Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e9138fb8-3eea-34a7-8b82-b6b97448a09f.roa
File:                     e9138fb8-3eea-34a7-8b82-b6b97448a09f.roa (raw, json)
Hash identifier:          w8wmwJXjtRJq+qicZx3GDa3NQjotqECJEDvS5klw7GE=
Subject key identifier:   EA:8B:0D:9F:5C:54:77:B4:BF:3C:8F:3B:0E:A4:FC:62:AF:D3:33:9C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584061AB61B5D998F0FED07D4BE0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e9138fb8-3eea-34a7-8b82-b6b97448a09f.roa
Signing time:             Tue 27 Dec 2022 12:00:00 +0000
ROA not before:           Tue 27 Dec 2022 12:00:00 +0000
ROA not after:            Wed 01 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        56.27.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:61:ab:61:b5:d9:98:f0:fe:d0:7d:4b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 27 12:00:00 2022 GMT
            Not After : Feb  1 05:00:00 2023 GMT
        Subject: CN=5e6a1dbf-f0ee-4fc4-82ec-100f666bbe16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:de:16:53:e4:35:c9:2c:22:7e:d5:a0:e5:40:
                    f0:06:8b:4f:c9:81:53:6f:59:15:75:7f:55:be:31:
                    6e:81:e9:8e:e4:18:17:11:c1:60:b2:ad:45:38:cd:
                    8b:94:ad:17:5d:ab:5e:58:29:d1:86:64:41:21:f4:
                    c8:50:0f:60:5b:53:03:58:ca:00:bc:c5:3d:78:b4:
                    63:92:04:c8:a2:90:96:f6:ba:39:0b:f1:c4:0b:5f:
                    22:e2:9a:64:42:20:8a:39:74:c3:7f:be:50:01:f6:
                    32:e7:48:da:f9:03:e9:4f:63:8f:82:98:0d:4c:c0:
                    b1:c9:30:45:0e:17:fc:26:4a:e2:df:0a:a6:fa:aa:
                    26:14:74:6b:06:86:2e:83:c8:ca:60:3e:c5:5c:93:
                    ce:e4:cc:83:c2:29:d5:70:72:cc:e2:79:e0:8c:7c:
                    9e:2b:27:00:c4:eb:95:6b:02:5f:02:89:1f:6e:09:
                    10:0a:d3:65:72:ce:fe:7e:3c:c2:2b:22:82:ed:45:
                    f8:c3:47:e4:7f:a6:6e:54:af:9e:fe:e8:3f:bc:1b:
                    94:ee:78:a7:ab:50:bf:63:fe:df:7c:e5:6b:a6:c0:
                    68:c6:7c:97:65:e3:d7:8b:22:e6:8f:17:93:f1:87:
                    44:be:22:38:7f:e0:c2:a8:2f:91:32:13:f2:f8:9e:
                    1d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:8B:0D:9F:5C:54:77:B4:BF:3C:8F:3B:0E:A4:FC:62:AF:D3:33:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e9138fb8-3eea-34a7-8b82-b6b97448a09f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.27.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:39:9f:08:41:37:3b:16:f1:47:2e:94:c8:a3:e9:88:64:ee:
         63:fe:22:22:b6:f0:1d:db:2c:de:94:1a:f7:81:ed:b1:98:60:
         e0:7d:5d:2e:e6:20:a5:69:4e:ad:e5:93:ba:73:71:df:d5:1c:
         29:e9:2f:fd:94:c1:fe:dd:ad:f0:0a:25:fa:0a:e0:60:fe:d9:
         f6:09:6a:25:db:ca:da:4c:ac:7e:62:9c:3c:50:87:1e:7b:3a:
         30:94:35:f5:cc:b8:4f:33:c1:e1:83:79:66:53:69:01:61:39:
         6d:3b:87:96:19:df:ac:43:06:e2:c1:a0:e5:5f:2a:f2:26:a4:
         de:fc:9d:c2:0a:06:86:56:a2:b2:30:e3:cf:d2:c7:d6:4b:4c:
         a6:e0:1c:15:00:46:36:78:a5:ef:37:be:90:f5:cd:44:d9:05:
         c0:ce:c7:a2:3c:55:30:fc:1c:d0:d6:9d:09:37:d2:7a:1d:75:
         5e:d6:7f:f8:2a:4f:c9:d6:ca:7b:83:55:7c:d5:23:0d:a4:2d:
         65:8a:ba:45:bf:38:39:6c:f1:08:0b:41:f8:ee:b6:87:c0:dd:
         3c:28:b2:da:a4:7f:3f:65:84:01:d9:02:0c:9c:a0:28:7c:56:
         aa:e9:84:2b:cc:92:9c:1a:c2:f2:6b:cd:53:06:a6:a5:97:96:
         4b:58:6f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:48 2025 by rpki-client