Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d856b6ae-269f-3888-9ce2-59ecd6452ec6.roa
File:                     d856b6ae-269f-3888-9ce2-59ecd6452ec6.roa (raw, json)
Hash identifier:          cC+SEcQ6F1yKw64NHUGdKg7nn7lesnoufqAgS1a4TtU=
Subject key identifier:   E7:BC:14:37:06:32:34:8A:A5:DA:0D:B2:FF:F7:C5:0C:7B:C0:5B:CD
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D2A0CB770BA40B931FFFBCB80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d856b6ae-269f-3888-9ce2-59ecd6452ec6.roa
Signing time:             Tue 08 Mar 2022 05:00:00 +0000
ROA not before:           Tue 08 Mar 2022 05:00:00 +0000
ROA not after:            Tue 12 Apr 2022 04:00:00 +0000
asID:                     22394
IP address blocks:        139.56.2.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:2a:0c:b7:70:ba:40:b9:31:ff:fb:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar  8 05:00:00 2022 GMT
            Not After : Apr 12 04:00:00 2022 GMT
        Subject: CN=1698c9ea-4fdf-46df-b90e-6224a6c825f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ed:0e:0b:66:30:9b:13:f6:b7:80:9a:69:88:
                    c1:1d:c4:40:d1:c6:56:10:c5:a3:ec:22:d6:55:24:
                    62:f3:0f:0e:21:62:04:5b:e6:dc:66:8d:30:59:3e:
                    93:4f:91:71:94:67:a3:86:a5:bd:a4:be:23:69:14:
                    59:83:f6:aa:b7:d7:82:92:52:f2:4d:75:1d:24:aa:
                    de:2f:ba:c9:5c:8c:be:40:5e:07:aa:0d:3d:6c:79:
                    02:f4:1f:33:c0:f1:c3:53:18:58:2c:75:de:a1:fe:
                    4b:5e:0a:4e:2d:dd:2b:50:d4:9c:b0:2f:cb:13:10:
                    93:79:32:da:a8:39:9a:c3:e2:e3:fe:87:ac:fa:e0:
                    8a:d1:ff:cc:e0:b4:25:86:c7:27:34:e7:07:a3:1a:
                    3f:e7:63:ed:24:ee:b2:27:c7:50:c6:e0:89:8b:c4:
                    bb:9d:75:a5:40:ac:c7:e4:7b:81:cf:c6:e6:b4:bc:
                    65:f4:d9:75:8f:ba:3a:41:bd:e2:47:b3:e8:49:0a:
                    d4:9a:66:24:d7:23:54:66:f8:4f:25:1b:4e:17:d1:
                    a3:8b:f4:44:d6:bb:81:e4:55:d2:8e:24:8e:b8:30:
                    5f:a9:be:77:4b:6a:b8:bd:d0:a3:e7:ad:36:58:1e:
                    97:cd:b5:82:5d:28:35:53:dd:50:37:8e:ba:bd:e6:
                    e6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BC:14:37:06:32:34:8A:A5:DA:0D:B2:FF:F7:C5:0C:7B:C0:5B:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d856b6ae-269f-3888-9ce2-59ecd6452ec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:39:f9:b4:89:02:03:6d:08:3d:90:65:f2:11:e7:2b:a8:83:
         74:7b:ce:64:bb:75:51:26:47:bf:99:06:55:57:05:b2:48:91:
         10:fc:ef:a5:bf:f2:86:c2:2d:7c:41:cf:0f:06:32:5d:7b:00:
         c6:23:4b:ca:71:02:d5:87:a5:51:7b:e8:48:7c:88:63:50:54:
         cc:21:8a:3a:9b:8a:34:7e:37:20:1a:30:17:7e:29:39:d3:94:
         0d:e3:dd:40:10:cd:87:e5:30:54:6d:39:5e:dc:15:29:3e:48:
         84:ea:24:83:36:15:dd:33:e0:42:7a:43:44:09:08:50:e2:a8:
         9b:43:88:4e:1c:71:a7:88:58:3b:13:31:54:14:72:49:e0:4c:
         11:24:94:a5:f5:fe:de:ca:3b:5f:91:3d:f4:18:7f:82:f2:99:
         49:48:e1:3f:e6:b3:0d:24:0b:92:c0:f1:59:dd:9e:2e:f0:da:
         29:d1:d3:84:48:25:24:b3:1e:ba:bd:5f:e5:37:54:e4:6b:08:
         3c:b3:e6:e2:33:04:2f:20:76:dc:0c:78:85:b8:d1:6f:10:7c:
         aa:6d:ed:3d:96:a8:1a:d9:95:19:96:bf:e2:83:c7:d7:9f:7f:
         75:7d:24:12:aa:d8:bc:19:69:c4:56:1e:a2:c4:2c:71:31:d9:
         23:32:ab:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:29:38 2025 by rpki-client