Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aaa83d8c-818f-3949-ab9a-10548a286ece.roa
File:                     aaa83d8c-818f-3949-ab9a-10548a286ece.roa (raw, json)
Hash identifier:          89LSTlCYOVDEvCtM8xNhktLyPu/TLaustIm6a/HDrw8=
Subject key identifier:   16:D9:8E:E2:AC:1F:FB:3F:95:1F:6F:8B:CB:29:CD:CC:55:CD:36:40
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584089736DDAFEF4609DCCE06D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aaa83d8c-818f-3949-ab9a-10548a286ece.roa
Signing time:             Tue 10 Jan 2023 12:00:00 +0000
ROA not before:           Tue 10 Jan 2023 12:00:00 +0000
ROA not after:            Wed 15 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        56.55.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:89:73:6d:da:fe:f4:60:9d:cc:e0:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 10 12:00:00 2023 GMT
            Not After : Feb 15 05:00:00 2023 GMT
        Subject: CN=11366e23-4cff-4df4-898f-964c5f06c75f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d8:af:a9:5e:31:68:be:f0:f4:38:c4:ec:aa:
                    df:4b:85:ce:46:1d:fe:29:c7:ba:13:2d:8f:16:1a:
                    85:f6:d4:72:b4:d8:f6:ab:8a:2a:29:9a:6d:c5:7c:
                    48:7a:3d:c0:78:59:d7:0c:1e:ab:c7:68:9f:d9:55:
                    3e:d2:8f:66:e1:de:64:85:34:06:0e:f9:e9:42:9c:
                    b5:a8:64:12:b8:e0:bd:1e:6f:c8:b6:01:c3:b9:4f:
                    eb:c2:c6:ea:a3:90:ce:d7:84:33:50:b4:bf:56:ec:
                    28:4d:f5:01:98:84:7c:df:8e:43:db:c6:a6:c6:2c:
                    09:62:89:ea:a7:fd:56:d4:a8:f0:df:fc:57:fb:68:
                    9b:fd:d0:1c:b6:ac:50:cd:35:29:c5:47:c4:69:f8:
                    cf:50:00:87:d6:64:de:6a:64:43:65:25:80:e3:13:
                    87:2a:da:c0:19:76:06:f9:38:8a:06:b3:89:9a:fb:
                    f0:d1:fe:d7:aa:42:07:62:ce:5a:83:ee:bc:3f:d8:
                    7a:7d:66:3f:d1:22:6a:2e:fc:fd:05:b3:bc:86:d8:
                    0b:8f:30:6e:aa:4a:f8:b3:6a:b3:1a:72:69:4d:d7:
                    36:2e:21:8f:17:4b:c1:2c:2b:74:d1:09:57:88:90:
                    d1:02:a9:09:dd:52:cb:79:be:ec:01:c6:42:e5:bd:
                    3c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D9:8E:E2:AC:1F:FB:3F:95:1F:6F:8B:CB:29:CD:CC:55:CD:36:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aaa83d8c-818f-3949-ab9a-10548a286ece.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.55.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:4f:60:72:9c:92:cf:28:d1:a3:e6:00:d7:52:a0:4e:54:e5:
         2c:d6:73:34:40:38:da:fe:de:df:29:1f:3f:d2:b1:c9:07:56:
         d8:e2:b9:94:9f:4d:33:e3:e5:fa:26:bb:03:ac:22:9e:96:b3:
         f4:b4:af:e4:d6:8f:85:30:c0:a2:56:f7:46:ed:0d:f9:34:b3:
         1d:b3:28:e0:84:6c:9c:b0:df:7f:2f:0a:02:5c:db:c3:ab:c0:
         29:8f:87:ee:48:1d:47:24:34:dc:98:fb:36:f6:8f:c7:ab:d7:
         99:5b:29:26:c8:48:49:9a:30:95:c3:ff:bf:16:e2:76:45:e5:
         ce:a0:ba:0a:67:19:3b:c1:18:24:c5:50:77:4c:72:04:0a:ef:
         04:74:ef:e5:1a:dc:d2:6a:4c:ba:7e:ce:52:30:91:cc:b4:b3:
         78:c7:4e:1f:1b:96:2e:80:c8:a9:9f:ed:97:9b:73:16:48:63:
         04:4d:29:84:d2:de:33:c2:1b:d6:f3:6f:b2:94:7e:7d:0e:c0:
         ad:ff:a1:83:b2:f8:49:d1:0e:46:66:02:1b:f4:3f:00:2a:b9:
         95:06:7c:45:79:74:ed:6a:00:0f:60:cb:38:f8:77:b4:92:59:
         f2:d3:05:f6:69:ff:01:0a:e8:c8:f8:44:aa:69:be:84:be:03:
         1d:bf:f8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:37 2025 by rpki-client