Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/efdce8ae-cece-3f92-a54d-930bd3815915.roa
File:                     efdce8ae-cece-3f92-a54d-930bd3815915.roa (raw, json)
Hash identifier:          phO5amVvlhvujTGMSXqH5ZmuZlLAN/6GleX6CH6u8WM=
Subject key identifier:   E4:E4:C4:B9:49:F3:13:0B:CC:34:4D:43:2A:97:2F:85:72:D9:7F:69
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FC2C5FEBAA6B65BB8AA230800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/efdce8ae-cece-3f92-a54d-930bd3815915.roa
Signing time:             Mon 31 Oct 2022 12:00:00 +0000
ROA not before:           Mon 31 Oct 2022 12:00:00 +0000
ROA not after:            Tue 06 Dec 2022 05:00:00 +0000
asID:                     6167
IP address blocks:        139.56.5.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c2:c5:fe:ba:a6:b6:5b:b8:aa:23:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 31 12:00:00 2022 GMT
            Not After : Dec  6 05:00:00 2022 GMT
        Subject: CN=b28c8ae5-7fea-4ad4-832b-a07eef3e47e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:78:78:6d:e2:f3:52:d6:3f:3b:60:09:3b:29:
                    d2:44:a2:ce:3f:e9:6a:65:29:47:f8:ec:4c:bb:42:
                    ff:50:f5:35:50:50:ba:73:cb:4a:81:62:b4:0c:d6:
                    f4:5e:3e:74:9a:60:13:10:b7:1f:9a:84:e4:b2:0d:
                    9d:e6:16:7b:17:64:d3:65:a3:c8:5a:99:de:c1:9e:
                    43:85:ad:ed:d1:9b:aa:d5:61:6a:c3:9e:ff:4f:7f:
                    22:34:dc:a0:b3:59:ab:bb:5e:17:dd:78:c2:e8:85:
                    63:64:91:46:28:a2:87:19:9c:52:a0:8b:bf:6a:92:
                    a4:30:25:f9:a7:24:33:89:77:83:11:17:1d:ad:60:
                    a8:90:26:54:f3:7d:cf:82:f2:ef:65:c0:28:ec:8a:
                    ec:b7:18:16:2e:92:c0:73:1b:25:a2:fe:51:0e:0a:
                    73:b0:f8:43:86:c2:be:63:fa:7b:90:ac:3c:1d:1e:
                    bf:62:f9:48:02:19:63:62:f5:66:2b:0d:61:dc:c4:
                    a8:78:4b:d2:a1:0f:8a:3d:68:e4:d5:d8:d8:e4:ff:
                    ad:b0:c7:16:2f:90:74:df:80:1a:1c:a3:92:15:97:
                    d6:97:f7:ef:56:5b:de:b4:49:7f:50:01:bc:3b:4e:
                    1f:9a:50:be:64:aa:68:af:75:68:8a:af:f0:0f:e3:
                    d0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E4:C4:B9:49:F3:13:0B:CC:34:4D:43:2A:97:2F:85:72:D9:7F:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/efdce8ae-cece-3f92-a54d-930bd3815915.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:64:11:60:db:0c:82:b3:a3:ab:d1:c0:84:35:fb:91:f7:c0:
         1d:29:91:d9:2c:56:a0:c6:59:4a:ad:32:66:a2:43:a4:90:fb:
         5b:57:d0:0a:90:14:99:b2:a2:8d:c7:11:47:ce:e2:01:48:0d:
         a7:d8:3a:29:cc:9e:a2:95:5e:43:13:7c:f9:df:20:3c:ec:d8:
         5d:fd:ac:53:5f:ec:f9:6b:ea:72:8c:3c:ec:9f:f1:50:72:10:
         4a:bd:e3:32:d0:e9:77:fc:14:02:fd:2d:a0:cb:a2:af:9b:85:
         db:f9:99:22:db:8a:11:16:df:b6:3c:ef:45:1c:88:28:8f:f0:
         90:6c:48:73:9b:bb:5f:e8:0c:57:53:84:24:2b:fd:ed:14:41:
         be:93:77:1a:8b:4a:96:62:a2:18:ae:18:1a:9a:ed:25:70:9b:
         ae:89:b9:2e:5d:f9:67:7e:b2:b5:0f:cc:e2:39:f7:13:e7:4a:
         42:37:b4:17:b0:77:82:4e:5e:a0:6f:f6:db:5e:ea:87:ab:e2:
         12:48:00:c8:3e:c7:01:01:34:b2:98:85:c0:20:8d:0e:a3:75:
         70:1d:f1:85:52:90:22:24:3c:25:c9:fe:f5:6b:6c:44:48:4d:
         c7:26:5a:3b:9c:7f:ec:ad:9d:2c:0c:1e:0c:b6:fb:5f:61:24:
         47:74:ac:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:23 2025 by rpki-client