Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a22ff498-1f8e-3fae-9955-553ad31f3dfb.roa
File:                     a22ff498-1f8e-3fae-9955-553ad31f3dfb.roa (raw, json)
Hash identifier:          SB7/llwSExffqm+hN2+Zd0Xzk1XAJcd3oP2cZyxdsjc=
Subject key identifier:   E6:D8:79:39:BB:2C:F0:87:52:B6:F3:84:A4:3D:37:D2:3A:25:5C:81
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E14EEAE72C3628EAB085DA658
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a22ff498-1f8e-3fae-9955-553ad31f3dfb.roa
Signing time:             Mon 30 May 2022 12:00:00 +0000
ROA not before:           Mon 30 May 2022 12:00:00 +0000
ROA not after:            Tue 05 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        139.56.0.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:14:ee:ae:72:c3:62:8e:ab:08:5d:a6:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 30 12:00:00 2022 GMT
            Not After : Jul  5 04:00:00 2022 GMT
        Subject: CN=60f4786d-15c8-43fc-aa2f-a5598a95faf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5a:c3:50:6a:7d:57:e1:c3:8b:f7:b2:1f:83:
                    77:50:cb:b4:d0:39:7c:59:11:47:f2:b0:1d:19:6f:
                    8e:65:de:b9:07:d0:ab:35:c0:24:29:2a:4b:99:11:
                    cc:c1:cc:39:fb:95:a8:b9:f1:18:6c:f2:b2:a7:45:
                    47:10:22:3c:f2:3c:a2:a0:bf:79:2d:d5:46:dd:bc:
                    b9:62:62:96:69:57:a1:1a:79:20:34:a4:fc:aa:d9:
                    60:d1:8c:57:45:9c:c7:1c:6b:4f:1f:9c:a0:a2:d6:
                    ff:b8:cf:1b:11:53:17:cd:d0:8b:4c:f3:80:7e:7f:
                    83:be:5f:61:1a:8d:84:55:f3:5b:3c:37:27:fb:c4:
                    e0:e3:02:6e:1d:09:38:49:4d:2e:31:7e:c4:60:a3:
                    ee:6e:7b:18:83:c7:75:75:76:05:cf:9f:8f:3f:5a:
                    0f:19:5a:c4:57:03:db:03:cf:0b:5e:76:62:14:a6:
                    12:49:b2:1e:ce:28:0a:4f:fc:70:a8:bb:38:15:92:
                    2f:cb:e7:8f:29:bb:e8:fc:18:90:63:d5:34:38:19:
                    a3:76:15:ba:46:e0:ba:dc:ea:54:80:24:aa:04:0b:
                    23:40:da:8c:21:d4:8f:e8:4f:3e:fe:9c:09:62:4b:
                    9f:e3:3a:81:c3:4c:01:8a:fe:c8:8b:4c:17:06:cd:
                    12:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D8:79:39:BB:2C:F0:87:52:B6:F3:84:A4:3D:37:D2:3A:25:5C:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a22ff498-1f8e-3fae-9955-553ad31f3dfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:a2:27:d6:fe:46:3d:70:fb:d9:34:70:50:99:33:ec:1f:24:
         a7:39:4d:29:d1:d8:eb:0e:47:1d:02:c2:bd:d4:a2:a0:e5:d3:
         50:2a:47:5c:d4:dd:57:60:2e:37:cc:67:da:12:b8:38:61:ff:
         53:66:fb:76:0b:85:ed:23:09:22:82:37:36:3e:27:96:17:d9:
         47:86:c4:06:a1:3e:9f:c7:68:c1:15:64:2a:c3:93:f8:8f:48:
         50:d4:54:58:b8:e3:ba:87:63:06:d0:af:49:f9:97:31:11:af:
         26:ec:90:2e:d4:7a:7f:dd:bd:3e:e0:5e:4f:10:90:b4:de:03:
         90:7c:ab:0a:de:47:6a:0e:98:8b:f7:76:d9:70:55:6e:62:84:
         8b:9c:f2:db:d8:f8:e3:a6:df:55:39:20:ee:60:59:d2:6c:96:
         63:8a:2e:ca:50:46:e4:91:44:af:cc:29:2f:5c:89:54:99:32:
         4b:57:bd:02:20:75:a3:66:f7:6d:d0:d1:c7:e0:b7:04:3a:eb:
         73:6e:2f:38:0a:8a:01:55:aa:a1:84:7f:80:ff:37:ca:1b:30:
         ed:d1:6e:a2:a4:b5:0e:95:ed:b7:56:2f:94:12:88:c6:9c:c5:
         76:be:f1:66:d7:10:e9:7a:cf:f5:44:13:2a:d0:fc:38:42:61:
         2f:0c:c1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:42 2025 by rpki-client