Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f263ff42-1aac-3759-8234-3c29e1a9b000.roa
File:                     f263ff42-1aac-3759-8234-3c29e1a9b000.roa (raw, json)
Hash identifier:          xuVufay4s7iaSIhSdZo1DkSLoO+hqorhR/DBbrd1IXM=
Subject key identifier:   55:DA:8E:CE:3B:01:70:24:FD:B4:F0:83:DD:20:51:E8:D4:64:1E:6B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858402A201CA6D574A9C067CF6880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f263ff42-1aac-3759-8234-3c29e1a9b000.roa
Signing time:             Wed 07 Dec 2022 12:00:00 +0000
ROA not before:           Wed 07 Dec 2022 12:00:00 +0000
ROA not after:            Thu 12 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        56.93.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:2a:20:1c:a6:d5:74:a9:c0:67:cf:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec  7 12:00:00 2022 GMT
            Not After : Jan 12 05:00:00 2023 GMT
        Subject: CN=bec9d031-89a2-4dde-b18c-e832438d40d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:83:bc:17:31:f4:8d:94:92:aa:46:f9:f3:48:
                    2d:3d:1d:2a:b3:08:75:b0:28:90:7c:85:fc:43:81:
                    49:25:d5:bd:d9:40:07:b9:c3:85:51:41:2b:fd:6a:
                    6c:ca:e1:ed:e9:3c:ab:bd:db:35:69:bb:63:6e:47:
                    97:85:15:ea:09:d2:40:a5:12:d3:28:31:69:01:93:
                    8e:6c:31:d2:17:33:bc:4c:25:26:52:0a:32:3d:0d:
                    13:cd:d9:e6:5c:a7:a0:f3:2c:d9:95:5f:08:10:b4:
                    b5:3d:47:5f:05:6c:f0:37:28:a6:58:de:46:27:ae:
                    3f:23:d4:33:00:ec:33:8b:43:8a:d2:a5:cb:a5:43:
                    c3:29:95:53:59:da:cf:fa:72:48:90:57:e2:4a:6e:
                    ae:ac:75:7b:24:4b:6b:cf:02:1a:97:0c:ff:5b:4d:
                    da:94:bd:99:6d:9a:c5:99:24:3f:23:17:a4:90:af:
                    96:11:3a:ee:45:1a:5d:8a:b1:89:5f:2a:d1:2c:9f:
                    86:93:f4:5f:87:fd:90:89:c3:65:c1:1e:8b:c1:e7:
                    c4:39:87:94:92:52:31:c3:87:bc:18:14:47:4c:46:
                    89:12:a0:96:ac:17:61:7f:42:27:fd:fa:2c:9f:6e:
                    a8:27:4e:03:6c:62:40:74:32:22:38:2e:c0:5d:26:
                    de:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DA:8E:CE:3B:01:70:24:FD:B4:F0:83:DD:20:51:E8:D4:64:1E:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f263ff42-1aac-3759-8234-3c29e1a9b000.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.93.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:fe:76:ae:49:b4:2b:4c:f7:4f:ac:24:dd:10:1e:9a:d0:63:
         7d:17:2a:29:5d:d7:3e:25:ef:7f:b3:ed:a4:56:12:2e:a9:22:
         0e:56:2a:34:35:45:9b:15:e3:40:f0:cc:ad:f7:21:27:d3:72:
         72:02:be:52:49:82:71:15:87:b7:43:e3:fc:06:02:5b:2c:57:
         a0:c9:70:52:a8:5b:d9:d9:2a:a8:bb:6c:3a:58:41:26:b9:ac:
         d9:02:0c:90:7a:b8:cd:34:67:77:db:54:9c:bb:b8:dd:34:27:
         48:2b:99:3b:48:ab:82:29:e8:91:85:5b:3e:04:82:d1:d0:74:
         7e:cc:16:a9:a1:1b:3b:6c:57:06:9f:ac:9c:79:03:77:a5:bb:
         f2:c9:1e:b2:9e:8e:a3:01:25:bf:b1:01:fe:b0:98:1c:56:80:
         fc:2e:aa:75:06:96:41:b4:86:da:91:23:ff:91:72:3a:8c:82:
         6e:39:79:ac:5b:19:b1:63:9c:5f:c0:42:b4:e1:d3:bd:1c:c9:
         c4:f2:7a:59:02:05:bb:91:6a:a4:e8:b4:dd:28:cc:5b:3d:18:
         96:ea:d1:60:a4:7d:20:85:80:e0:a3:ec:88:8c:d1:0a:a3:5b:
         22:f0:71:af:d7:e8:7a:fc:0a:b0:24:06:6b:14:be:86:b1:06:
         9f:cf:9e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:07:44 2025 by rpki-client