Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df065bbf-830e-34fa-be6d-c5607f88dd5b.roa
File:                     df065bbf-830e-34fa-be6d-c5607f88dd5b.roa (raw, json)
Hash identifier:          xTd4SZE/t2gdRHjlDH9XIBx1lXBz/nKdYEt6risJ/1o=
Subject key identifier:   43:0F:6B:E9:21:51:CD:59:A2:43:AA:5D:7B:74:11:80:53:88:8F:2C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F19BA93FA7B916EAB12D86C00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df065bbf-830e-34fa-be6d-c5607f88dd5b.roa
Signing time:             Thu 01 Sep 2022 13:42:07 +0000
ROA not before:           Thu 01 Sep 2022 13:42:07 +0000
ROA not after:            Thu 06 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        56.87.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:19:ba:93:fa:7b:91:6e:ab:12:d8:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep  1 13:42:07 2022 GMT
            Not After : Oct  6 04:00:00 2022 GMT
        Subject: CN=ade179d1-f422-43a6-8862-30a85067ca29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:53:fc:f3:d5:b0:52:d9:3c:07:b0:4f:ac:d3:
                    7d:ff:13:02:df:65:d3:07:cd:22:37:99:e4:25:62:
                    60:64:f3:8b:4d:25:0c:2a:8b:7c:f9:8c:c2:0b:b5:
                    58:b7:16:84:55:60:fd:05:aa:84:bc:7e:63:6a:12:
                    f9:c8:63:81:45:e6:6d:1b:88:f7:cc:89:9f:6f:e4:
                    09:71:d3:d4:be:9c:e5:a7:21:30:49:78:70:1f:f0:
                    ea:ee:bd:a8:48:db:78:41:75:91:f0:07:21:85:a6:
                    ea:50:1f:ed:92:43:a7:2e:4f:ef:fd:96:89:04:bd:
                    89:d0:ed:75:f9:72:5d:ad:be:8a:7c:f0:0a:c7:f0:
                    34:af:ae:f7:8b:0a:08:30:54:5d:54:b5:82:a7:4f:
                    e6:4c:58:21:b4:69:29:19:af:1d:e5:50:56:9b:cc:
                    21:68:03:c8:2e:57:1f:4f:04:d0:bc:da:2d:aa:75:
                    2a:3e:65:9c:d0:a1:6f:ba:da:36:67:17:27:37:02:
                    a6:de:48:4e:cb:4c:d9:a7:d6:ff:28:0b:5d:18:b9:
                    22:6e:4a:ad:f4:f1:8f:f4:b6:12:f6:18:c3:7c:2e:
                    54:14:28:bd:90:9f:82:36:81:41:5b:6d:7b:fc:18:
                    79:d5:55:de:57:b9:c8:e7:54:4c:41:71:91:8d:c8:
                    d1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:0F:6B:E9:21:51:CD:59:A2:43:AA:5D:7B:74:11:80:53:88:8F:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df065bbf-830e-34fa-be6d-c5607f88dd5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.87.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:f8:1e:be:a9:08:70:13:c0:16:ad:90:b3:00:b2:a8:61:47:
         ae:f5:9e:4f:a1:84:6f:55:8a:18:9d:f2:aa:bb:11:c2:a4:e1:
         e0:41:37:0e:63:c8:da:2d:20:85:e8:80:9b:a4:5e:ae:78:ab:
         7c:3f:11:81:e1:6f:69:dd:bc:84:08:b1:aa:b6:7b:48:a9:63:
         bc:48:aa:b7:20:f3:3f:99:a7:1d:c7:fd:be:f3:da:bc:e6:de:
         df:5b:b9:6f:52:55:d9:5e:39:c6:f2:b4:d7:fa:21:f9:73:32:
         15:2e:47:21:17:cf:31:8f:9e:59:af:6b:23:95:04:fe:95:57:
         45:b8:44:b5:05:0d:76:04:ab:87:29:65:93:99:00:9d:80:64:
         65:be:95:e2:d1:08:be:bc:29:0e:68:11:5e:3b:73:5e:f7:c8:
         ae:3f:89:2f:86:ed:2b:f5:de:14:4f:33:c6:96:0e:e9:40:59:
         9f:f3:d9:b7:35:d9:39:21:4c:71:a5:5f:17:38:47:85:19:36:
         b5:ac:1a:a2:97:79:1c:58:43:12:c2:7c:18:49:e7:bf:fd:11:
         a7:ed:4e:83:29:9b:d4:16:12:69:46:25:50:d9:c0:30:e4:f5:
         20:60:12:71:2e:2c:29:d6:dc:c9:de:49:42:70:bd:2d:fc:9c:
         c3:0b:45:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:12 2025 by rpki-client