Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dfad57a1-fe88-3dc3-bd81-dce97bdc3bde.roa
File:                     dfad57a1-fe88-3dc3-bd81-dce97bdc3bde.roa (raw, json)
Hash identifier:          h7gdhX6WK/cNZkY6uoTjvAI0DMOodDY6/6sAf7j8HJU=
Subject key identifier:   11:D0:EA:55:4D:C6:53:EA:E8:84:77:3E:29:D1:20:AB:32:29:68:0D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858402A80F64AF15DDE40B6786140
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dfad57a1-fe88-3dc3-bd81-dce97bdc3bde.roa
Signing time:             Wed 07 Dec 2022 12:00:00 +0000
ROA not before:           Wed 07 Dec 2022 12:00:00 +0000
ROA not after:            Thu 12 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        56.56.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:2a:80:f6:4a:f1:5d:de:40:b6:78:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec  7 12:00:00 2022 GMT
            Not After : Jan 12 05:00:00 2023 GMT
        Subject: CN=66d9f31b-a485-4d7c-abf3-ed00762e508f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4f:fb:df:13:51:d9:6e:e7:c8:35:16:61:4c:
                    25:a1:b0:46:8e:e2:32:32:28:cf:41:c1:68:41:e7:
                    be:29:af:61:d9:16:4d:48:0d:a4:09:f5:56:c6:4b:
                    9b:50:89:2b:ac:eb:8f:55:19:36:b8:79:fa:fd:17:
                    44:b2:66:f4:1e:43:7d:8a:3c:e2:61:6d:85:50:b2:
                    34:83:c5:04:ae:d8:3f:2f:69:be:54:54:da:e1:31:
                    12:ed:bb:57:bf:c6:77:b0:e5:d1:28:d9:1b:f1:13:
                    35:4c:78:17:43:6a:0e:22:1c:ce:1b:e9:d9:7c:3e:
                    c0:f4:d4:32:ea:3c:0d:ce:a7:48:c4:40:9c:55:c3:
                    5f:13:84:68:4a:9e:6b:14:bd:ab:4c:cb:23:f9:be:
                    b1:ea:fa:48:a6:ed:99:9f:25:a8:a6:86:88:e7:a7:
                    66:ad:04:fd:25:11:e2:cf:c4:41:be:9e:d9:04:19:
                    24:58:c9:e9:5a:b1:2e:dc:cb:5b:68:29:ba:1d:1e:
                    c1:00:aa:03:7a:27:98:58:a3:5c:09:63:7e:65:62:
                    81:12:62:8f:d1:bb:f6:20:10:91:fc:3e:bc:23:89:
                    28:2b:15:da:7f:b6:a0:c2:c9:66:15:87:6f:2a:41:
                    ad:ba:77:8a:96:ed:64:66:4f:30:d3:f5:5d:c4:d3:
                    de:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D0:EA:55:4D:C6:53:EA:E8:84:77:3E:29:D1:20:AB:32:29:68:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dfad57a1-fe88-3dc3-bd81-dce97bdc3bde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.56.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:ce:dc:98:f2:eb:88:b2:4f:48:77:20:f6:e8:46:ed:1e:39:
         1d:7d:99:e8:fe:31:2a:75:bc:d8:0c:dd:7f:91:35:00:cb:8c:
         80:49:1b:6a:c4:0a:d3:f2:c5:2a:34:66:b9:5c:1e:ed:9b:29:
         72:c8:cd:0f:2e:6b:b5:b8:4e:bf:54:ae:67:e9:55:7a:64:43:
         a3:2c:e6:fc:d3:ae:b9:df:63:37:89:f1:c4:9b:ee:69:5d:dc:
         07:27:3a:c2:00:78:52:ef:5e:60:e4:07:1d:76:8b:2c:00:82:
         d1:4d:61:b5:5d:fa:0f:6c:ba:a0:c2:33:49:0f:d5:03:cd:7f:
         05:7e:97:8c:18:49:5f:4e:1d:e9:e6:97:d2:d0:0a:bd:74:f6:
         cb:89:1e:1e:de:e6:a6:b1:d9:ba:50:42:6f:97:50:e5:bf:a6:
         7f:3e:dc:c4:cc:5f:8b:3f:ed:01:4b:61:70:46:c3:14:97:2d:
         8b:42:6b:a1:a1:20:b3:ae:22:84:ca:fc:07:4c:07:56:8c:6e:
         89:e3:f9:c3:71:4a:3f:85:af:c9:42:25:09:f6:fe:75:40:ac:
         56:de:48:9b:56:32:17:75:f3:b6:af:f3:01:21:5e:f5:c0:39:
         3b:af:32:b5:92:0a:80:4d:c8:66:1c:fd:a6:3b:f6:0e:ea:3e:
         62:4b:38:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:59 2025 by rpki-client