Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a9ddd40d-cf60-3614-9499-406d4e524901.roa
File:                     a9ddd40d-cf60-3614-9499-406d4e524901.roa (raw, json)
Hash identifier:          +j2gARfXv6N6mxvAs5pDhzOiaPiCP7/cTgUzIuI6cfk=
Subject key identifier:   A7:75:3C:43:CF:ED:16:15:91:4C:F8:D8:E9:E8:40:3A:AA:D5:51:5C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E562908B9D8AFD24CEDB2E500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a9ddd40d-cf60-3614-9499-406d4e524901.roa
Signing time:             Wed 22 Jun 2022 19:27:07 +0000
ROA not before:           Wed 22 Jun 2022 19:27:07 +0000
ROA not after:            Thu 28 Jul 2022 04:00:00 +0000
asID:                     6167
IP address blocks:        139.56.8.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:56:29:08:b9:d8:af:d2:4c:ed:b2:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 22 19:27:07 2022 GMT
            Not After : Jul 28 04:00:00 2022 GMT
        Subject: CN=ed7c807e-a54c-4835-bac6-685c7b6dc2ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:43:13:d6:38:e7:fa:59:50:f3:29:89:e1:16:
                    cf:a3:d7:5c:f2:9f:f8:7b:4e:00:93:9f:89:b1:9c:
                    89:d0:8a:f7:fb:89:6f:cb:f3:81:02:15:c3:d0:58:
                    1f:d8:27:cb:f0:1e:b9:f0:ae:4f:b6:fc:fd:c5:ef:
                    5f:3f:8c:f1:f2:dc:00:60:7d:64:77:f8:81:be:a6:
                    13:c2:40:e3:68:f0:57:6c:4b:66:cf:a1:f7:fe:46:
                    a3:b4:9b:ea:9b:c5:b1:e9:c6:df:4d:28:2c:15:7f:
                    1b:93:43:26:9a:b9:58:58:1c:64:81:58:08:46:32:
                    99:0b:4d:db:19:fe:05:25:3d:af:3d:41:04:1e:a0:
                    bb:bb:76:1b:38:31:e0:a2:c0:58:66:69:f1:e8:c8:
                    15:53:87:6f:ad:2b:2b:2d:da:2a:88:13:41:5a:82:
                    94:fc:33:30:42:1f:74:8d:fe:c4:ab:5b:89:1a:cf:
                    db:43:58:78:34:76:2d:18:fe:37:92:e9:7b:48:67:
                    93:aa:60:1d:28:0c:08:70:1f:b5:40:3b:9c:b2:e7:
                    9c:9d:64:49:be:21:37:1e:1d:8b:1c:50:8c:94:02:
                    c0:3d:fc:1a:de:12:07:4e:45:63:0c:ba:18:fa:ea:
                    c7:4a:98:0b:d0:cb:21:b8:d0:f3:97:cd:ee:68:2d:
                    db:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:75:3C:43:CF:ED:16:15:91:4C:F8:D8:E9:E8:40:3A:AA:D5:51:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a9ddd40d-cf60-3614-9499-406d4e524901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:74:06:b4:19:f4:70:81:96:1e:53:58:40:c2:5e:75:90:96:
         90:c5:8c:d1:69:40:82:32:06:68:9a:53:a0:5c:e7:9a:2b:78:
         11:65:9b:ae:a7:4b:89:7b:13:29:7f:9c:38:ca:22:9d:77:97:
         6e:61:96:f1:ab:e9:9b:02:9a:7d:29:07:ea:28:71:48:85:d0:
         e3:06:db:d1:d0:15:d9:9e:b4:ce:c4:74:1c:a3:c8:9a:78:90:
         11:ab:bd:22:05:b3:a8:77:75:7d:8d:a3:ee:7c:bf:56:d0:ee:
         2f:12:27:3b:da:d3:a6:bd:c3:8c:77:ec:8e:5e:3c:c4:06:c0:
         2b:c9:21:b6:80:1c:2c:8e:a4:0f:5b:9e:31:4b:ff:cf:ec:60:
         da:31:45:cd:da:03:10:c5:eb:f5:57:45:d9:fd:57:27:6b:d8:
         52:6a:c8:2b:ab:2a:08:9d:32:52:cf:0b:4f:2a:be:ac:d8:81:
         2f:eb:aa:3a:f5:d7:db:a1:f8:89:61:15:06:be:41:fc:80:53:
         3a:b4:31:89:0b:b9:5e:d4:38:6a:05:4b:5b:d0:9c:78:6f:f6:
         43:98:98:5b:6b:47:33:57:84:aa:79:8c:dd:e6:23:dd:0c:79:
         25:40:f4:da:78:23:76:e6:2b:ab:3d:8f:51:35:b3:f4:08:6c:
         f4:55:35:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:00:58 2025 by rpki-client