Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c2f8ff3a-df5a-30a6-8be2-1bd19f8d4291.roa
File:                     c2f8ff3a-df5a-30a6-8be2-1bd19f8d4291.roa (raw, json)
Hash identifier:          u+tDzbbN7427hKEdi/1k0nAUho5WVdTIxT65NPoF3v4=
Subject key identifier:   E1:DF:BB:E6:1E:ED:4A:11:07:8E:B7:5D:90:46:88:DE:35:69:F4:FB
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E3DBB8C5312887D3EE731B780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c2f8ff3a-df5a-30a6-8be2-1bd19f8d4291.roa
Signing time:             Mon 13 Jun 2022 12:00:00 +0000
ROA not before:           Mon 13 Jun 2022 12:00:00 +0000
ROA not after:            Tue 19 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        56.212.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:3d:bb:8c:53:12:88:7d:3e:e7:31:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 13 12:00:00 2022 GMT
            Not After : Jul 19 04:00:00 2022 GMT
        Subject: CN=adda3a41-766e-4824-a533-afd3d759e8c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:88:9e:43:b3:97:55:cb:52:0d:12:3e:86:82:
                    ae:48:97:ce:cd:d1:11:f4:43:85:3f:94:e7:51:a8:
                    9a:c2:51:e9:1e:46:e2:dc:b0:b9:28:74:76:76:d8:
                    e9:01:d1:db:ef:0b:da:06:b6:74:78:b0:6e:a8:64:
                    2a:96:e0:bc:f2:2f:38:b2:3e:9d:b4:a8:85:f0:b7:
                    3f:33:38:b3:fd:06:df:ce:23:6c:38:2c:36:3d:e1:
                    2f:90:5c:d8:f9:17:ae:a6:6b:7c:66:20:31:67:7d:
                    1b:e7:88:4c:e5:57:34:01:18:62:aa:8f:85:ab:d8:
                    08:ce:6e:0f:57:2d:e4:d5:30:a4:1f:b3:05:96:35:
                    03:97:b0:68:f9:c3:21:d3:3a:04:1d:9f:be:ca:bb:
                    b1:0b:56:61:5f:fe:30:e3:83:d6:40:42:9e:60:49:
                    e3:54:84:af:b9:de:70:76:c5:db:00:0e:09:a2:dd:
                    9b:b5:ca:a5:4a:95:c7:0b:5c:07:10:bc:67:5f:59:
                    2d:ac:5a:bc:fb:53:57:cb:8c:7f:d3:4b:21:5a:28:
                    f2:cd:27:1e:48:7f:ae:67:2b:29:73:4f:9e:7e:17:
                    32:28:80:6c:ca:7c:ae:71:e9:14:82:b9:15:81:84:
                    44:17:dd:8a:fe:cf:d1:19:3b:a1:33:2c:76:d1:e4:
                    f4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DF:BB:E6:1E:ED:4A:11:07:8E:B7:5D:90:46:88:DE:35:69:F4:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c2f8ff3a-df5a-30a6-8be2-1bd19f8d4291.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.212.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:41:a1:1a:78:3a:1a:3e:09:1b:5a:18:be:df:31:4d:98:c9:
         f2:f9:e0:ed:4a:2c:89:fd:b4:cd:c7:d4:0d:b8:19:a2:11:9d:
         31:4d:3c:3e:99:5a:cc:77:7e:21:b1:ec:58:d5:de:67:b5:a2:
         9f:bb:08:fc:4e:98:cd:b5:07:6f:12:14:80:4c:17:01:6b:8b:
         94:d5:74:c0:99:f0:cb:ba:b4:19:c6:fc:b1:5d:a8:1e:b2:ab:
         d2:e1:c9:a2:da:e9:91:8c:df:aa:a5:6b:9c:26:3f:07:a0:4c:
         6b:22:3f:f7:8f:bd:49:08:b9:50:95:89:4c:cb:84:03:ab:4e:
         a9:40:64:c6:92:7c:c8:35:94:ee:15:04:b6:48:20:4e:de:55:
         c7:7d:9e:de:0a:34:ff:a5:ef:82:ec:fa:4a:7c:39:39:3d:35:
         ef:b7:ea:6b:3c:06:67:e4:00:68:ca:ab:3b:7c:23:66:47:7c:
         50:cc:9e:e9:39:d4:d3:5b:fa:33:5e:8d:06:ab:1f:3a:26:86:
         bf:b3:e7:82:b2:30:14:9d:4d:8d:38:e8:56:59:1d:cd:bb:94:
         33:ef:a8:cb:e4:09:e3:5b:27:53:5a:82:35:45:7e:88:3c:6d:
         cc:1e:85:a9:da:18:b5:01:64:cf:68:f2:de:50:89:1c:90:8b:
         15:df:59:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:01:58 2025 by rpki-client