Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c68fe896-4aad-391e-b301-c08f861e8c1a.roa
File:                     c68fe896-4aad-391e-b301-c08f861e8c1a.roa (raw, json)
Hash identifier:          wgYRWS7nHvkakN8jUHGJ3zAK/DBr5z4w5xLulDSHCmI=
Subject key identifier:   0C:40:57:A8:8B:EA:CB:8E:1E:2B:7A:E5:A9:52:7B:F8:F2:29:DD:CC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F8D9D4DC7CABF17CC1DF69E20
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c68fe896-4aad-391e-b301-c08f861e8c1a.roa
Signing time:             Wed 12 Oct 2022 12:00:00 +0000
ROA not before:           Wed 12 Oct 2022 12:00:00 +0000
ROA not after:            Thu 17 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        56.107.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:8d:9d:4d:c7:ca:bf:17:cc:1d:f6:9e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 12 12:00:00 2022 GMT
            Not After : Nov 17 05:00:00 2022 GMT
        Subject: CN=1d7aec1c-1585-462a-8431-16590c6f1670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:32:9a:d1:0a:5b:87:37:fd:e5:f1:99:52:6c:
                    9f:a0:67:3b:4c:36:6a:d6:3c:d2:4c:76:49:d5:ea:
                    9c:44:f0:20:8e:a8:23:1c:aa:61:f4:32:11:67:85:
                    f5:7e:72:24:09:35:96:ac:29:b0:79:62:d6:02:64:
                    61:0b:a0:88:5a:01:71:45:a1:fb:22:77:2a:7c:61:
                    f2:0b:21:9d:bb:db:90:cf:73:51:e1:57:2b:83:c9:
                    6b:45:a4:6c:2c:11:30:16:f7:e1:a1:cd:6a:91:56:
                    10:bb:3f:dc:98:e8:2f:e3:e9:53:14:6e:68:2a:d2:
                    2a:13:38:fd:db:71:db:fa:05:63:98:09:05:60:f1:
                    8c:7c:8c:53:02:ea:0c:9d:f2:d7:09:57:e8:7b:f8:
                    ad:37:70:16:2c:cf:7b:84:35:bd:b1:0d:ac:f2:f0:
                    a1:d2:4e:84:7f:9c:e2:17:ec:50:f1:96:31:ed:c1:
                    7f:b5:47:92:d3:ac:87:8a:1e:eb:75:86:f0:e1:c7:
                    3d:77:a4:2a:fd:9c:2d:2e:f5:53:e2:9e:30:38:d5:
                    92:e8:38:75:2f:2d:1f:51:34:ea:d2:f0:a7:d8:cc:
                    70:ac:dc:78:54:4f:86:ca:32:b8:db:d6:2e:a1:08:
                    6a:11:53:ec:26:ed:85:dd:be:c3:d0:01:30:93:4f:
                    42:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:40:57:A8:8B:EA:CB:8E:1E:2B:7A:E5:A9:52:7B:F8:F2:29:DD:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c68fe896-4aad-391e-b301-c08f861e8c1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.107.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:80:fe:f7:f7:c1:13:19:af:26:db:09:a5:81:3b:2d:65:3c:
         fe:bd:fa:e9:49:de:c0:5b:5b:7a:20:e2:e7:d1:f7:d6:7f:5a:
         22:31:4a:72:65:b9:bc:8b:fd:f2:fd:c8:b1:08:e3:76:fa:aa:
         7b:5a:25:b8:05:a1:81:ab:b8:4a:15:4e:74:fc:1f:c7:49:7b:
         83:da:c8:fa:02:12:83:2f:29:20:a5:03:eb:03:04:b7:27:0a:
         3a:74:a4:8b:05:ad:41:22:e9:25:a7:ac:b0:7e:c6:d7:ae:85:
         c1:ec:ad:74:60:8b:e9:50:72:b1:f4:bb:1c:f6:32:02:85:c2:
         74:fd:80:c5:c7:11:d9:39:13:26:b5:ee:ae:83:43:e1:85:6f:
         dc:4d:66:40:90:d7:49:4c:46:f4:fd:6b:10:06:64:b8:5f:ed:
         3b:11:bd:2c:d6:6a:c4:2c:4d:c9:a1:4a:cb:64:df:8d:58:3d:
         13:a5:da:51:e9:bb:96:4c:a7:75:4e:4b:78:a5:c7:31:ac:07:
         8b:97:61:dc:56:38:bf:af:10:67:20:30:e8:da:aa:cd:67:cb:
         d9:0b:c7:16:28:cc:31:2f:e2:b9:c0:43:df:96:b0:a4:8e:ea:
         6c:51:f1:fb:fe:06:4e:b0:11:08:32:e9:26:01:78:8f:01:42:
         52:ef:8b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:56 2025 by rpki-client