Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a62104c2-7d53-3db9-a104-1236bb657026.roa
File:                     a62104c2-7d53-3db9-a104-1236bb657026.roa (raw, json)
Hash identifier:          +OuisPS+khFKGHNZ0dztlq5Qc1edAaXwb2ZpSe+ZRqs=
Subject key identifier:   C4:81:83:65:3C:70:78:48:72:E0:13:30:86:9E:3A:EE:B5:11:D6:8E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FB46FC12CC0176F0532955000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a62104c2-7d53-3db9-a104-1236bb657026.roa
Signing time:             Wed 26 Oct 2022 12:00:00 +0000
ROA not before:           Wed 26 Oct 2022 12:00:00 +0000
ROA not after:            Thu 01 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        56.125.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b4:6f:c1:2c:c0:17:6f:05:32:95:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 26 12:00:00 2022 GMT
            Not After : Dec  1 05:00:00 2022 GMT
        Subject: CN=f6a240c8-f8a8-47d1-bb75-832e5c094e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:71:f1:df:82:e3:8c:da:d0:49:f2:e0:e0:97:
                    c4:b1:39:48:42:19:11:8b:f9:8a:a3:37:3b:b6:2e:
                    d1:eb:70:68:a8:ae:79:32:28:ed:c5:ac:b2:5f:f8:
                    dd:26:3b:22:2b:d3:57:65:b4:bc:58:b9:70:f9:49:
                    f0:e6:19:ac:53:01:a4:8d:35:d2:cc:9f:f8:9c:58:
                    44:12:b3:53:95:02:c8:48:bd:6b:c1:80:cf:f1:bb:
                    76:3d:31:75:1f:ef:2f:0e:f7:93:12:fb:10:54:30:
                    30:67:a1:e2:17:e8:28:72:0f:c8:15:53:33:22:33:
                    92:39:1a:98:ac:c1:50:9b:a3:08:ed:91:9d:5a:0b:
                    ec:f2:81:42:d2:6d:34:b5:f5:c9:09:e1:bd:43:01:
                    77:fe:42:00:2a:32:3c:56:a9:86:e1:93:b1:63:d4:
                    a4:82:cc:b5:62:5e:df:ef:51:13:37:a0:0e:5d:e2:
                    ac:37:c2:06:2d:a6:2a:95:17:6d:4e:47:a2:49:fe:
                    ec:3c:0e:1c:cf:2c:17:2e:ea:77:26:da:b7:1f:86:
                    af:da:6b:27:02:2b:fd:a7:62:0e:29:9a:a1:59:69:
                    36:91:60:73:9d:40:ed:1f:05:9b:65:27:e1:f9:5c:
                    48:24:c7:03:52:0d:06:22:b1:ba:56:28:62:de:36:
                    60:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:81:83:65:3C:70:78:48:72:E0:13:30:86:9E:3A:EE:B5:11:D6:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a62104c2-7d53-3db9-a104-1236bb657026.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.125.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:41:31:b7:cc:e9:cc:1c:51:99:3c:c4:ae:4f:68:46:77:7c:
         45:27:62:bf:d3:8c:7b:ab:4f:b9:89:c0:f2:7f:0e:b5:f4:85:
         f1:82:19:3b:b3:1b:e2:6d:24:86:15:37:03:6c:f2:23:cf:dc:
         63:09:98:ed:52:af:5a:f0:b9:38:d2:91:15:25:b2:51:f2:83:
         98:fb:a7:d8:54:3b:3e:75:7e:94:26:10:bc:bc:e5:e4:82:a6:
         dd:61:e4:90:f7:80:98:bc:69:98:87:b3:02:ee:ed:ca:5d:a5:
         90:dd:70:bc:b7:a6:e7:48:b5:07:20:24:e1:69:e9:3c:16:ae:
         27:6b:f9:60:15:47:3e:77:02:4e:4f:69:a8:2e:88:89:fc:1f:
         79:02:04:35:dd:70:79:64:26:97:9f:b3:5c:7e:27:42:c6:a0:
         59:56:d1:19:56:94:33:01:15:36:73:e7:f1:48:76:45:d6:41:
         0f:80:94:17:ae:13:2c:87:81:24:69:1c:7b:03:c8:86:9e:b5:
         7c:8b:57:98:c2:31:1d:c6:0e:fb:79:99:a2:53:0b:6f:a6:15:
         60:f2:5a:69:5f:ba:d9:f1:09:47:25:1b:ac:aa:64:5e:94:86:
         6a:d3:99:b2:47:1a:a3:73:d5:f7:78:28:74:1d:f3:01:c0:3b:
         57:c7:61:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:54:25 2025 by rpki-client