Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de14bf49-a6d7-31e9-9ce2-ca9dff1eb737.roa
File:                     de14bf49-a6d7-31e9-9ce2-ca9dff1eb737.roa (raw, json)
Hash identifier:          TXYZ18Po9vwSOpE4IFnw1eBokLi1mztVuKi6uRk2tlg=
Subject key identifier:   FE:09:43:41:E7:24:C5:83:46:9D:A2:8A:BC:39:38:00:4E:BA:11:5C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583ED870FFD4B40B8E854C2149D0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de14bf49-a6d7-31e9-9ce2-ca9dff1eb737.roa
Signing time:             Mon 08 Aug 2022 12:00:00 +0000
ROA not before:           Mon 08 Aug 2022 12:00:00 +0000
ROA not after:            Tue 13 Sep 2022 04:00:00 +0000
asID:                     6167
IP address blocks:        139.56.5.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:d8:70:ff:d4:b4:0b:8e:85:4c:21:49:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug  8 12:00:00 2022 GMT
            Not After : Sep 13 04:00:00 2022 GMT
        Subject: CN=ee25e780-be0d-4428-914d-232c74d8a7c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:62:b8:c3:a3:c1:1f:58:d5:83:92:83:da:1a:
                    59:e7:d2:a3:6c:91:f3:5f:c7:b2:13:0c:7d:bb:1d:
                    3d:88:26:3d:65:96:9e:87:d2:62:ec:51:e0:68:b1:
                    a6:7e:e5:d3:20:07:1f:d3:5d:24:29:8d:37:a3:05:
                    f0:a7:25:14:da:a7:1e:37:41:27:3a:bc:15:4b:ec:
                    d0:f0:80:7e:af:ad:55:61:ec:dd:fb:d8:01:54:58:
                    70:0e:d3:a9:c6:24:ad:66:14:18:05:42:1b:25:6d:
                    a9:25:f0:43:63:d6:ce:f9:e3:db:12:ed:06:5c:2a:
                    fa:00:58:b8:f6:00:07:38:2e:5a:a3:95:fa:8d:a5:
                    0c:13:b7:fb:0e:63:3b:31:99:de:88:a8:16:6a:ba:
                    87:d3:42:33:ee:53:21:98:19:d0:7e:a9:1c:78:31:
                    5b:59:32:4a:42:e3:e6:fa:dc:46:9c:f8:a1:31:0f:
                    46:39:71:79:b2:3e:ce:7b:24:46:02:c8:7f:fb:5c:
                    97:a3:59:59:c7:c7:a4:01:85:84:bd:fb:f6:0f:4c:
                    7b:e5:00:55:bc:d5:77:b0:8a:59:95:52:00:b0:e9:
                    8c:13:5f:72:6c:35:e4:9a:f2:9d:09:92:93:7a:89:
                    7b:5e:7f:2f:94:08:19:12:5e:28:84:5b:f2:26:f6:
                    f3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:09:43:41:E7:24:C5:83:46:9D:A2:8A:BC:39:38:00:4E:BA:11:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de14bf49-a6d7-31e9-9ce2-ca9dff1eb737.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:39:2a:ac:f9:6e:1a:8c:94:c8:d9:2b:39:3d:d1:9d:44:77:
         62:26:8e:b9:63:33:80:8e:38:19:aa:5c:62:45:44:2d:91:44:
         e0:be:43:91:fe:d7:d9:fc:70:a4:5c:34:09:dd:f8:26:30:da:
         66:e2:ec:54:28:87:a3:5b:0e:77:4b:95:19:cf:84:87:46:a2:
         61:f0:13:3d:ba:d0:dc:67:33:3a:70:96:1b:7e:58:63:2c:23:
         28:3a:c0:5e:c3:f3:bb:eb:9c:7c:89:7a:45:32:d3:bb:ae:65:
         1b:63:b6:52:06:1f:85:75:e5:b5:b9:e0:e8:6a:13:1a:83:83:
         ce:4e:b6:87:af:38:40:0d:2f:38:89:14:b3:7d:9d:0c:1f:fc:
         66:6e:9e:b7:5a:57:cc:0a:be:6d:fc:88:0a:95:8c:3c:5b:d4:
         28:58:f7:cb:5a:bd:3a:85:ee:4d:d4:74:57:7b:00:c2:3a:68:
         c1:07:a2:51:aa:07:31:fe:24:64:34:cc:63:5b:61:3b:63:e8:
         fc:b2:2a:7e:91:23:07:c8:ca:ed:df:cc:37:0e:7d:44:47:4e:
         6f:8f:df:1e:ae:a7:0c:e8:4b:28:99:89:82:af:e0:21:11:15:
         91:30:b9:d7:d6:a7:2b:b7:27:82:e3:e5:2b:19:36:2d:fa:9b:
         94:f9:5a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:22 2025 by rpki-client