Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef09f6a5-ad94-32cd-82e5-e3efb862c4b1.roa
File:                     ef09f6a5-ad94-32cd-82e5-e3efb862c4b1.roa (raw, json)
Hash identifier:          Os6N8gfecxUnT7HoVlts3CEnJtvToyvqM2mxngBKH6g=
Subject key identifier:   1E:77:3B:D3:03:BD:2D:18:EE:F9:DA:1A:F3:33:C2:23:0B:FB:66:86
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840381CFFA979D4B27A732A5A80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef09f6a5-ad94-32cd-82e5-e3efb862c4b1.roa
Signing time:             Mon 12 Dec 2022 12:00:00 +0000
ROA not before:           Mon 12 Dec 2022 12:00:00 +0000
ROA not after:            Tue 17 Jan 2023 05:00:00 +0000
asID:                     6167
IP address blocks:        139.56.5.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:38:1c:ff:a9:79:d4:b2:7a:73:2a:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 12 12:00:00 2022 GMT
            Not After : Jan 17 05:00:00 2023 GMT
        Subject: CN=4814ace7-9f56-44f8-ab39-ec5bc4f1917e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:de:8b:fb:97:6a:5c:2c:9e:11:77:48:17:00:
                    77:5c:ba:1b:61:0d:1a:86:a4:05:1c:46:96:e9:b6:
                    47:21:b5:28:f1:ca:28:f8:6f:f7:ff:07:50:cb:5f:
                    8a:3a:50:cd:56:53:5c:92:3d:5c:4e:7b:58:5c:07:
                    dd:01:e6:6c:56:7c:22:01:e2:43:37:94:33:b0:45:
                    34:79:4c:db:ab:07:e6:60:6b:e0:be:e5:a3:11:c2:
                    1c:5b:cd:1d:25:b5:98:0a:a7:ae:23:39:5d:68:22:
                    4b:98:27:50:e9:c0:92:78:a6:ed:8e:8a:ac:2a:d4:
                    81:cf:d5:95:6b:37:e3:32:f4:d2:e8:db:90:20:f4:
                    f7:a3:ec:d1:da:79:76:39:1e:5a:00:6e:21:03:73:
                    39:77:52:c4:fb:3b:4f:08:78:de:49:56:88:e3:77:
                    9f:75:e9:4a:db:44:1f:71:3e:80:d1:8e:67:be:86:
                    50:a7:b2:c8:5c:f2:90:02:fb:40:25:3b:09:6b:d2:
                    74:0f:a9:13:43:f3:f2:64:80:6f:67:ba:03:92:ce:
                    1c:c1:5d:cf:e7:89:3e:20:b9:e4:79:d0:8e:da:f0:
                    80:f4:c5:e8:11:c4:6e:db:bf:84:a1:9b:e6:e7:ff:
                    ac:99:28:9b:14:65:fa:4a:c6:6f:37:60:7e:aa:32:
                    d4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:77:3B:D3:03:BD:2D:18:EE:F9:DA:1A:F3:33:C2:23:0B:FB:66:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef09f6a5-ad94-32cd-82e5-e3efb862c4b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:9c:3b:d7:17:1a:63:28:a5:25:f1:eb:a1:fc:01:64:37:35:
         2b:24:5f:7d:93:3f:b8:64:d6:0a:2b:c7:1d:c5:70:8e:24:ac:
         57:7c:6c:a5:11:e1:f6:4d:1e:e1:45:3f:01:0e:cf:84:98:34:
         6a:1a:67:cc:36:bc:e9:bc:88:39:28:3c:56:7c:0c:bb:92:55:
         4c:d4:99:84:b1:4f:ee:74:95:a1:0b:22:48:36:d1:33:db:a6:
         56:11:eb:df:5c:e9:85:8b:0d:d5:34:a9:cb:30:86:95:b9:7d:
         24:9f:2c:b5:bb:de:3a:4d:f9:05:f1:7f:64:79:a8:29:26:aa:
         71:76:97:38:84:1b:e3:a7:07:c9:c5:6a:df:9c:a9:9c:b2:79:
         c4:67:24:18:ae:e6:67:0e:36:c4:a8:2a:8a:a3:94:a9:d0:27:
         8f:5a:96:db:2b:34:c6:7d:39:bf:79:46:87:a3:12:53:82:c3:
         92:e1:13:ec:67:df:4f:0e:cd:e7:1f:af:e5:9d:61:73:f1:33:
         30:3b:01:71:01:a0:6b:e2:f9:f9:33:5a:54:8f:15:83:d1:f7:
         25:76:df:76:53:e3:4d:e8:26:db:b0:e1:bf:18:5d:15:a7:22:
         66:6a:ba:b2:51:ac:e6:99:92:87:62:b0:38:e3:06:22:25:2f:
         76:45:6c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:26:03 2025 by rpki-client