Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c6c56fcd-f4d6-3f2d-b7bd-df9fd5438ce8.roa
File:                     c6c56fcd-f4d6-3f2d-b7bd-df9fd5438ce8.roa (raw, json)
Hash identifier:          zDuUtXf0W04MQWYbDIaBzDYYAhDyNQ6TSiTTCQ/uY2s=
Subject key identifier:   B7:37:9A:B8:57:B3:6A:42:BF:E2:CC:D9:B5:19:7A:40:09:CF:2F:9D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E8BEE2CF673B1762C4FDA5F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c6c56fcd-f4d6-3f2d-b7bd-df9fd5438ce8.roa
Signing time:             Mon 11 Jul 2022 19:12:08 +0000
ROA not before:           Mon 11 Jul 2022 19:12:08 +0000
ROA not after:            Tue 16 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        56.33.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:8b:ee:2c:f6:73:b1:76:2c:4f:da:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 11 19:12:08 2022 GMT
            Not After : Aug 16 04:00:00 2022 GMT
        Subject: CN=a948ccf6-ec99-469a-b8ae-e8c31f288275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a9:db:b1:68:6e:3c:7e:06:66:81:6e:88:17:
                    22:68:2a:df:1b:64:dc:21:88:d1:aa:89:26:fb:41:
                    eb:54:4e:2d:73:54:4b:69:a8:45:24:08:c8:c7:bf:
                    39:81:03:3a:8e:be:f7:14:7b:e8:ab:a6:bb:f2:4e:
                    72:ca:52:a1:87:4f:6f:7d:c2:a2:0b:e8:45:90:8a:
                    7b:a2:2b:34:2d:91:75:45:b6:f9:1f:cc:50:ec:17:
                    2c:ce:2c:ef:a3:19:f9:c7:96:bf:83:a9:f2:0a:66:
                    8d:59:db:47:71:5a:c8:7b:7c:4a:b2:4a:b4:59:0b:
                    8f:8d:7c:21:1f:cd:63:6f:a2:aa:a7:f5:07:d5:22:
                    91:b9:81:37:c8:b1:31:74:db:f6:b3:05:b5:83:9f:
                    1d:aa:32:55:b7:df:ff:1b:50:e3:e2:9c:02:77:b4:
                    47:80:cb:bb:c4:68:0b:b5:66:d6:2c:de:3f:7d:97:
                    e1:81:cd:7a:e6:83:a6:07:94:b5:8c:53:a4:b5:85:
                    49:f0:fd:18:6a:2f:5e:c0:63:15:75:82:09:9b:c7:
                    66:21:55:b9:6f:4a:50:9d:76:c5:4d:4c:a7:78:47:
                    34:ed:a9:67:72:b7:d7:ec:f8:dd:b2:6d:92:e4:36:
                    fb:cc:36:99:69:4c:57:d4:c3:24:bf:ef:2e:fc:52:
                    5a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:37:9A:B8:57:B3:6A:42:BF:E2:CC:D9:B5:19:7A:40:09:CF:2F:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c6c56fcd-f4d6-3f2d-b7bd-df9fd5438ce8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.33.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:c8:7d:9b:b7:57:f7:7b:d3:18:2d:a4:70:ab:9f:7d:81:eb:
         1e:fe:ea:7a:13:78:c5:63:55:e0:c9:90:94:fd:52:f9:f2:3f:
         ee:7b:67:9b:ed:5e:7a:c0:99:88:20:8d:70:ea:ba:e1:7b:76:
         74:af:7a:11:c4:5a:0b:0e:f6:8c:85:76:39:30:64:6f:63:91:
         fc:31:96:bb:8f:d1:df:1b:0b:8c:01:70:27:6b:d2:a6:b5:6f:
         31:3f:74:a5:06:fc:07:fd:27:46:85:15:a8:58:6d:22:02:8b:
         bf:5e:b5:0c:93:ba:95:94:1d:ac:47:36:d9:8c:e5:29:16:61:
         be:1e:20:a9:d5:4b:c3:fa:45:06:35:c8:a5:33:0e:d7:2a:10:
         7f:6e:aa:f7:ec:6b:4f:3a:4e:15:93:42:be:35:12:29:d3:8f:
         1e:82:c9:fa:02:e5:c4:64:dc:e1:4b:41:92:a1:ff:20:2a:a6:
         3b:91:64:42:96:5d:b4:d4:64:7c:e2:1c:ec:39:eb:8d:7b:f2:
         b5:91:75:e5:da:1e:cd:a2:73:c2:38:8f:3e:53:65:a9:fa:11:
         84:3b:a1:5d:ce:28:61:a3:b4:66:8d:a3:03:cb:3e:9b:3c:9f:
         bf:74:4d:f7:00:95:25:fa:12:72:c5:f4:ce:15:af:49:ca:c1:
         a9:bd:51:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:28 2025 by rpki-client