Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/eeb8be86-12fa-3d8b-ba60-a5bd61772d4b.roa
File:                     eeb8be86-12fa-3d8b-ba60-a5bd61772d4b.roa (raw, json)
Hash identifier:          o8Ekb/ovB3tWx78kcpiGX2GKPfcIXa3QDjeR2qrws5w=
Subject key identifier:   80:61:2F:56:BB:DA:E1:9E:D6:AC:D4:DC:12:3A:D7:28:DF:C1:04:F5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FECFF9B8D5BC546BC9FB18B80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/eeb8be86-12fa-3d8b-ba60-a5bd61772d4b.roa
Signing time:             Tue 15 Nov 2022 15:06:07 +0000
ROA not before:           Tue 15 Nov 2022 15:06:07 +0000
ROA not after:            Wed 21 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        56.33.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ec:ff:9b:8d:5b:c5:46:bc:9f:b1:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 15 15:06:07 2022 GMT
            Not After : Dec 21 05:00:00 2022 GMT
        Subject: CN=a678978e-7840-4b2d-ba45-f3f63c105261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:de:48:7b:07:25:bd:ea:26:39:19:cd:e2:6d:
                    2b:99:5e:c5:5f:fc:b2:5e:82:3f:e8:fc:ff:8b:dd:
                    0b:77:55:64:89:d0:46:39:bf:8e:57:f3:5b:12:a7:
                    e5:d5:8e:87:39:e8:e0:ad:a5:58:34:1b:a4:fe:9f:
                    10:57:0e:a6:62:34:e7:9c:eb:5a:90:49:a4:7e:c8:
                    b8:65:08:b4:5d:07:2e:f6:b7:c2:14:61:0f:8b:6a:
                    6e:57:dc:af:d0:85:e7:46:d4:d9:24:95:00:fc:bf:
                    74:58:95:7f:5c:c0:af:38:a0:97:2c:9e:29:90:9d:
                    38:8e:f1:82:9b:8b:57:52:8e:93:38:19:05:6a:88:
                    ed:67:fd:de:14:59:50:fa:6b:35:01:6f:b7:50:62:
                    73:8f:32:0f:48:0b:42:8c:39:0e:83:94:b2:29:f5:
                    f9:15:7a:dd:e8:5b:17:39:fc:f1:92:7a:df:e2:7f:
                    78:10:81:80:0c:16:c7:54:1f:d9:30:85:14:e8:e9:
                    b1:37:f9:87:5a:f4:1b:0d:40:7e:91:c5:ae:f0:ad:
                    01:ef:81:cf:12:2b:fd:3b:9e:e7:3c:4f:54:3d:7b:
                    1d:ae:2f:99:97:51:38:1e:cd:15:0c:bf:f0:1a:50:
                    da:ed:00:6d:70:e7:a1:94:95:93:07:d1:e6:ac:b5:
                    7d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:61:2F:56:BB:DA:E1:9E:D6:AC:D4:DC:12:3A:D7:28:DF:C1:04:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/eeb8be86-12fa-3d8b-ba60-a5bd61772d4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.33.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:fb:5d:27:61:19:f4:67:18:fc:70:fc:9f:53:e5:1c:23:25:
         cc:43:7a:da:b0:32:6a:55:0e:a8:ed:db:d9:3d:9e:b6:90:ed:
         52:2a:08:ba:03:ba:4a:06:03:08:83:8e:ff:ed:8c:d2:e7:47:
         43:37:ff:a8:af:31:10:7f:f1:51:b1:2a:0e:90:f2:02:7a:8c:
         72:0a:a4:e6:1d:40:07:a5:5a:b6:0e:51:c2:e0:3b:c8:c9:23:
         1a:24:77:d3:10:45:74:be:16:7b:06:02:f6:c8:23:76:22:b9:
         3f:3e:36:16:9a:af:de:3e:15:d2:56:f2:39:cc:5e:f9:68:ac:
         53:d1:6e:2f:0d:86:22:77:06:be:7e:3a:2f:a0:00:b5:d5:b3:
         f9:80:78:93:93:42:35:d0:41:cd:72:06:7e:a3:c1:21:c4:29:
         09:ca:b5:12:68:48:be:be:b1:07:76:59:2e:f5:22:27:7f:12:
         6e:0a:42:17:1d:a3:70:0e:4e:fe:ba:b6:02:e2:fe:ee:60:8e:
         41:df:31:05:8a:72:02:b0:9a:6e:85:b9:dd:a7:70:15:38:9d:
         8d:0d:40:61:23:88:5a:c7:7c:e3:d5:61:e4:39:21:9b:17:9e:
         65:37:8d:51:3a:97:d4:ee:a0:31:9b:26:fe:5f:ac:a8:28:2a:
         60:08:e9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:13 2025 by rpki-client