Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f68540be-687a-37f3-937c-d6fb6d61ef3c.roa
File:                     f68540be-687a-37f3-937c-d6fb6d61ef3c.roa (raw, json)
Hash identifier:          g1PjbYsjuxGp6VL9IgI0h9hkkekTqZywyxUWlcKwUFY=
Subject key identifier:   FA:B2:8E:5E:20:81:7C:76:60:ED:45:C5:C3:03:70:18:A7:2F:E9:0E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D2A2AA1DA490752148D0035D0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f68540be-687a-37f3-937c-d6fb6d61ef3c.roa
Signing time:             Tue 08 Mar 2022 05:00:00 +0000
ROA not before:           Tue 08 Mar 2022 05:00:00 +0000
ROA not after:            Tue 12 Apr 2022 04:00:00 +0000
asID:                     701
IP address blocks:        139.56.5.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:2a:2a:a1:da:49:07:52:14:8d:00:35:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar  8 05:00:00 2022 GMT
            Not After : Apr 12 04:00:00 2022 GMT
        Subject: CN=7e6f05a2-96ed-4a8c-9b50-5f968492d2d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cf:a1:c8:28:59:36:2d:12:b4:d7:81:c7:ee:
                    25:da:6a:05:ae:c9:58:9b:47:82:19:8a:1d:1f:7c:
                    d1:56:1f:0e:56:84:2d:41:d3:8c:d0:01:31:51:a4:
                    18:cf:4f:de:66:88:00:27:7e:2a:d3:2c:1e:79:95:
                    c2:74:37:84:eb:b4:e4:d3:51:b0:33:80:f6:4d:ec:
                    c1:b0:9b:72:79:ba:44:9d:6a:05:cd:62:bf:c4:a8:
                    c7:7d:b1:02:22:3c:38:1f:85:8b:c5:0a:56:e6:af:
                    04:5f:7b:67:67:dd:46:b9:d2:a2:20:3a:a4:95:4d:
                    89:41:9c:e5:17:21:10:c3:dd:54:7e:75:93:3b:f5:
                    8d:51:2d:7a:6f:81:c1:cf:af:c8:17:95:00:9e:d1:
                    55:2b:6c:fd:b6:6a:eb:57:ab:b1:3e:f5:e3:39:b1:
                    09:2d:55:5d:e1:99:18:dd:22:e5:b5:88:b5:8e:16:
                    d1:90:d4:c7:a9:01:2a:dc:17:aa:47:fd:5b:11:49:
                    e2:40:e9:dd:30:56:e6:eb:cc:8a:f9:73:bf:54:d9:
                    0d:3d:11:98:ea:5b:99:8e:83:5b:f9:8a:86:87:61:
                    d9:1d:c8:36:c8:4c:50:c5:b9:db:f1:1b:49:8c:9d:
                    72:e9:c6:0d:83:07:27:39:85:2d:d4:31:0b:17:de:
                    34:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B2:8E:5E:20:81:7C:76:60:ED:45:C5:C3:03:70:18:A7:2F:E9:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f68540be-687a-37f3-937c-d6fb6d61ef3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:36:c6:e5:2e:48:64:9e:91:84:f3:af:1f:4e:9e:f9:94:91:
         64:39:c9:5a:90:01:f6:36:8b:4b:f9:34:c7:00:91:c2:11:50:
         3f:40:cd:bc:79:bd:1a:be:97:ab:83:49:4d:c1:34:5a:db:0a:
         0c:ae:db:16:df:dc:f0:59:8e:d9:5b:86:63:45:b6:8a:a9:b6:
         0a:87:aa:f4:b1:c0:9f:f0:d5:4e:c4:56:a3:a1:91:f9:14:2a:
         f3:2c:b1:a5:ae:02:af:de:96:25:57:8b:5b:d1:b9:c1:cd:f9:
         41:61:22:c1:0c:cf:c4:04:bd:91:2c:f1:8d:93:28:fe:87:84:
         c5:e4:ab:e1:70:2b:06:a0:f1:91:4b:35:1e:17:85:cc:2e:64:
         a7:f7:1e:d1:ec:91:26:a7:2e:05:d2:5b:1f:59:04:1f:2d:f3:
         a1:8d:87:e2:3f:74:6c:d2:46:7a:ee:14:71:52:fe:aa:a6:35:
         e6:e0:0d:65:d3:e5:e0:7b:56:6b:80:17:66:19:78:fc:82:4b:
         b9:6c:fa:7f:e4:fc:d0:b4:e5:af:eb:73:2e:66:6c:78:a1:2f:
         f8:ea:db:dc:9a:20:fc:5b:7c:86:f1:b6:e6:27:08:f5:15:99:
         e0:67:ba:73:c5:f8:cf:e2:d6:2a:8a:2c:4a:a4:4e:31:55:3d:
         be:8e:f5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 11:35:54 2025 by rpki-client