Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c3e72826-6739-3370-927c-4d92081e83b3.roa
File:                     c3e72826-6739-3370-927c-4d92081e83b3.roa (raw, json)
Hash identifier:          RIvHOfJDPpI2uQMgn0d5i6h/CS0LqhXkpUaM9xmdudw=
Subject key identifier:   B2:48:F2:94:BD:5A:51:32:29:10:FB:DC:90:14:54:08:2D:94:83:98
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C8D98C2DC1BB7E7DAD22BE104
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c3e72826-6739-3370-927c-4d92081e83b3.roa
Signing time:             Tue 11 Jan 2022 05:00:00 +0000
ROA not before:           Tue 11 Jan 2022 05:00:00 +0000
ROA not after:            Tue 15 Feb 2022 05:00:00 +0000
asID:                     22394
IP address blocks:        139.56.4.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:8d:98:c2:dc:1b:b7:e7:da:d2:2b:e1:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 11 05:00:00 2022 GMT
            Not After : Feb 15 05:00:00 2022 GMT
        Subject: CN=2f6af4f7-2538-436d-9e9c-351cdf0d809c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:51:68:61:58:3a:ee:49:12:43:4c:c8:f4:81:
                    fc:39:a2:bb:42:03:ac:ff:bf:ec:13:08:33:12:10:
                    b2:df:07:89:7e:89:b8:e0:a6:d4:1b:97:75:c8:63:
                    a8:d5:10:40:99:39:b9:77:b9:5c:95:d9:c3:86:26:
                    7f:bd:fa:0c:cf:36:fa:84:0c:dd:52:57:af:3a:d4:
                    52:f9:a5:a5:cf:67:62:45:84:45:7a:12:5c:50:b9:
                    55:cb:c4:ce:e8:f4:a1:51:78:2d:2a:89:c6:56:97:
                    2d:07:88:ff:d5:2b:84:45:e6:f9:fc:b4:61:bb:eb:
                    08:2d:9e:3a:10:38:54:dc:78:6f:ca:b7:5e:d2:ad:
                    eb:2f:46:04:ca:b3:3d:0c:82:64:50:a1:d5:bd:a3:
                    67:ee:2c:15:78:b4:7f:e9:4d:99:2b:ff:67:b2:38:
                    a9:54:e9:e3:7a:16:bc:73:f7:3a:63:8a:d9:fc:e0:
                    59:76:30:d4:67:11:7e:ba:eb:24:da:e6:c6:f5:67:
                    7b:89:43:c1:c9:8a:bf:42:6a:88:66:48:a9:bd:a5:
                    7b:c5:24:d1:0b:79:53:2f:78:78:4b:33:cf:13:52:
                    7e:9e:9e:40:1b:d5:4c:72:9e:f8:e9:fd:6b:6a:6f:
                    be:88:9d:38:e0:36:3a:65:a6:ee:54:46:a4:24:7d:
                    05:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:48:F2:94:BD:5A:51:32:29:10:FB:DC:90:14:54:08:2D:94:83:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c3e72826-6739-3370-927c-4d92081e83b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:e8:fd:39:79:89:25:b6:57:15:63:8c:5c:77:78:1b:70:f1:
         a5:d8:9b:e5:8d:0e:1d:fd:6f:44:ec:52:02:aa:1d:00:a0:37:
         b0:be:b8:0a:19:33:49:d0:6f:35:cc:70:70:a4:84:86:39:88:
         37:aa:c9:ff:35:72:85:b4:cc:8e:6d:a8:01:ee:b3:74:1b:63:
         f9:65:9c:86:72:e8:c3:76:30:68:ce:95:39:de:66:ac:ae:fc:
         cd:f0:f0:79:7e:80:1c:2e:13:fc:f4:73:33:e1:3c:d6:bd:03:
         d8:66:fc:79:4d:d7:30:01:dd:aa:84:d4:4d:3f:36:2e:95:10:
         15:32:67:8c:62:9c:52:47:67:19:bc:46:4f:68:8b:15:c7:b2:
         ba:e1:f7:24:f9:b2:bf:9f:9a:da:7e:3d:91:4c:ab:07:5e:a5:
         a4:05:e7:90:22:21:d5:ce:05:9f:66:c3:64:2c:29:e3:62:d9:
         26:e0:af:01:ab:22:dc:c2:e6:7f:0a:a1:a5:73:b4:34:33:f7:
         60:da:11:a6:b4:9c:ab:b6:61:a1:60:2f:d5:7c:13:78:d2:c9:
         8d:7d:3c:a3:cd:7f:5c:af:f8:87:f4:e7:1f:73:e0:94:e0:52:
         0d:07:e6:d8:47:a4:46:04:5b:02:5c:99:23:55:9d:8d:8f:f2:
         75:e8:24:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:23 2025 by rpki-client