Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d7549a0c-13c5-3b63-b17c-45f8fac3ca01.roa
File:                     d7549a0c-13c5-3b63-b17c-45f8fac3ca01.roa (raw, json)
Hash identifier:          YMo4GOTVREm8mKqApV+A7UBYZdMQqQRP+QDnZli/IPY=
Subject key identifier:   E5:B2:13:60:EC:1F:20:49:8F:BE:71:2E:07:5A:A8:12:F2:6A:C9:DA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840520D8EE9ED41F41A20322A40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d7549a0c-13c5-3b63-b17c-45f8fac3ca01.roa
Signing time:             Wed 21 Dec 2022 22:15:08 +0000
ROA not before:           Wed 21 Dec 2022 22:15:08 +0000
ROA not after:            Thu 26 Jan 2023 05:00:00 +0000
asID:                     22394
IP address blocks:        139.56.12.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:52:0d:8e:e9:ed:41:f4:1a:20:32:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 21 22:15:08 2022 GMT
            Not After : Jan 26 05:00:00 2023 GMT
        Subject: CN=c964696b-cd96-4f62-b193-73ba7ae3cf9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d2:de:9c:39:e4:b5:11:54:a3:06:5b:78:e4:
                    e4:3b:c8:84:4f:74:07:0d:98:19:6d:55:45:2c:22:
                    5c:b0:8b:1c:18:19:66:7a:dc:4d:d4:91:7b:e8:65:
                    47:df:a4:85:12:96:e0:77:fc:53:db:0d:33:e7:c9:
                    9e:b0:f7:5d:dc:eb:84:16:bb:4b:14:b1:95:36:63:
                    0c:20:0c:4a:0f:62:8a:8e:68:aa:4c:e7:64:66:00:
                    3d:48:d8:20:00:83:a8:12:7a:f3:61:ee:0f:60:90:
                    bf:65:c5:45:5b:1b:22:cc:0b:33:9f:bd:f3:0f:ea:
                    7d:04:0b:bf:ff:47:a4:0a:3f:e4:e4:34:15:6e:7a:
                    37:8a:f4:04:3a:7c:80:c7:89:37:94:a1:9e:d7:9e:
                    58:c5:18:48:d8:fe:50:fd:d5:8f:34:52:8f:86:c4:
                    fb:bf:85:20:15:41:02:d2:b7:74:3b:b5:8d:68:f3:
                    3b:21:43:a5:af:43:53:cc:51:e5:fc:5a:c2:3b:99:
                    1b:49:56:0b:86:bd:c1:69:52:32:f9:cd:48:6f:75:
                    87:ff:b5:c4:36:cb:f0:14:e0:42:6b:87:f1:4d:d7:
                    2e:9c:ec:2a:29:1f:da:70:6b:36:12:d0:84:e7:18:
                    40:d9:d2:ad:78:8f:c3:c0:aa:9f:ff:80:c7:50:eb:
                    ef:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B2:13:60:EC:1F:20:49:8F:BE:71:2E:07:5A:A8:12:F2:6A:C9:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d7549a0c-13c5-3b63-b17c-45f8fac3ca01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:02:11:14:bd:d3:f5:67:3f:15:9f:93:ac:ec:ae:b4:1f:e2:
         92:52:98:1e:28:28:a4:24:54:5a:70:ef:4e:04:3d:cc:dd:e8:
         77:ab:d6:94:20:1d:64:bc:98:82:a1:12:d9:65:d7:7d:31:ab:
         9b:7b:e3:16:ff:b4:c8:ef:be:3b:14:04:4f:ad:2a:50:9a:e1:
         5e:b5:0e:69:a4:09:93:85:a1:37:0c:5d:3b:73:1f:53:6c:49:
         d3:9d:9c:da:48:4b:74:58:6b:c5:7d:70:05:93:c8:b7:16:57:
         00:09:04:8c:89:26:31:0a:57:55:aa:26:dd:1e:7f:1d:b9:8c:
         05:55:be:94:6b:1e:7a:66:1f:0d:06:26:2a:f9:b8:5a:61:1a:
         ab:bf:8a:22:f8:72:2c:a0:73:ae:5c:77:72:11:86:9d:e8:d8:
         96:f7:b4:a5:1a:8d:06:59:29:d2:a4:36:51:39:86:9d:97:c1:
         76:5c:7b:5d:10:ad:62:d7:08:64:63:0e:08:ae:26:5c:d8:e3:
         59:aa:ad:aa:2f:d3:0c:ee:a0:68:4f:9f:83:a6:26:af:af:52:
         a0:43:eb:20:da:7f:6a:04:31:e4:6c:94:0e:1c:74:ad:35:fa:
         00:cb:c4:e7:62:fb:8a:3d:bb:cc:f1:f0:c3:9e:b9:46:74:14:
         29:1b:71:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:10:36 2025 by rpki-client