:3c:de:b5:f2:ef:5c:54:0e:11:
         93:02:92:16:d6:c6:a8:f2:52:f8:ec:fc:05:50:62:1c:bf:d7:
         6d:ad:23:6e:62:0e:91:8b:7c:6a:01:4c:71:26:b6:17:04:65:
         a9:ef:08:0a:4e:26:d9:20:b6:f7:80:2e:3f:0a:3d:2b:11:26:
         3c:8b:f0:0f:ad:99:ce:0a:1e:5e:d6:5c:81:e1:f1:da:72:05:
         1f:f6:61:3e:83:c5:f8:c2:5b:d5:8e:19:fa:7a:18:6f:24:27:
         f3:b9:c0:2e:1d:c1:9e:4b:bd:05:8a:de:d9:1b:7f:02:5d:1c:
         ab:b0:62:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:12 2025 by rpki-client