Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f317d31f-87c1-39ec-8606-da10a8c4fb4a.roa
File:                     f317d31f-87c1-39ec-8606-da10a8c4fb4a.roa (raw, json)
Hash identifier:          JRKdlTnSu6WplhCfVYHLvxLN9ZcqUVB1UzDK/ZTDrec=
Subject key identifier:   DF:DD:2A:A6:93:C9:0B:65:AA:3E:27:9A:95:83:2D:DD:FD:A1:62:A9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F640736EC21ECD4F5772B1F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f317d31f-87c1-39ec-8606-da10a8c4fb4a.roa
Signing time:             Tue 27 Sep 2022 17:27:07 +0000
ROA not before:           Tue 27 Sep 2022 17:27:07 +0000
ROA not after:            Wed 02 Nov 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        56.147.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:07:36:ec:21:ec:d4:f5:77:2b:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 27 17:27:07 2022 GMT
            Not After : Nov  2 04:00:00 2022 GMT
        Subject: CN=674f5504-b801-4499-ad98-827348943051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f9:01:2b:e5:7a:42:0e:06:62:71:e8:b3:24:
                    92:94:9b:8c:72:f9:2b:e2:b5:91:16:c4:b3:4e:3b:
                    ce:dd:ae:2f:bc:75:81:b2:d9:66:c7:57:f5:fb:90:
                    25:77:2c:f9:de:03:23:a9:82:61:f7:c2:75:17:cf:
                    db:00:e3:87:63:ef:9b:ea:d5:a0:0d:8c:ad:8a:28:
                    d7:f7:dd:13:72:5a:e3:08:0c:73:6c:48:5d:f8:5b:
                    e1:e1:b4:7d:2e:3a:df:ec:c8:96:30:57:40:f0:fe:
                    5a:31:32:d1:56:1c:4f:74:48:97:81:c8:10:f4:21:
                    55:a0:11:15:8a:c6:ad:a8:1f:b3:56:d1:7f:f1:4e:
                    8a:f6:cb:2b:9b:7c:37:7c:fe:51:9a:62:e9:5f:f1:
                    38:b9:f4:28:43:2b:6a:77:84:15:08:78:52:41:80:
                    8e:7b:8a:22:41:26:2f:f4:97:fc:89:c5:68:34:bc:
                    f8:5d:9a:09:36:55:65:a3:86:e6:b2:5c:da:f4:2c:
                    f2:39:14:51:ea:72:4a:3b:57:3e:f0:48:ee:2a:0a:
                    d6:a5:33:d0:e0:28:83:bb:18:df:b7:89:19:b3:c3:
                    5c:94:10:01:91:c3:7a:06:e1:2c:a8:30:ac:f5:3b:
                    df:c3:e2:a8:43:cc:60:5d:49:75:28:78:24:14:8f:
                    81:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:DD:2A:A6:93:C9:0B:65:AA:3E:27:9A:95:83:2D:DD:FD:A1:62:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f317d31f-87c1-39ec-8606-da10a8c4fb4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.147.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:0b:97:45:e8:75:8c:02:0b:c8:34:3a:ec:48:dc:15:cf:be:
         9e:bb:eb:60:55:2d:d6:9d:0d:59:38:1f:e5:a4:37:59:56:a6:
         4d:66:fd:14:32:f3:d8:27:88:8e:fc:a1:79:12:13:0a:ed:c4:
         d5:88:c4:58:d7:aa:56:06:03:5b:ac:3f:63:ff:42:2d:eb:34:
         bd:38:9d:f2:10:48:3c:94:4c:c2:d0:bd:ff:ef:a1:f9:97:21:
         5e:10:95:ad:40:3c:61:a8:ab:45:12:66:23:38:ed:a3:18:ea:
         e9:bd:f3:27:81:e2:11:b0:b7:08:91:0b:04:96:38:b4:48:59:
         43:9a:51:9b:f6:e3:ec:24:36:6d:b1:c9:99:ed:2c:15:a6:b5:
         b0:58:8f:99:3e:c7:90:23:f1:a6:f3:7c:5e:e4:99:06:cd:50:
         16:b0:ce:a2:91:fd:8e:e4:cb:0d:76:02:8e:fe:4c:3c:17:a8:
         61:97:d4:b0:5c:21:dc:4f:f2:91:3a:7d:24:fd:09:d6:c8:12:
         18:cd:30:15:f4:0e:ea:18:c8:b2:a9:98:bc:4d:0d:51:78:7b:
         65:b5:9c:f1:32:32:71:a7:72:5d:4f:42:a3:92:bf:c9:88:1c:
         66:0d:e8:23:89:9c:ea:a6:2b:48:73:63:77:b9:c3:8b:39:21:
         7e:2d:a8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:10:11 2025 by rpki-client