Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef31d446-503a-34cc-bac6-c1c0832d0b7c.roa
File:                     ef31d446-503a-34cc-bac6-c1c0832d0b7c.roa (raw, json)
Hash identifier:          TZX3lmf21d260Pqh4TWXPidQuv4Alt/VLZvYHRdIt14=
Subject key identifier:   98:08:37:BF:8B:56:98:7E:2B:C0:95:7D:7D:D0:A1:3B:C0:2F:C3:19
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DF806DE1DC51A80C71FA3F780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef31d446-503a-34cc-bac6-c1c0832d0b7c.roa
Signing time:             Thu 19 May 2022 12:00:00 +0000
ROA not before:           Thu 19 May 2022 12:00:00 +0000
ROA not after:            Fri 24 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        158.56.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f8:06:de:1d:c5:1a:80:c7:1f:a3:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 19 12:00:00 2022 GMT
            Not After : Jun 24 04:00:00 2022 GMT
        Subject: CN=a280009d-e624-492b-b51b-a3036bab36e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:76:77:84:d2:ea:72:8f:8d:01:e5:17:f4:99:
                    33:e2:a1:ef:89:de:a1:7d:b9:d1:51:03:e7:c7:c6:
                    c6:5a:1d:b2:28:35:8d:cc:d1:68:e4:50:81:be:da:
                    c8:9a:77:2c:71:93:dc:59:c8:5e:ef:85:f8:ee:64:
                    0d:4b:dd:74:43:5b:ec:6a:4a:2a:8a:65:1b:60:6e:
                    39:da:e4:98:39:05:95:22:09:d7:aa:a3:b8:ce:44:
                    67:5b:43:e4:09:f5:2d:47:f3:08:e6:06:d3:d5:b8:
                    a1:3a:c4:23:57:72:bd:1d:0e:c7:a0:35:8e:5d:e4:
                    d3:77:d7:d9:dd:09:a8:93:8c:5a:3d:d1:59:35:b0:
                    eb:7b:f7:11:b3:83:17:80:0f:d3:fd:11:e8:75:26:
                    23:76:20:63:db:ed:39:73:51:5b:e4:52:07:31:af:
                    de:60:a6:a7:04:4a:e8:1c:e5:0b:6b:79:50:16:87:
                    32:ef:0f:62:2e:3a:32:8e:ac:bb:8d:70:cf:22:28:
                    d8:ee:92:35:33:ea:7f:ed:47:d4:f6:71:3a:11:2c:
                    0e:b4:7c:c9:ca:33:0a:18:8c:8d:22:cd:02:b7:0c:
                    52:5c:3a:8f:f7:ec:e0:6f:d8:a7:96:36:ae:d1:7c:
                    af:13:56:af:e7:ed:b8:89:72:35:79:23:fa:b9:59:
                    b3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:08:37:BF:8B:56:98:7E:2B:C0:95:7D:7D:D0:A1:3B:C0:2F:C3:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef31d446-503a-34cc-bac6-c1c0832d0b7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.56.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:17:30:c8:24:40:b1:d0:f2:70:5a:29:19:3c:f6:c2:d5:af:
         fb:14:a6:75:65:30:c9:33:ee:96:03:fe:93:28:b3:c2:38:64:
         6c:6f:70:e3:b9:e7:f6:4b:93:07:f6:8c:7f:15:34:e5:f4:76:
         d6:d8:4e:5b:24:14:cc:c5:00:59:bb:d9:42:18:f5:90:52:f2:
         82:bf:96:e6:00:ad:50:9b:43:12:79:87:a8:16:df:e7:82:7c:
         35:10:53:ab:22:59:96:ba:b7:79:90:1f:49:5d:c3:e9:d9:18:
         92:b2:eb:de:92:14:1f:24:1a:87:16:ab:27:cd:fa:45:4c:7d:
         9a:53:a3:14:9f:a0:67:de:ec:ea:33:64:00:5c:3a:90:25:6e:
         4d:6c:e5:66:b6:84:0b:3b:c2:50:ff:bf:08:c4:9c:8f:b2:73:
         2a:30:a6:2c:37:b5:7f:66:20:ae:36:7a:22:db:f5:4f:46:ea:
         0a:dd:78:d4:79:12:50:a4:1b:42:5c:78:28:0f:a2:58:30:e8:
         03:43:f3:5f:b7:70:92:44:22:fd:6f:d2:de:20:00:3c:75:2a:
         69:13:7d:04:6c:64:eb:f5:d9:e3:b6:46:5e:91:84:4c:b7:f3:
         ce:7f:ed:84:e5:58:64:ff:0e:67:7e:92:b5:3d:58:11:03:92:
         63:50:9a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:37:54 2025 by rpki-client