Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a348046a-425b-3834-aa37-bc8add1a2b1e.roa
File:                     a348046a-425b-3834-aa37-bc8add1a2b1e.roa (raw, json)
Hash identifier:          wcf2lQipqEZfuR2vAliChM9PWDbTOw0eJwGPnIbrT/s=
Subject key identifier:   87:EC:85:FF:54:4C:10:F9:51:7A:EF:27:CC:13:96:90:5D:2A:69:58
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DC6B4F007DB5AE67089B8F5C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a348046a-425b-3834-aa37-bc8add1a2b1e.roa
Signing time:             Mon 02 May 2022 12:00:00 +0000
ROA not before:           Mon 02 May 2022 12:00:00 +0000
ROA not after:            Tue 07 Jun 2022 04:00:00 +0000
asID:                     701
IP address blocks:        139.56.0.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:c6:b4:f0:07:db:5a:e6:70:89:b8:f5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  2 12:00:00 2022 GMT
            Not After : Jun  7 04:00:00 2022 GMT
        Subject: CN=c6a594fb-2a92-403a-bc54-6de7a2229904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:16:55:db:29:29:e1:29:08:20:28:62:07:0d:
                    34:e3:42:d8:d8:77:7c:40:8f:36:b6:41:f9:5b:37:
                    83:01:ce:33:53:59:65:76:ca:33:eb:70:5a:d4:7e:
                    25:73:0b:ac:d3:d6:c8:da:56:ec:68:88:5a:4f:01:
                    54:66:c7:be:7b:42:cb:23:78:d5:93:7f:37:3a:3f:
                    1f:8c:68:4a:a1:93:1d:f8:c4:95:41:a1:a6:cd:0a:
                    f1:60:60:3f:e2:64:ed:7f:60:23:9f:6f:fd:d3:9b:
                    92:0c:39:c4:aa:ed:f7:09:1c:60:f9:13:dc:2e:a5:
                    54:49:b3:95:da:d6:d7:a8:79:17:a3:29:1d:a4:91:
                    af:a1:59:b9:95:93:86:74:7c:0d:d9:e2:1c:c6:8d:
                    8d:38:6b:ae:b7:ed:30:bf:60:90:da:00:34:7c:88:
                    2e:f0:42:0b:db:1c:8b:b1:cc:b9:71:f3:bd:43:e2:
                    ff:d0:f3:2f:dc:fd:95:3f:d4:9a:d9:99:59:0a:de:
                    28:75:d6:cb:eb:8f:7e:5e:46:bc:60:06:35:ff:c1:
                    89:6c:2e:9d:cd:16:c4:c8:bd:b7:f9:69:ad:32:13:
                    ef:40:c9:4b:7b:08:ad:6c:11:fd:f5:b6:39:5a:eb:
                    57:f0:1b:5d:13:58:73:58:1d:71:c2:4f:75:43:a5:
                    d5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:EC:85:FF:54:4C:10:F9:51:7A:EF:27:CC:13:96:90:5D:2A:69:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a348046a-425b-3834-aa37-bc8add1a2b1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:fa:49:86:03:8d:72:99:00:f1:94:d0:08:4b:44:fc:76:2e:
         57:1c:51:74:fe:36:28:92:70:3e:95:11:c4:4d:06:0a:fd:be:
         ec:d0:c0:3e:a1:7a:dd:7a:cd:08:9f:55:91:73:a5:a7:70:6f:
         de:1f:ac:24:bf:a5:c9:d7:76:a6:34:e5:83:05:c9:a1:40:bf:
         88:6b:72:3f:3e:46:28:13:3e:b9:20:de:fe:a6:7a:18:89:89:
         d3:48:1d:49:8b:bb:33:87:b3:18:7c:d2:1e:b5:be:42:3d:f5:
         a0:c7:ff:f7:30:ee:f0:0c:56:1d:9f:b3:a2:6a:7c:88:4f:cb:
         21:dc:75:bf:37:34:5d:b7:1e:6a:98:36:23:65:44:bc:3e:4d:
         b0:74:a3:aa:2d:39:76:ca:68:1a:a3:fa:6c:63:ee:18:fe:90:
         4c:11:a1:a4:e9:76:09:d8:af:e3:2b:38:7c:72:85:53:fe:63:
         61:68:b4:3f:7d:63:c7:92:d8:9b:8f:81:c4:5e:4c:c3:bf:49:
         42:d9:ee:be:c6:c7:52:9b:74:fd:ca:2b:5d:25:9c:0b:ef:f2:
         81:27:06:6e:20:bb:a3:54:0f:40:11:cf:a0:4d:e6:94:a0:f9:
         aa:4f:50:88:a1:7b:88:d7:19:90:e9:0f:87:0c:f0:67:a8:c9:
         c0:8a:fd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:10:08 2025 by rpki-client