Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e55f72d6-d050-3c13-8ba4-fd3045a20dfe.roa
File:                     e55f72d6-d050-3c13-8ba4-fd3045a20dfe.roa (raw, json)
Hash identifier:          Ubzk/dcCDE8dyJsXe3mtXedWtESo0qfyqgE0mCAFiQo=
Subject key identifier:   5E:1B:B5:DA:9D:A6:AE:40:3A:7A:BD:08:B2:46:4F:72:21:1A:B9:4A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583ED8539AECFAD8DA89872CAF20
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e55f72d6-d050-3c13-8ba4-fd3045a20dfe.roa
Signing time:             Mon 08 Aug 2022 12:00:00 +0000
ROA not before:           Mon 08 Aug 2022 12:00:00 +0000
ROA not after:            Tue 13 Sep 2022 04:00:00 +0000
asID:                     701
IP address blocks:        139.56.4.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:d8:53:9a:ec:fa:d8:da:89:87:2c:af:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug  8 12:00:00 2022 GMT
            Not After : Sep 13 04:00:00 2022 GMT
        Subject: CN=f919c5e2-d190-4a95-92aa-a5188ee404c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:44:ff:19:78:3a:58:ac:5c:e5:25:c2:01:63:
                    33:f0:cb:77:28:97:ba:4b:62:99:be:cb:cc:29:0d:
                    b0:3a:12:36:e1:f7:9a:91:1d:ff:df:92:f0:50:11:
                    63:a9:1c:18:8d:29:eb:00:c7:86:14:0d:f4:7d:08:
                    10:58:0e:52:f1:df:97:16:be:9b:c2:05:3f:94:99:
                    f9:c2:ca:48:16:92:63:fd:69:ed:43:95:3b:0a:be:
                    81:7b:92:e7:55:15:95:d2:97:ed:5d:f5:9b:ea:c8:
                    d9:3c:f8:4c:d8:c1:39:ca:01:7f:d6:2f:94:e5:90:
                    af:58:9b:2d:51:83:31:b0:09:2f:ae:16:57:1d:61:
                    31:b7:78:09:6e:a8:51:16:04:41:8c:70:07:70:c9:
                    8f:fe:a2:93:ff:75:e3:92:20:f5:30:0c:22:db:87:
                    7e:16:5a:23:82:d8:21:95:6f:8a:e8:e4:b6:6f:2f:
                    0d:ad:67:c1:d6:2f:56:80:23:17:4c:3c:44:21:40:
                    27:67:12:84:05:02:0c:8e:22:eb:44:6d:0b:b5:26:
                    61:e3:ec:ff:fe:6c:96:11:69:af:5d:e4:8a:21:66:
                    42:a3:26:a4:e2:80:19:96:97:4d:8c:c0:28:54:f3:
                    b0:ff:31:99:b2:4a:4c:1c:72:c3:d5:9a:24:32:39:
                    70:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1B:B5:DA:9D:A6:AE:40:3A:7A:BD:08:B2:46:4F:72:21:1A:B9:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e55f72d6-d050-3c13-8ba4-fd3045a20dfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:3d:b1:b3:89:83:1a:d4:0c:5d:d0:8d:97:83:f9:8d:6b:39:
         fc:a1:fa:d6:d5:99:ce:36:4b:5e:0e:dc:da:ce:f3:92:b8:14:
         96:0c:23:21:10:4b:1c:d2:c6:16:05:29:78:68:2a:89:e4:7c:
         6e:e0:f8:39:84:c2:78:0f:6a:c0:be:39:07:f7:84:fa:f7:1c:
         2b:18:aa:68:9c:a0:93:0a:e9:3a:dd:0e:76:91:61:05:c3:22:
         8e:c2:1a:1f:42:dd:63:80:1f:bc:18:cc:99:db:51:5a:32:e8:
         73:1b:e1:bd:ba:79:aa:1c:03:7c:ff:64:86:db:c9:7e:ed:ee:
         dd:a6:b6:63:28:74:98:24:e7:e0:a4:69:ce:a3:16:0f:9e:d7:
         1f:8e:e3:a3:08:d8:3e:5a:9f:f2:40:62:fd:0e:16:5c:50:c4:
         33:9f:3e:94:7b:4d:96:50:0b:23:f2:fb:9c:05:82:41:3e:50:
         ab:d8:11:6c:8f:d3:7b:f7:a6:1c:1a:2b:44:0c:57:31:cd:4c:
         69:79:06:7a:2f:0f:c7:e0:85:b1:f9:e9:31:f2:77:27:1b:cc:
         fd:de:94:1c:7f:ee:a8:e7:d5:dd:60:4c:d9:0b:74:34:90:0f:
         f5:40:72:a0:18:98:68:ce:91:4e:eb:5c:4b:50:24:13:ea:75:
         8b:0a:74:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:10:42 2025 by rpki-client