Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b0a8a603-b819-3a00-84b5-a31092a5cf02.roa
File:                     b0a8a603-b819-3a00-84b5-a31092a5cf02.roa (raw, json)
Hash identifier:          3CwC+jYSCxBuojK1JEZ1SmBpTE1QWfqdbuddlTbznsg=
Subject key identifier:   F7:A4:16:23:04:2C:56:96:C2:4F:B3:A0:9A:C2:E6:2D:5C:B0:AD:4A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FD905041EBDC085AAE3102D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b0a8a603-b819-3a00-84b5-a31092a5cf02.roa
Signing time:             Tue 08 Nov 2022 12:00:00 +0000
ROA not before:           Tue 08 Nov 2022 12:00:00 +0000
ROA not after:            Wed 14 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        56.43.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:d9:05:04:1e:bd:c0:85:aa:e3:10:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  8 12:00:00 2022 GMT
            Not After : Dec 14 05:00:00 2022 GMT
        Subject: CN=6c3d09b9-09b0-4105-8314-e13e6ba755e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:45:10:d9:d7:e1:a8:e8:6e:0b:07:9d:e9:c2:
                    df:27:73:66:75:2f:ab:98:11:4e:37:60:a6:33:45:
                    e9:a1:b2:d9:52:d4:a9:23:5d:66:38:4b:76:df:1e:
                    ba:72:a5:f6:0e:e4:cd:31:4f:39:e9:23:fa:4d:08:
                    db:6d:b9:15:a7:b8:5a:25:cd:95:87:97:bc:89:65:
                    7f:63:df:af:81:79:52:ac:f2:37:49:f3:e1:86:1c:
                    53:4a:9e:ec:13:1a:6d:5e:98:8b:9f:3c:67:bd:31:
                    f4:82:0c:39:6f:50:0f:dd:b1:a7:66:cd:32:d0:b4:
                    05:d9:cd:9e:01:a6:4f:79:02:09:69:c8:45:d9:25:
                    6e:d7:4d:66:f2:71:5a:10:6a:4a:03:6a:58:95:55:
                    5c:98:20:ff:2b:a0:60:f7:f0:46:1a:46:29:d6:f9:
                    c6:81:cb:ed:84:bd:9a:a3:91:67:f8:04:bc:00:20:
                    35:42:cf:7c:e6:93:5c:01:35:44:ef:be:f4:5a:16:
                    32:dc:71:f6:2e:f3:b2:c4:81:f3:30:ae:2b:df:3a:
                    25:8d:3f:29:56:83:9c:1d:27:99:35:0e:10:07:70:
                    3e:8e:a6:41:ae:12:39:b3:11:1c:93:b3:87:ce:dd:
                    45:48:e7:4f:15:85:17:5c:a4:40:bf:bf:cb:7a:ff:
                    32:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A4:16:23:04:2C:56:96:C2:4F:B3:A0:9A:C2:E6:2D:5C:B0:AD:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b0a8a603-b819-3a00-84b5-a31092a5cf02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.43.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:68:7c:3a:51:e2:44:88:0b:62:1a:60:b4:f8:97:99:7a:6a:
         d9:4c:56:7c:be:08:92:c5:96:34:d3:de:05:61:4b:bf:80:21:
         33:63:e1:8d:87:5e:71:4f:e6:dd:96:4e:52:bb:bf:aa:72:30:
         c8:d5:7d:2f:f3:81:9c:6a:98:12:f5:8e:1d:88:44:e8:49:54:
         04:8d:18:8b:08:28:7f:c5:71:29:e5:2b:33:42:5a:71:92:3d:
         27:c4:ea:20:02:7a:1d:44:62:aa:2d:63:3d:84:78:bf:a8:97:
         06:d0:60:88:8e:95:84:fd:8d:15:af:e5:f2:49:c0:fc:05:55:
         a4:c2:19:4d:f2:86:2a:cc:69:6f:66:61:ab:c7:45:e3:6d:ab:
         ce:05:d5:7b:06:de:7b:42:d5:75:af:9c:e8:7a:ad:09:79:33:
         1e:41:6d:8b:d9:53:df:f4:1f:5a:20:ae:9f:0b:12:4b:97:dd:
         57:93:15:2e:b0:f2:f8:b2:15:86:3a:c8:8d:4c:2c:4e:61:17:
         4c:a8:89:2c:48:e7:be:4c:25:b2:a8:50:01:67:47:13:d1:40:
         5a:08:8b:dd:4e:f3:97:c6:6e:10:3b:c8:9f:18:48:12:6b:7f:
         ad:b9:57:95:31:4f:a2:6b:2d:07:e0:4a:10:39:78:d4:93:e9:
         16:87:49:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:44 2025 by rpki-client