Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d0a30478-ca9f-3ea7-8a51-ff6fe325da85.roa
File:                     d0a30478-ca9f-3ea7-8a51-ff6fe325da85.roa (raw, json)
Hash identifier:          WTl1GhvlNBcooSklX38uXDzfm7rjfzUmlyvgY+/7lyg=
Subject key identifier:   19:01:92:E0:BD:9C:D7:F9:2F:A8:C2:53:C9:C8:C3:11:37:0C:44:3A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584003BD434ED3CF01C59F603200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d0a30478-ca9f-3ea7-8a51-ff6fe325da85.roa
Signing time:             Wed 23 Nov 2022 12:00:00 +0000
ROA not before:           Wed 23 Nov 2022 12:00:00 +0000
ROA not after:            Thu 29 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        56.16.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:03:bd:43:4e:d3:cf:01:c5:9f:60:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 23 12:00:00 2022 GMT
            Not After : Dec 29 05:00:00 2022 GMT
        Subject: CN=acb40ed5-2b66-4199-8c24-83f400de2d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:76:5e:64:f8:9a:f8:45:46:6a:6a:7e:6e:37:
                    d2:88:15:dd:a9:f0:b6:a7:41:2f:2c:0b:86:b7:4a:
                    1c:5d:06:d4:16:d8:a9:c6:58:2f:aa:95:fa:ad:8b:
                    a0:ec:86:63:0c:3f:5c:cd:d1:8a:1a:47:4e:00:d0:
                    63:17:eb:26:e4:2a:30:08:73:b1:39:76:e3:ee:5c:
                    be:41:f9:88:a3:6d:02:9f:05:a9:4b:e3:64:6d:bf:
                    7e:b5:4c:8b:e3:41:ea:75:b7:e2:7d:ca:a9:75:8e:
                    4f:45:1b:14:00:28:cc:02:df:b7:4b:c8:30:19:6f:
                    87:e8:d4:93:d6:75:da:eb:53:41:06:21:9e:ab:0e:
                    75:d7:40:14:f4:cd:f2:dc:6c:cb:93:36:76:84:51:
                    05:09:03:cc:ef:48:ec:5e:2e:9e:a1:e0:be:53:fe:
                    b0:1e:4d:cb:1c:d4:a3:98:a1:2b:0c:10:f3:92:28:
                    46:08:68:b3:f0:40:16:c8:fe:28:7b:63:3a:91:88:
                    74:e5:64:bb:74:ec:24:fa:ee:a5:7e:41:79:45:c4:
                    be:6e:88:46:34:a4:04:5c:f4:00:58:10:26:80:58:
                    8d:73:ce:01:f5:55:39:98:2f:26:a1:b9:5b:38:9d:
                    cd:63:0e:00:bb:f5:33:8d:3c:32:21:f9:47:51:f5:
                    80:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:01:92:E0:BD:9C:D7:F9:2F:A8:C2:53:C9:C8:C3:11:37:0C:44:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d0a30478-ca9f-3ea7-8a51-ff6fe325da85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.16.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:b4:52:cf:db:6b:ba:a4:be:cd:bc:1c:50:ed:84:39:3e:75:
         e5:00:4b:fe:aa:a7:50:fa:9a:f5:48:66:bb:cd:12:1f:8d:e0:
         07:b4:5b:87:cc:9e:71:71:90:ac:da:1e:b5:0b:f2:79:ac:20:
         b5:ee:81:f0:41:98:c3:b8:10:9f:9d:27:95:fb:50:03:81:f8:
         d4:10:f3:d7:89:5d:7e:38:a3:65:c6:37:df:41:d0:6a:3f:f6:
         26:36:56:db:99:8f:19:d6:61:1e:bc:ca:67:89:45:78:2c:b9:
         29:d3:26:27:55:ed:10:5d:0a:62:63:62:f4:33:d5:11:db:8c:
         8e:00:fb:b9:61:28:33:4c:bf:a2:38:50:7e:60:8a:38:a1:da:
         7a:0e:b4:7e:f9:6f:fb:86:54:ff:19:13:de:71:94:d0:f7:ab:
         34:76:8b:a2:3b:55:13:99:71:78:94:5c:db:58:f9:a4:5b:03:
         3c:5c:69:51:43:4e:f3:eb:37:1b:51:7f:5f:1d:f9:67:9a:f0:
         18:55:44:58:d3:ea:6d:d0:fd:82:25:25:53:64:d2:d5:cc:98:
         bf:8c:ea:e7:ac:1e:f1:a5:42:cf:4b:1a:ed:f2:10:2d:fc:62:
         5c:29:9e:c0:06:03:9a:d0:2b:66:05:bc:7e:6a:aa:b4:01:1c:
         33:32:cf:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:12:25 2025 by rpki-client