Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de1bb373-c6df-350c-bc98-ab1792580820.roa
File:                     de1bb373-c6df-350c-bc98-ab1792580820.roa (raw, json)
Hash identifier:          LX7WnXZHsMqYz+rDDSuuYK38HeXatJrRWzU4rtw3O3w=
Subject key identifier:   53:6A:A8:FF:92:F6:10:73:BE:EB:BD:6B:D6:D5:F6:09:E8:CB:FF:BE
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EF2ABF4CFB4C935002EEF3E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de1bb373-c6df-350c-bc98-ab1792580820.roa
Signing time:             Wed 17 Aug 2022 12:00:00 +0000
ROA not before:           Wed 17 Aug 2022 12:00:00 +0000
ROA not after:            Thu 22 Sep 2022 04:00:00 +0000
asID:                     22394
IP address blocks:        139.56.10.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:f2:ab:f4:cf:b4:c9:35:00:2e:ef:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 17 12:00:00 2022 GMT
            Not After : Sep 22 04:00:00 2022 GMT
        Subject: CN=4e4b16de-bacf-4502-81a7-b3d4a0e6512f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:be:90:b2:cd:37:9a:a1:52:13:5f:db:a3:0e:
                    21:41:76:bc:b4:40:de:0e:ef:ab:de:0c:ba:98:58:
                    fe:e1:bb:01:62:f4:ba:bf:c0:05:79:77:e1:42:f9:
                    37:21:aa:c3:76:84:12:d0:cf:0a:24:f8:21:1a:20:
                    f7:54:c5:c5:fc:9b:4d:cb:12:e1:09:ed:6a:64:65:
                    bd:2c:5f:cc:51:58:54:0e:90:59:b1:cc:6b:04:93:
                    14:e1:54:a3:1a:72:6c:95:0e:03:a7:b3:d8:a9:98:
                    ed:39:bf:c2:87:17:75:5d:c5:4c:46:e9:b2:b9:91:
                    cb:ca:11:27:b3:e4:f6:f3:1d:b6:eb:86:c3:db:0e:
                    93:37:8c:80:73:ef:7a:9d:03:fc:09:79:40:68:5a:
                    55:dc:ae:64:e8:7d:27:72:65:8f:5e:ce:70:51:e5:
                    81:b5:d3:51:46:2f:78:b7:e3:4f:f1:9c:9d:27:3a:
                    0c:cd:f9:9e:0d:cd:cf:7b:13:69:45:cd:3f:f4:42:
                    28:8e:ad:a2:ea:a4:9f:27:0e:99:78:d8:71:81:16:
                    64:5a:4f:a2:80:09:19:ea:a8:d4:74:62:ed:35:f2:
                    1a:3f:a0:22:66:e1:64:10:9c:e8:f0:1a:ef:67:16:
                    3b:a4:5c:3e:ca:8a:8d:90:29:0e:48:5d:c0:53:44:
                    eb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6A:A8:FF:92:F6:10:73:BE:EB:BD:6B:D6:D5:F6:09:E8:CB:FF:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de1bb373-c6df-350c-bc98-ab1792580820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:03:4e:67:0e:8d:02:37:fd:82:77:1b:56:d1:18:09:32:15:
         b6:42:71:88:94:3c:15:c0:38:43:ad:e9:44:9b:51:92:7e:ca:
         76:5e:25:6a:e9:6d:a8:60:b6:66:e4:a9:b3:aa:20:7c:df:3a:
         74:e1:0b:a8:ef:de:a3:37:72:40:d6:8d:a6:a5:2c:11:1d:bb:
         ea:81:fb:8c:f3:51:1d:0b:0b:7f:24:66:43:70:3b:90:a9:e9:
         da:d7:33:50:68:d1:f8:e6:aa:65:9a:ed:70:43:cd:1e:63:13:
         f6:ed:06:79:23:d6:0f:77:97:e5:51:00:9f:19:7b:29:f2:2c:
         15:d6:c3:fd:cf:32:6f:ff:6f:04:9e:d1:24:86:23:0f:19:37:
         43:78:6f:b6:e6:2e:69:4b:62:91:fb:74:d7:c6:f5:31:f2:08:
         98:a7:c4:c8:8c:bb:56:b7:d5:bb:cb:50:dc:e4:8c:01:5f:0e:
         44:00:c3:b7:a0:d4:61:ab:26:af:c5:9b:2e:09:d1:9c:56:ec:
         aa:06:8d:cd:96:0c:55:33:26:4f:06:0e:e5:9f:02:fe:1c:b0:
         5e:6a:88:07:a8:bd:8c:07:6b:d3:cb:4c:1b:03:78:80:79:a8:
         b0:6f:13:6c:79:d6:0d:d6:47:95:7c:c3:30:2a:dc:fc:37:07:
         63:43:ef:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:02:44 2025 by rpki-client