Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e9f3c339-4291-33b1-ba24-64ca8ecb0a1d.roa
File:                     e9f3c339-4291-33b1-ba24-64ca8ecb0a1d.roa (raw, json)
Hash identifier:          aYwt5Zume6of+gF/nImyFZijpoC89/MkCI7XOheyKbY=
Subject key identifier:   4C:F4:2F:46:E4:57:CD:58:AB:BF:5D:EB:14:FE:0D:90:CF:A7:92:EA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E64D139EC3D326D5AFC0CCB00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e9f3c339-4291-33b1-ba24-64ca8ecb0a1d.roa
Signing time:             Mon 27 Jun 2022 12:00:00 +0000
ROA not before:           Mon 27 Jun 2022 12:00:00 +0000
ROA not after:            Tue 02 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        56.33.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:64:d1:39:ec:3d:32:6d:5a:fc:0c:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 27 12:00:00 2022 GMT
            Not After : Aug  2 04:00:00 2022 GMT
        Subject: CN=a06220d1-51c7-49dc-a4af-60ef9e35829f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f0:9b:e0:3d:b5:5b:79:4a:11:7f:bb:3c:e5:
                    cc:f3:c3:a5:36:e4:f5:97:8d:7d:03:1c:82:38:e2:
                    54:38:44:f5:71:0d:a3:d5:31:b1:16:70:e2:2c:d0:
                    b4:38:31:ec:b9:ce:9c:74:78:83:21:02:3e:54:4c:
                    1b:a9:11:d0:f5:a5:a5:0a:6e:a6:33:ed:c7:24:87:
                    b2:13:3c:3b:5f:31:cf:49:ac:b1:d7:25:7a:0f:3b:
                    5e:d5:bf:79:3c:8d:aa:c5:e4:bf:ee:71:fa:87:0c:
                    91:ff:72:55:ea:0a:95:d4:3a:0d:5d:50:98:76:d1:
                    07:30:b1:30:1b:f3:0c:38:92:d7:7b:2c:23:3b:a9:
                    c6:2c:be:c3:41:93:ee:a0:3a:bb:ef:e7:29:4c:b4:
                    90:3e:58:fe:43:57:49:6d:73:3c:87:52:1d:15:11:
                    b7:9f:be:bc:7a:8d:6d:7d:49:7c:06:12:94:48:dd:
                    38:8e:7c:d4:71:64:e7:03:69:eb:c5:1e:82:69:1a:
                    c3:f6:6e:0a:5f:1b:27:2a:61:8b:68:a1:23:92:97:
                    0b:fa:2a:61:13:f5:97:e5:c7:7f:bc:46:8d:0e:12:
                    a4:d1:98:9f:17:87:59:9b:5d:13:c3:ca:58:ae:a8:
                    5e:5a:d5:60:aa:04:02:43:37:eb:6f:32:7e:64:ce:
                    31:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F4:2F:46:E4:57:CD:58:AB:BF:5D:EB:14:FE:0D:90:CF:A7:92:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e9f3c339-4291-33b1-ba24-64ca8ecb0a1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.33.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:66:d8:21:94:b2:c1:6d:68:01:54:86:02:e1:7f:0c:66:50:
         63:26:7a:d6:fa:0d:b6:65:d9:67:a2:52:a8:63:33:ba:90:ca:
         99:40:b8:78:dd:e2:89:e9:77:72:6c:85:a0:a7:11:86:5d:a9:
         44:a5:8d:87:f5:a4:aa:19:d4:0d:35:03:a3:ac:ab:ae:65:c7:
         51:41:d8:31:83:02:f1:1a:3e:18:88:96:99:c4:b1:23:31:6e:
         11:86:a8:ce:3d:14:49:94:f9:6c:2e:f1:9e:b4:82:cd:87:e8:
         4d:aa:8a:bf:7c:4b:8b:3f:f9:b3:da:ad:18:12:08:85:e0:4d:
         f8:9d:3c:4c:77:d1:d5:d8:d2:33:44:33:e0:b4:3b:0b:2a:2b:
         fe:7d:fe:3a:3a:03:a6:6d:da:4e:a4:73:a4:a0:ec:51:a4:d5:
         03:08:cc:8c:d3:be:c9:3c:20:9b:d8:90:f0:ab:01:91:59:6a:
         23:1f:93:d6:df:19:47:24:c8:a1:49:08:8f:bb:12:13:fc:dc:
         4e:93:33:ca:67:65:0b:2e:90:8c:23:f8:df:e2:2c:3e:30:af:
         fb:ad:51:c6:5b:ce:8b:a2:42:06:0c:5f:03:46:17:5e:88:f2:
         57:86:2a:33:57:f0:1b:79:49:69:aa:5c:76:54:aa:c9:86:23:
         4a:ae:e5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:05 2025 by rpki-client