Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c4ef2ddc-e609-3e22-be3c-8429bddbf88a.roa
File:                     c4ef2ddc-e609-3e22-be3c-8429bddbf88a.roa (raw, json)
Hash identifier:          JKbFBbLM2MNf3vZ7pVH0SoGhR5ykwSJHeWPPhdn23fk=
Subject key identifier:   57:D7:65:CA:88:B3:29:1B:06:9F:01:7B:CE:52:D3:62:60:44:0B:29
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E64E02F60260937B4D1F83580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c4ef2ddc-e609-3e22-be3c-8429bddbf88a.roa
Signing time:             Mon 27 Jun 2022 12:00:00 +0000
ROA not before:           Mon 27 Jun 2022 12:00:00 +0000
ROA not after:            Tue 02 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        56.17.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:64:e0:2f:60:26:09:37:b4:d1:f8:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 27 12:00:00 2022 GMT
            Not After : Aug  2 04:00:00 2022 GMT
        Subject: CN=5bfbd5ce-53ef-4b1f-8c44-38736f3a3141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d1:d7:a4:88:61:05:55:90:72:1d:52:9d:68:
                    6e:2d:64:62:8d:5b:d1:dd:f8:ce:bf:53:3c:7e:a4:
                    ed:db:9a:f5:40:1c:20:e7:46:9b:7f:ef:f3:83:88:
                    22:a3:fb:32:c3:63:cf:12:88:3a:d3:3e:49:a3:47:
                    7c:b2:84:5f:12:c6:c3:c8:45:dd:b1:ef:20:d4:e7:
                    2d:b5:df:98:9f:37:6a:e2:d2:af:df:2d:43:66:3a:
                    7d:8d:4c:cf:38:c1:31:01:02:fc:52:fe:15:cd:77:
                    89:3d:18:8e:1f:8d:d5:dd:6a:06:44:5d:82:43:6a:
                    47:65:c2:db:57:24:30:5f:31:45:fd:7d:b2:a3:3d:
                    48:06:ad:08:c0:8b:ba:fa:4e:0c:3d:a3:92:96:60:
                    47:cf:07:4a:69:8a:ca:1c:39:3e:74:67:ad:d7:7d:
                    ea:5f:7b:c4:0f:35:d8:06:69:90:e9:24:3c:57:9e:
                    8d:bc:72:87:7d:5d:7f:04:be:a2:6b:cb:55:e9:c1:
                    6d:ff:dd:f5:aa:65:39:44:6b:86:d0:77:03:d9:3f:
                    4c:db:1f:6f:de:82:a6:d0:ad:53:23:30:fc:81:e6:
                    17:15:94:04:36:c8:8a:70:94:69:93:a5:a2:0b:3e:
                    84:83:7a:aa:41:2c:ad:4e:4f:ce:ee:d5:ea:4d:b1:
                    2f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D7:65:CA:88:B3:29:1B:06:9F:01:7B:CE:52:D3:62:60:44:0B:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c4ef2ddc-e609-3e22-be3c-8429bddbf88a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.17.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:c6:2e:e4:f0:a0:09:bf:1a:c6:98:be:e6:5c:fa:90:a3:f5:
         f7:e4:df:84:a3:27:32:79:57:fe:45:bc:04:b9:86:86:0b:29:
         29:a1:6a:62:ca:d5:9c:37:68:b1:a0:a7:a0:e2:cd:eb:d8:9b:
         ff:7a:a7:fe:a2:23:7a:71:78:fb:dc:d7:b5:70:b0:ce:a2:90:
         bd:df:b8:ed:dc:17:a0:41:f8:12:46:34:aa:db:88:c1:2d:08:
         bf:17:9c:bf:31:ce:87:7f:f3:a8:ef:4d:28:82:79:14:79:80:
         8b:32:47:1b:14:32:73:38:28:38:6b:63:db:00:2b:d8:5a:f8:
         1f:5d:58:d8:78:4e:6a:20:87:e2:eb:91:bd:62:d1:10:9f:ea:
         cf:87:45:7c:14:38:d5:d1:f2:0b:6a:4b:66:b2:c7:7b:c4:c1:
         e9:9f:3c:93:b9:e4:a1:1f:b7:ff:bf:77:64:88:0c:36:50:ca:
         82:c7:c7:3f:62:e8:d4:e7:1b:0c:5b:99:13:ac:8d:f4:0b:24:
         9c:77:b9:ab:1b:a7:8c:5c:ec:d6:fa:da:07:0c:34:e7:14:06:
         d8:b6:1e:93:e8:87:ca:99:d7:3b:f2:ac:0c:23:f9:35:47:59:
         65:9a:f7:46:97:b8:bd:60:ab:a4:98:a7:a2:37:19:67:7a:19:
         ff:c6:b8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:40:39 2025 by rpki-client