Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c1ce1b46-3551-3293-8fe6-9ee4e407b2f3.roa
File:                     c1ce1b46-3551-3293-8fe6-9ee4e407b2f3.roa (raw, json)
Hash identifier:          BSBJgigtkE0GFWM3ff+71V2VxgETJ2iNbaq3bxPA2vg=
Subject key identifier:   94:E5:83:ED:8C:E1:CE:DE:A5:66:FB:1F:B9:74:6B:A6:30:75:AD:44
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584088CFE491EDBD89C26BA72ED0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c1ce1b46-3551-3293-8fe6-9ee4e407b2f3.roa
Signing time:             Tue 10 Jan 2023 12:00:00 +0000
ROA not before:           Tue 10 Jan 2023 12:00:00 +0000
ROA not after:            Wed 15 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        56.234.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:88:cf:e4:91:ed:bd:89:c2:6b:a7:2e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 10 12:00:00 2023 GMT
            Not After : Feb 15 05:00:00 2023 GMT
        Subject: CN=9497466d-6db9-4bdd-8354-ff274bc959dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0f:55:ce:eb:f8:32:a4:f0:43:23:59:54:78:
                    36:24:fd:21:a6:24:e1:37:6e:30:bf:1d:01:12:50:
                    bf:e3:f3:b2:92:c5:28:75:d5:5a:4c:b9:bc:24:ab:
                    24:b9:c7:35:e3:b2:42:12:fb:b3:c2:6f:28:c5:26:
                    35:33:42:d5:99:6e:1d:15:9c:e4:a4:3b:1a:f1:c1:
                    02:be:10:0f:f5:19:99:d4:f6:fb:4c:83:39:1a:34:
                    39:7a:65:f9:a5:5c:4e:0b:3a:bb:b2:95:c1:87:3d:
                    34:54:cc:ab:74:47:64:30:69:5e:39:70:52:f5:14:
                    b3:cd:ad:50:b6:c0:f9:43:fc:36:57:0b:3b:a1:49:
                    01:f9:06:66:32:f3:3d:99:e6:57:c9:a8:f8:42:35:
                    95:bb:61:b8:51:97:90:c2:84:56:be:b0:9b:76:23:
                    50:6d:39:58:cb:ce:cf:40:8d:5c:95:60:cd:ad:5c:
                    ea:ef:8b:f1:2e:be:b7:f8:2f:26:6d:25:4a:95:a2:
                    e2:aa:a8:a1:d3:94:bb:aa:5f:73:8e:9f:4f:a4:c6:
                    49:a4:b3:45:be:ef:27:7c:67:8e:d0:47:16:94:76:
                    f7:61:59:d8:37:f4:5d:05:16:df:6d:ec:96:7c:bb:
                    9e:00:da:ed:cd:94:2e:1d:98:e3:11:b5:ac:e3:e7:
                    2f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E5:83:ED:8C:E1:CE:DE:A5:66:FB:1F:B9:74:6B:A6:30:75:AD:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c1ce1b46-3551-3293-8fe6-9ee4e407b2f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.234.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:b3:1b:db:1c:56:6c:04:c7:ee:75:c8:47:95:e4:a6:2e:01:
         be:57:63:ad:5f:0c:5f:58:a3:7a:24:b9:4c:1c:80:f9:90:bf:
         d3:be:01:bc:dc:a8:9f:39:ca:80:c2:dd:7c:9e:39:7b:fa:70:
         44:a9:2c:2e:36:da:61:d3:03:d3:6b:d4:83:92:b6:e3:2e:63:
         c6:05:fa:ce:73:4f:49:d4:32:e6:e9:4a:a0:4e:03:cc:2d:0b:
         8b:44:1f:14:90:c1:f9:d8:85:1a:fd:d9:b2:27:6b:c4:ea:32:
         1c:17:5b:8c:79:a6:81:b1:9e:58:1a:e5:d9:e3:f1:18:1a:a7:
         43:07:09:24:53:40:b5:20:08:55:ef:a1:e4:b5:b2:b2:5d:01:
         e6:39:7d:fd:bc:aa:4a:2b:c3:3c:c0:77:e8:e4:44:07:9d:32:
         56:6d:fa:1c:94:02:c7:90:a4:46:3e:ac:ff:ff:70:3d:64:21:
         d8:7f:7b:7e:71:9a:06:ee:4f:77:8b:7a:ad:60:34:20:86:3f:
         3f:a9:3f:16:14:7f:64:1d:7d:48:48:14:6f:09:58:08:47:a4:
         bf:8f:5b:c7:7b:58:44:96:0f:6d:4d:64:b5:88:45:6a:89:fa:
         3a:a5:8e:d4:92:c6:93:61:ce:8c:3c:0f:a7:2d:fd:fd:b8:71:
         b1:62:db:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:08:06 2025 by rpki-client