Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c9d44b97-917f-3897-9303-08ee14daabc5.roa
File:                     c9d44b97-917f-3897-9303-08ee14daabc5.roa (raw, json)
Hash identifier:          3HxSfpUTx3HkRZ4UTn72XHrbAtTn6jnXGMNFXa/+xEo=
Subject key identifier:   80:7C:79:14:E3:5E:F4:46:8F:9E:1A:E9:AB:6C:18:1A:49:2A:76:07
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E169EB45257D986AD88AA8160
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c9d44b97-917f-3897-9303-08ee14daabc5.roa
Signing time:             Tue 31 May 2022 19:03:08 +0000
ROA not before:           Tue 31 May 2022 19:03:08 +0000
ROA not after:            Tue 05 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        56.67.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:16:9e:b4:52:57:d9:86:ad:88:aa:81:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 31 19:03:08 2022 GMT
            Not After : Jul  5 04:00:00 2022 GMT
        Subject: CN=dce553c9-db9e-4cbb-b5a6-22d73c2e2cac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a2:34:45:de:78:fc:23:f5:33:47:c9:5a:49:
                    e0:c2:ee:f8:da:bd:af:27:6a:ee:9b:d4:da:5d:1e:
                    f0:12:da:34:d8:c5:81:5a:4e:26:95:f3:de:23:b9:
                    e7:27:72:45:09:02:d0:29:c4:89:c8:f3:56:7a:4d:
                    cf:3e:a5:22:36:f6:70:c5:7b:e0:03:c9:ef:ab:15:
                    1f:af:46:9b:22:50:b5:48:88:52:e2:67:9d:dc:49:
                    b1:0f:8e:46:6b:54:aa:61:7c:2f:e6:8d:67:e8:8a:
                    3d:e4:70:40:8d:98:e1:87:7b:53:98:9c:5c:29:3a:
                    d8:d9:1e:85:9f:37:b5:37:24:b8:09:9f:4f:a3:29:
                    7b:4a:63:b5:ad:21:6f:90:c3:f9:66:c1:ee:5f:1d:
                    1a:df:54:b8:61:58:3e:64:e3:3a:5d:8e:02:8a:2a:
                    a2:e9:fc:77:78:a7:b3:32:44:98:bc:fb:ca:ed:aa:
                    51:28:15:7a:be:f5:28:88:be:81:66:92:6e:a2:92:
                    c8:a9:d6:65:12:4b:c4:04:c4:4c:0d:ad:e6:15:d3:
                    9d:d5:8e:47:85:b8:8f:a3:08:fb:df:35:a1:a2:73:
                    08:ca:c2:5e:38:c0:87:53:88:b7:78:3a:86:e9:1b:
                    e6:2a:ad:2a:58:33:a8:5e:40:67:0e:5d:16:0e:47:
                    74:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:7C:79:14:E3:5E:F4:46:8F:9E:1A:E9:AB:6C:18:1A:49:2A:76:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c9d44b97-917f-3897-9303-08ee14daabc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.67.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:cc:3e:01:d3:c9:2a:e3:23:34:82:a5:40:14:d8:98:c3:78:
         24:7d:35:1e:85:cf:f1:b6:df:0a:18:a5:fe:a3:7c:c1:ce:6f:
         e4:fd:e5:b3:56:6a:cc:fd:8c:1d:c2:47:08:d7:6b:9e:43:96:
         bf:8e:8b:60:00:d4:c8:ba:5c:12:6d:39:a8:6b:ce:45:22:27:
         03:ee:38:02:1d:e6:b2:9f:3f:c1:85:fd:02:d9:87:c2:05:c6:
         43:e7:a5:bb:74:ad:0c:18:f5:05:ab:04:38:b3:9f:f9:10:6d:
         d4:75:a7:ff:85:bc:cd:40:51:fc:5c:36:57:4f:2f:a5:ba:05:
         d4:54:0f:6c:e1:c6:fa:b5:27:50:6b:04:df:fb:0c:3e:ad:bd:
         13:7e:a3:3b:cd:30:23:80:22:11:c1:60:1d:f6:b2:45:26:e6:
         3a:27:bc:28:4d:b3:4e:eb:3f:0f:0e:aa:8f:f2:18:b7:93:32:
         2e:17:02:92:3b:b6:45:34:0d:84:31:64:54:06:9d:93:ac:96:
         64:ea:f9:3d:90:3b:c6:dc:78:e2:07:0d:5a:78:b2:a0:84:a7:
         7f:a5:64:a3:30:91:b5:5a:7b:9a:2f:7e:87:25:9a:76:8a:86:
         73:db:65:58:7e:ba:bd:f7:3f:60:71:09:cb:40:6b:b2:8d:ca:
         10:af:4b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:42 2025 by rpki-client