Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b22c418a-f527-3709-aaa2-3633c5365224.roa
File:                     b22c418a-f527-3709-aaa2-3633c5365224.roa (raw, json)
Hash identifier:          JMZhwvXsK7TW2//MTHAVMw0PqpWVKpCuRLXCHIqnFLE=
Subject key identifier:   B4:06:D3:68:3A:AE:E0:E2:D1:82:D9:58:6B:FC:1B:31:D5:44:19:A1
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584050F9EDE9FDDD219AD6A67280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b22c418a-f527-3709-aaa2-3633c5365224.roa
Signing time:             Wed 21 Dec 2022 22:15:08 +0000
ROA not before:           Wed 21 Dec 2022 22:15:08 +0000
ROA not after:            Thu 26 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        56.127.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:50:f9:ed:e9:fd:dd:21:9a:d6:a6:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 21 22:15:08 2022 GMT
            Not After : Jan 26 05:00:00 2023 GMT
        Subject: CN=e66b7992-f5a8-4ad1-90e9-9ba418b5fd78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:76:e1:be:b6:74:f5:ca:1b:32:38:c1:dc:71:
                    a4:e4:ce:8c:f7:ea:2e:00:7f:bc:d1:1d:c7:b8:4e:
                    ef:32:03:2b:b5:1a:ef:d9:b3:18:d9:6c:ae:8f:10:
                    d0:3f:81:e2:23:36:0b:ff:04:0d:b2:9c:9a:fe:a6:
                    ad:c1:b5:67:85:bf:1f:71:ba:17:7e:7d:45:94:d5:
                    64:d0:4d:2b:ba:41:29:63:b1:f4:07:ea:fd:8d:da:
                    1c:af:bf:0c:73:a4:39:0d:17:63:e0:e8:39:5d:87:
                    92:01:71:e2:84:d0:2a:c5:3d:c8:19:7f:36:73:eb:
                    86:ea:13:55:dc:06:ff:d8:db:22:a3:fe:dc:e2:4f:
                    36:b1:6d:3d:9c:ca:0a:e0:f1:04:69:4a:3d:8c:22:
                    7b:d9:18:00:d4:26:7d:d4:cd:b9:7f:29:8c:84:ba:
                    26:3a:51:61:c3:08:27:60:d1:e7:aa:9a:0d:28:64:
                    45:cd:d8:a3:6d:94:19:0a:78:19:dc:ab:e1:f5:69:
                    62:f4:ca:33:7f:7e:18:75:6d:c9:8e:91:a8:c5:c6:
                    ad:0e:e2:35:f7:20:4d:59:de:44:cb:e9:37:d8:f9:
                    a7:3b:6f:69:7e:65:e3:83:f5:0e:aa:5d:33:91:84:
                    06:26:d0:a4:7f:37:b2:48:04:de:18:b6:03:31:a3:
                    3f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:06:D3:68:3A:AE:E0:E2:D1:82:D9:58:6B:FC:1B:31:D5:44:19:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b22c418a-f527-3709-aaa2-3633c5365224.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.127.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:2f:b4:7b:46:64:08:bf:4f:53:7e:72:11:1a:5f:0a:1f:d4:
         ab:35:8f:a5:98:f6:67:d7:95:28:58:a7:c1:27:d3:50:3d:e6:
         a4:6d:bf:44:53:5b:e1:a1:46:7a:db:bb:ca:48:e0:c8:a5:56:
         76:f0:cf:89:3f:a4:2e:65:4a:53:a1:9b:a7:06:1f:b0:01:b5:
         22:e3:dc:8f:e7:84:ed:b8:82:00:c3:6e:7f:c2:50:42:bd:43:
         6c:57:bb:2a:af:f9:5a:66:d4:9d:6c:8f:d3:82:bb:f4:bf:03:
         7f:7e:38:60:25:dd:a2:8b:95:9b:c9:17:db:fc:8f:68:c3:5a:
         f8:97:69:7e:58:73:24:74:68:1c:54:3a:8a:0b:dc:8d:5c:3d:
         0f:aa:1d:b7:bf:03:37:a9:c5:65:f4:d1:70:db:79:7e:6b:94:
         c3:16:ad:1a:9d:29:ca:a1:6d:dc:52:6f:c2:f5:dd:dc:49:0a:
         bd:6d:fa:32:00:ab:ad:61:e5:a7:65:3f:f1:c7:3d:f8:d5:7e:
         67:87:eb:b2:bc:e9:83:73:c6:db:b8:1d:ae:4a:05:61:a7:90:
         2d:db:af:67:51:4f:85:bb:d2:52:ed:75:17:e2:7a:98:c5:7d:
         40:11:f7:88:2f:e9:8a:bb:7d:ff:5f:9a:e2:71:9a:f9:d9:42:
         d2:10:92:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:04 2025 by rpki-client