Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a61deba2-4bd3-3b9c-ab80-b41fcc327f8f.roa
File:                     a61deba2-4bd3-3b9c-ab80-b41fcc327f8f.roa (raw, json)
Hash identifier:          iP6W0Gr9zwpYkwWC37zajXlqZBO//0b8heJVzkrKecA=
Subject key identifier:   BF:1E:58:02:B0:3A:36:CD:E8:B6:C7:F2:7F:EF:AC:97:C0:8B:C0:B1
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FC2B706A710C131D7984D0040
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a61deba2-4bd3-3b9c-ab80-b41fcc327f8f.roa
Signing time:             Mon 31 Oct 2022 12:00:00 +0000
ROA not before:           Mon 31 Oct 2022 12:00:00 +0000
ROA not after:            Tue 06 Dec 2022 05:00:00 +0000
asID:                     22394
IP address blocks:        139.56.1.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c2:b7:06:a7:10:c1:31:d7:98:4d:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 31 12:00:00 2022 GMT
            Not After : Dec  6 05:00:00 2022 GMT
        Subject: CN=4d314e86-be11-411c-b3f4-6ee8e132f85b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c0:e8:34:de:f7:3b:e4:97:95:22:2a:84:09:
                    cd:15:79:3e:89:a6:e7:1c:34:d9:c5:f1:31:de:c9:
                    a0:16:3d:5d:37:c9:be:61:68:01:3d:81:65:4c:61:
                    ba:16:bc:1e:8a:37:47:68:d8:2b:a4:49:ba:a7:66:
                    fd:e5:be:47:b4:9d:38:ca:a4:c5:ca:dc:de:54:f4:
                    39:35:14:2b:8d:bf:88:d7:99:38:50:e1:5f:16:99:
                    a9:24:92:92:5e:a2:18:d1:31:cc:4d:19:59:13:e6:
                    0e:29:e0:1f:88:75:00:e1:1c:61:bc:ef:37:a8:fa:
                    3c:7b:12:1a:fe:e5:3b:92:6b:87:2d:41:ee:11:3f:
                    bc:99:80:23:10:a1:a7:22:a3:89:22:fd:72:eb:2a:
                    8a:55:f8:b5:1d:46:19:73:3d:c7:5e:9a:52:bc:b6:
                    36:2c:85:cf:f3:e9:bf:38:b5:0a:8b:1c:13:90:17:
                    7c:2b:97:08:35:d8:a2:61:dc:8c:6f:f9:f1:19:d9:
                    de:16:52:47:bb:ca:19:28:d8:56:f1:69:12:d9:a3:
                    69:f9:76:96:79:ae:c9:7d:7b:a9:b9:75:d5:41:e0:
                    dc:8f:1a:c1:9d:a7:9c:c6:1e:47:ed:a8:ce:1d:fa:
                    5e:f4:78:1d:b7:eb:a5:2c:0e:dd:88:3d:7b:81:1a:
                    dd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:1E:58:02:B0:3A:36:CD:E8:B6:C7:F2:7F:EF:AC:97:C0:8B:C0:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a61deba2-4bd3-3b9c-ab80-b41fcc327f8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:1c:af:f5:12:1d:f6:67:ce:1f:dc:6e:59:77:ce:e9:fe:d9:
         03:da:0d:11:03:de:17:89:6c:53:a9:ff:0f:8f:33:d7:79:61:
         69:7e:18:2b:40:83:07:60:92:3c:d1:d5:1c:34:3c:0d:90:42:
         25:fd:db:dc:5e:4a:e0:d4:41:65:e5:50:9e:06:8a:02:9b:71:
         94:1b:ae:23:bb:c7:e9:8f:84:1a:98:cf:bc:69:85:c2:3b:d9:
         cd:27:9f:4d:ba:11:38:c5:78:d2:fa:5c:a8:56:9f:00:26:e7:
         75:16:6b:9c:eb:9d:fd:e7:a5:fa:0f:91:be:bb:1d:3d:d7:72:
         11:a1:02:45:8f:b1:21:b0:48:05:97:7c:06:d9:31:2f:9a:b0:
         6d:29:f4:5c:37:34:ec:35:61:fe:45:81:fc:98:07:4c:69:06:
         80:f4:ec:f9:c3:f4:ec:c9:7f:99:46:d2:38:a7:2a:41:65:e1:
         50:28:e3:a1:fa:d8:4b:c4:7d:c5:89:4f:f5:80:c9:35:3e:5d:
         e4:3c:3d:f0:f2:ad:66:e6:6f:24:c2:d8:10:5c:2e:c1:65:9e:
         07:6a:62:dc:1c:ae:49:ea:5b:b8:be:62:58:b3:53:35:fd:45:
         02:f9:20:a7:3c:fc:06:1d:bf:37:38:96:8f:41:7b:8d:72:a9:
         97:16:7b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:12:11 2025 by rpki-client