Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a8515e3f-b5cc-3983-bb70-428dc7d02b7a.roa
File:                     a8515e3f-b5cc-3983-bb70-428dc7d02b7a.roa (raw, json)
Hash identifier:          oCj5BXeE3cm4jgfROCj7GvIZmSg77FuLsP8zdLrQKTI=
Subject key identifier:   DB:68:0E:E9:6D:D3:D5:41:34:A7:F6:94:64:21:87:3B:B1:A8:63:EE
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584011342DFCECEBBF145E304C78
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a8515e3f-b5cc-3983-bb70-428dc7d02b7a.roa
Signing time:             Mon 28 Nov 2022 12:00:00 +0000
ROA not before:           Mon 28 Nov 2022 12:00:00 +0000
ROA not after:            Tue 03 Jan 2023 05:00:00 +0000
asID:                     6167
IP address blocks:        139.56.0.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:11:34:2d:fc:ec:eb:bf:14:5e:30:4c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 28 12:00:00 2022 GMT
            Not After : Jan  3 05:00:00 2023 GMT
        Subject: CN=e22fc513-7599-4cf6-a397-199b77318a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c5:85:97:c5:a8:58:bb:a7:67:62:f7:3c:08:
                    21:f0:f1:7a:55:c3:4a:7f:a6:dd:50:a0:32:71:36:
                    c9:4d:50:9e:88:87:cb:0a:d3:00:b8:32:01:76:98:
                    7f:20:60:a6:ee:3c:4b:a4:cb:82:dc:81:43:90:be:
                    96:0a:e3:7d:ba:7a:ee:30:6a:e5:87:b2:09:81:d8:
                    2c:df:5a:44:3a:e3:b5:56:bb:88:d9:e1:18:e2:ca:
                    6e:4a:02:d3:3f:3a:12:91:02:f4:7a:f4:85:a6:01:
                    9d:72:eb:df:77:8b:cf:92:8c:f8:8c:ba:91:f1:32:
                    f0:75:b2:ec:cf:30:aa:fd:f7:ab:7c:0b:3e:ad:e2:
                    b7:d1:83:ba:bd:73:d6:a0:35:46:18:27:3e:c7:da:
                    36:fb:2e:7d:6d:22:3b:ee:9c:43:01:69:ab:94:ea:
                    35:36:10:33:c2:8a:0e:c3:14:de:5a:8b:e7:04:95:
                    49:03:b8:b0:3c:47:9f:b7:b3:7f:26:9b:36:94:ec:
                    08:bf:56:a6:09:df:1b:f4:17:f0:46:23:1d:96:bd:
                    7e:7b:ac:1e:d6:3c:2d:09:9c:ef:87:17:f9:fe:dd:
                    6c:d5:00:78:f0:9c:ac:d4:bc:d4:ff:4b:85:8c:e1:
                    6f:41:aa:01:1d:54:fb:f4:95:1d:5b:54:72:23:8b:
                    c5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:68:0E:E9:6D:D3:D5:41:34:A7:F6:94:64:21:87:3B:B1:A8:63:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a8515e3f-b5cc-3983-bb70-428dc7d02b7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:4b:3c:8d:5f:c8:6a:0a:be:52:94:fe:e3:56:3f:22:e0:3f:
         92:2f:5f:d1:97:e6:6a:0a:1f:f8:45:79:bc:ec:cc:1a:28:89:
         81:9c:c8:63:61:40:3a:30:6d:19:d2:ca:1f:67:af:a2:62:b2:
         ff:2a:ae:02:a4:05:11:aa:3a:ec:1f:97:ee:d2:66:8f:ac:14:
         68:3a:c2:3a:59:46:0a:82:8c:58:d1:e8:12:fe:90:13:b6:99:
         f6:b1:ea:47:83:8a:8e:b0:42:32:fd:38:1d:4c:73:01:c3:70:
         a3:a8:4e:a8:99:94:58:cc:50:e6:d4:98:f9:7c:b8:4e:ce:c6:
         52:02:5f:5e:f1:87:df:db:66:92:33:e1:98:43:da:ba:0e:b5:
         43:52:fa:d2:e0:35:7e:44:ec:28:b6:e6:b6:20:9f:3c:df:0f:
         5a:8e:5e:d4:33:f9:0d:d0:77:3b:39:29:0b:b0:1f:3b:31:3a:
         52:b7:33:53:42:8b:e6:78:8c:d3:85:b6:85:2f:a1:13:d1:4e:
         0a:37:5b:24:03:e3:14:56:ce:d1:04:aa:77:17:be:70:de:bc:
         d7:8e:0f:2b:3a:74:c3:33:17:68:ad:30:ee:ee:7f:db:66:df:
         98:f2:ac:73:a5:1f:e3:34:f0:94:10:26:75:20:70:0a:fb:54:
         dd:8f:05:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:02 2025 by rpki-client