Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bcb41088-e5e5-35e3-b422-30bbe7f58011.roa
File:                     bcb41088-e5e5-35e3-b422-30bbe7f58011.roa (raw, json)
Hash identifier:          eQlbY4W1GORGdNw7pK1cSSQ7A+2osfBZ6jnz3wIiefY=
Subject key identifier:   A4:BF:57:BD:1B:94:D4:F8:33:70:DC:7C:80:86:73:67:9E:1F:1D:BC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584085F649716582ADF16A3B2F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bcb41088-e5e5-35e3-b422-30bbe7f58011.roa
Signing time:             Mon 09 Jan 2023 12:00:00 +0000
ROA not before:           Mon 09 Jan 2023 12:00:00 +0000
ROA not after:            Tue 14 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        139.56.2.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:85:f6:49:71:65:82:ad:f1:6a:3b:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  9 12:00:00 2023 GMT
            Not After : Feb 14 05:00:00 2023 GMT
        Subject: CN=6163dfd7-5133-44f7-9b47-6c1bcba2982e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b0:99:cd:2d:35:b8:eb:dc:78:2d:8a:49:33:
                    19:17:d9:5d:95:7e:bf:f1:37:a0:ad:88:28:34:74:
                    01:93:03:70:d7:a4:7e:12:46:ee:57:d8:63:81:65:
                    d4:a7:b9:2d:35:b6:d9:0d:36:c0:35:9f:44:bb:c4:
                    88:f5:63:3a:83:f8:62:97:6b:33:76:5d:f6:54:e7:
                    6c:f1:a1:6d:e9:0f:8d:1c:20:2c:10:9d:18:d4:81:
                    04:43:5a:fc:68:e1:a2:4f:9a:ae:3f:7f:d6:e3:9e:
                    7b:ef:48:c1:fb:f2:51:1b:45:3e:3a:91:d2:35:04:
                    c4:2a:d0:d6:34:40:d6:03:63:06:4d:a1:86:dc:4b:
                    8f:56:51:9f:19:dd:1d:89:e8:be:e9:4f:9f:99:ce:
                    0b:4b:1b:c7:ac:6b:24:eb:3a:6f:e6:48:5a:ab:94:
                    1c:ed:6e:16:4b:3a:1a:a9:f0:2e:82:d8:06:0e:a5:
                    3e:24:61:db:a5:ae:b8:94:fe:ab:5c:0b:d2:7b:7a:
                    ee:0f:3d:69:7d:2a:33:51:a2:dd:23:19:f3:c5:eb:
                    a9:ee:54:10:dd:8d:f4:a0:ed:86:38:f8:8e:a8:a5:
                    0b:17:b4:f1:99:77:24:93:27:f2:66:d0:5b:da:e7:
                    98:d5:76:9e:4b:31:15:8d:d8:8f:c8:44:4e:a3:d0:
                    fb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BF:57:BD:1B:94:D4:F8:33:70:DC:7C:80:86:73:67:9E:1F:1D:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bcb41088-e5e5-35e3-b422-30bbe7f58011.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:31:27:a7:43:6e:5c:52:f6:bb:bd:0a:af:0c:55:66:c0:97:
         f0:61:6d:ae:6d:e1:1d:3c:70:c2:b6:33:fd:c2:3d:fa:6c:9c:
         b1:ff:af:03:ed:0b:cb:7a:4d:bf:38:39:9d:e0:b0:11:04:01:
         05:c6:bc:6a:31:15:9e:1b:25:b9:b4:76:40:09:1e:8b:42:5e:
         d3:e8:a1:c3:bc:f1:d5:2f:70:fc:5a:85:7a:b7:fe:89:6d:7e:
         9a:1f:f8:86:b5:6c:d6:f9:43:56:33:0b:2d:fe:b8:3e:b4:43:
         11:68:94:3a:12:21:67:6b:62:73:0c:60:4e:11:21:97:f5:f7:
         00:e1:29:d4:b1:27:40:e7:f5:dd:6e:aa:c2:52:2d:84:96:c1:
         18:72:a8:e5:ad:16:fc:ca:d6:69:a0:f7:be:27:16:1d:72:01:
         0e:a3:6c:be:36:cf:05:8d:93:de:76:53:cb:5f:c7:20:4b:78:
         8d:fc:aa:d6:bf:ce:29:89:55:f9:6e:48:0d:0c:71:cb:0f:a9:
         1f:40:4e:d0:42:b7:0e:d3:66:b2:b8:1b:4a:a0:61:ed:fd:59:
         fb:88:1e:47:32:15:9d:3e:1a:3e:18:34:b6:0f:13:24:3c:89:
         67:be:e6:2c:3d:f6:63:e9:cb:55:e8:8d:96:75:89:1e:ff:ab:
         2a:c3:93:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWECF9klxZYKt8Wo7LwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEwOTEyMDAwMFoXDTIzMDIxNDA1MDAwMFowLzEtMCsGA1UEAxMk
NjE2M2RmZDctNTEzMy00NGY3LTliNDctNmMxYmNiYTI5ODJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7CZzS01uOvceC2KSTMZF9ldlX6/8TegrYgo
NHQBkwNw16R+EkbuV9hjgWXUp7ktNbbZDTbANZ9Eu8SI9WM6g/hil2szdl32VOds
8aFt6Q+NHCAsEJ0Y1IEEQ1r8aOGiT5quP3/W455770jB+/JRG0U+OpHSNQTEKtDW
NEDWA2MGTaGG3EuPVlGfGd0diei+6U+fmc4LSxvHrGsk6zpv5khaq5Qc7W4WSzoa
qfAugtgGDqU+JGHbpa64lP6rXAvSe3ruDz1pfSozUaLdIxnzxeup7lQQ3Y30oO2G
OPiOqKULF7TxmXckkyfyZtBb2ueY1XaeSzEVjdiPyEROo9D7GQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKS/V70blNT4M3DcfICGc2eeHx28MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYmNiNDEwODgtZTVlNS0z
NWUzLWI0MjItMzBiYmU3ZjU4MDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAizgCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFsxJ6dDblxS9ru9Cq8MVWbAl/Bhba5t4R08cMK2M/3CPfpsnLH/rwPt
C8t6Tb84OZ3gsBEEAQXGvGoxFZ4bJbm0dkAJHotCXtPoocO88dUvcPxahXq3/olt
fpof+Ia1bNb5Q1YzCy3+uD60QxFolDoSIWdrYnMMYE4RIZf19wDhKdSxJ0Dn9d1u
qsJSLYSWwRhyqOWtFvzK1mmg974nFh1yAQ6jbL42zwWNk952U8tfxyBLeI38qta/
zimJVfluSA0MccsPqR9ATtBCtw7TZrK4G0qgYe39WfuIHkcyFZ0+Gj4YNLYPEyQ8
iWe+5iw99mPpy1XojZZ1iR7/qyrDk/c=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:29 2025 by rpki-client