Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d8e49f1d-a4d7-3c1a-9469-d439c1d9450b.roa
File:                     d8e49f1d-a4d7-3c1a-9469-d439c1d9450b.roa (raw, json)
Hash identifier:          sZyyDobPYAOjlBsHH/NPjW0PyGrdhoXuRWBjwwZijTg=
Subject key identifier:   4E:70:4B:03:57:DD:DB:D2:61:12:CC:36:15:27:01:C2:90:41:67:1D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840C68C8DCC56FF0B75D57D7F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d8e49f1d-a4d7-3c1a-9469-d439c1d9450b.roa
Signing time:             Wed 01 Feb 2023 12:00:00 +0000
ROA not before:           Wed 01 Feb 2023 12:00:00 +0000
ROA not after:            Thu 09 Mar 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        56.116.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c6:8c:8d:cc:56:ff:0b:75:d5:7d:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  1 12:00:00 2023 GMT
            Not After : Mar  9 05:00:00 2023 GMT
        Subject: CN=185d1de6-2c67-4911-9462-80ac4797f5ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2b:71:35:35:da:0f:d5:01:5a:b0:30:aa:b0:
                    5a:e2:73:c3:45:f8:e1:dd:0d:bc:02:16:d0:f4:fc:
                    a1:37:dc:3c:9e:d4:50:c5:de:93:8c:a4:45:e5:66:
                    08:7b:81:cd:e6:5e:aa:e2:25:b5:e7:d8:a1:a7:56:
                    84:8a:37:c4:d5:38:b4:0c:6a:a7:1a:ac:c0:ba:58:
                    2d:56:a1:ea:ab:43:45:57:55:2c:e0:0f:28:ad:4c:
                    e0:0e:ce:01:c0:46:02:3b:c1:49:d4:82:af:e8:af:
                    10:60:13:bb:0a:9c:94:3d:cc:40:86:0c:90:64:ea:
                    5e:c3:38:9d:73:8e:9e:45:0b:b8:1f:c1:8a:0c:c9:
                    1a:c7:41:fd:b5:69:32:52:df:16:55:28:6e:7f:24:
                    a7:26:e8:99:01:5a:c4:0c:dc:14:cc:8b:51:52:42:
                    3b:a8:87:0e:f7:cc:1a:03:f1:13:1b:67:71:eb:4d:
                    83:b7:25:cc:2e:bc:64:b0:a7:70:04:d7:ba:bf:4f:
                    97:f5:10:ea:62:1b:97:48:c4:72:d2:0d:f7:ef:44:
                    d6:19:d4:b0:28:c0:eb:92:11:b5:fc:cd:14:3c:b4:
                    24:85:06:e3:5c:f4:78:74:16:b8:fa:55:f7:0c:e6:
                    a4:26:1b:11:f0:09:c1:25:59:aa:3e:75:6f:c2:cd:
                    72:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:70:4B:03:57:DD:DB:D2:61:12:CC:36:15:27:01:C2:90:41:67:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d8e49f1d-a4d7-3c1a-9469-d439c1d9450b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.116.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:a3:99:4b:26:b9:f6:12:2a:8a:2b:9c:5c:d3:28:23:41:fd:
         ec:45:c9:79:92:b5:4a:46:19:84:26:61:70:6b:2f:d2:c2:dd:
         de:9b:44:96:8e:20:08:ac:fc:72:cd:64:51:07:b2:13:5c:62:
         e7:ea:f2:2d:91:96:36:34:f3:5a:c8:0e:21:4f:52:da:e9:c3:
         f8:7e:7f:3f:c6:ef:47:32:d3:8d:7c:fb:ef:6c:ca:9e:d3:b3:
         3c:4c:fb:0d:f1:95:39:34:d4:c6:8e:7e:ec:ae:3b:11:d9:51:
         ba:a5:9d:1a:70:3b:4c:37:d0:77:44:38:fd:e5:17:bd:8d:f3:
         d9:c5:72:7e:39:73:a9:55:aa:78:15:9b:69:27:fb:ab:9a:0c:
         8c:ae:fe:3c:d2:24:c0:40:b5:e8:6c:0e:d5:f4:a6:62:77:98:
         79:50:0b:a7:28:1f:31:b4:f2:15:e0:0c:7c:1d:31:5c:01:b7:
         16:f3:c0:d4:54:0e:fd:49:4e:b6:1d:6e:f7:13:11:29:8d:78:
         e5:18:ba:1c:c1:87:47:92:f3:54:3e:bc:69:2c:1b:ea:1a:59:
         ed:34:b0:aa:a8:40:b8:9d:c3:4b:1c:3d:2e:6e:c7:76:c5:7a:
         82:6c:28:ce:4a:cb:42:06:0a:15:9a:9e:a7:06:86:08:5e:c3:
         fc:44:69:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:20 2025 by rpki-client