Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b2e60fd0-10b2-37df-bff3-d6feb354fd26.roa
File:                     b2e60fd0-10b2-37df-bff3-d6feb354fd26.roa (raw, json)
Hash identifier:          xL6JkHpAv43bPukvuDbVOWKPO/2OLVo1G6/+DrrnpRs=
Subject key identifier:   65:44:55:43:9D:C1:6A:25:E6:0F:63:9B:7C:AD:A8:DD:B5:DC:0A:27
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F8E83FC06A60C2D42C143DF78
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b2e60fd0-10b2-37df-bff3-d6feb354fd26.roa
Signing time:             Wed 12 Oct 2022 12:00:00 +0000
ROA not before:           Wed 12 Oct 2022 12:00:00 +0000
ROA not after:            Thu 17 Nov 2022 05:00:00 +0000
asID:                     22394
IP address blocks:        139.56.10.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:8e:83:fc:06:a6:0c:2d:42:c1:43:df:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 12 12:00:00 2022 GMT
            Not After : Nov 17 05:00:00 2022 GMT
        Subject: CN=9904c414-6948-45b0-8924-6f182fc203cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c9:9f:6e:5b:e7:6c:ff:39:84:4f:3e:b0:b5:
                    7a:45:1b:75:5e:33:b2:4e:94:e1:8c:76:6d:f4:60:
                    b6:32:72:47:ab:d0:bb:0b:0b:97:3c:65:52:c5:7c:
                    93:b0:d9:8e:d9:6d:32:a0:b7:5e:9e:ff:d8:9a:30:
                    e4:8e:71:4a:35:67:cb:87:c0:6e:ad:b8:9e:de:5a:
                    00:cc:e5:b1:41:a9:3c:f3:01:11:9c:4e:fd:e2:d1:
                    79:19:ae:0c:52:7e:4d:07:a5:f8:fa:b5:1c:6d:79:
                    26:3b:71:4a:5c:3d:2a:cd:ae:2d:10:27:c4:fc:d5:
                    22:97:7a:e5:d4:fd:f9:fc:4b:dd:b5:9c:20:6e:66:
                    94:78:48:49:8a:bc:e0:3d:d1:2a:7a:5d:99:5b:d9:
                    c3:c8:37:f3:ec:fc:e6:93:b5:07:d7:bd:68:f2:9a:
                    02:fd:62:cc:3a:81:a8:9d:d8:0d:0f:e8:8b:cd:aa:
                    d1:e7:d1:49:89:d1:b4:b4:00:46:3c:66:58:54:9f:
                    85:73:bf:c2:e7:6e:42:37:38:04:e3:0d:c5:73:98:
                    93:91:40:d1:cb:ef:b7:de:52:d1:69:31:01:d4:d8:
                    04:92:87:c2:ac:a3:97:4a:4e:3f:53:78:32:f8:63:
                    e3:cd:87:0c:b1:a9:b7:b5:a5:58:57:b5:19:22:42:
                    b1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:44:55:43:9D:C1:6A:25:E6:0F:63:9B:7C:AD:A8:DD:B5:DC:0A:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b2e60fd0-10b2-37df-bff3-d6feb354fd26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:a0:ab:03:c8:10:87:a4:68:e9:60:54:be:1d:71:91:be:99:
         6b:dc:22:d1:53:ef:93:17:02:2d:eb:34:c0:55:8f:87:db:8a:
         39:64:dc:59:8e:df:d9:4a:6d:5f:95:13:fb:1d:87:d2:83:1d:
         0b:d0:93:e3:f6:d6:91:cb:1a:51:0d:f2:34:fa:e8:5a:56:e4:
         5d:80:51:27:82:99:cb:32:ca:a7:92:9e:02:b8:3a:e3:54:29:
         10:61:f2:61:41:5c:78:e6:12:25:45:2f:4a:0b:fd:25:4a:20:
         e1:c5:27:dd:b9:fc:ca:32:02:7e:c7:58:41:c4:0b:fb:99:80:
         b1:68:77:33:5d:7f:be:97:a4:ed:08:11:70:a5:90:9b:b9:7a:
         49:5d:b9:2f:3f:95:1e:71:bc:d3:e9:78:59:24:7e:b4:14:10:
         9d:6f:1e:0a:e2:a1:e1:c9:ce:84:08:ad:e8:91:1e:07:d8:58:
         ae:a2:c9:74:fb:93:f1:16:68:27:64:6a:40:9b:f4:24:2d:f7:
         a3:aa:0d:75:ea:ea:73:55:74:74:23:ce:3e:7b:cf:d9:3e:94:
         78:4a:f3:e3:bd:09:aa:fd:87:4b:2f:8c:b6:47:3b:26:f2:58:
         98:d8:25:4e:38:62:3c:43:41:f4:34:de:63:8a:be:e1:a8:20:
         63:9f:f6:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD+Og/wGpgwtQsFD33gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAxMjEyMDAwMFoXDTIyMTExNzA1MDAwMFowLzEtMCsGA1UEAxMk
OTkwNGM0MTQtNjk0OC00NWIwLTg5MjQtNmYxODJmYzIwM2NiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksmfblvnbP85hE8+sLV6RRt1XjOyTpThjHZt
9GC2MnJHq9C7CwuXPGVSxXyTsNmO2W0yoLdenv/YmjDkjnFKNWfLh8Burbie3loA
zOWxQak88wERnE794tF5Ga4MUn5NB6X4+rUcbXkmO3FKXD0qza4tECfE/NUil3rl
1P35/EvdtZwgbmaUeEhJirzgPdEqel2ZW9nDyDfz7Pzmk7UH171o8poC/WLMOoGo
ndgND+iLzarR59FJidG0tABGPGZYVJ+Fc7/C525CNzgE4w3Fc5iTkUDRy++33lLR
aTEB1NgEkofCrKOXSk4/U3gy+GPjzYcMsam3taVYV7UZIkKxEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGVEVUOdwWol5g9jm3ytqN213AonMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYjJlNjBmZDAtMTBiMi0z
N2RmLWJmZjMtZDZmZWIzNTRmZDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBizgKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAigqwPIEIekaOlgVL4dcZG+mWvcItFT75MXAi3rNMBVj4fbijlk3FmO
39lKbV+VE/sdh9KDHQvQk+P21pHLGlEN8jT66FpW5F2AUSeCmcsyyqeSngK4OuNU
KRBh8mFBXHjmEiVFL0oL/SVKIOHFJ925/MoyAn7HWEHEC/uZgLFodzNdf76XpO0I
EXClkJu5eklduS8/lR5xvNPpeFkkfrQUEJ1vHgrioeHJzoQIreiRHgfYWK6iyXT7
k/EWaCdkakCb9CQt96OqDXXq6nNVdHQjzj57z9k+lHhK8+O9Car9h0svjLZHOyby
WJjYJU44YjxDQfQ03mOKvuGoIGOf9vg=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:31:02 2025 by rpki-client