Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f7f45c0c-f932-3c0a-9da1-826876ef03a0.roa
File:                     f7f45c0c-f932-3c0a-9da1-826876ef03a0.roa (raw, json)
Hash identifier:          MhwFvbDi8F7E17OjkA5UFuB5rxg3tCUliwShhh/sp6c=
Subject key identifier:   BE:85:DE:BE:5E:08:80:FC:8A:4C:CB:7D:40:C7:62:3B:E9:49:65:7D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FB1AC669E0A3F15067FCB2CB0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f7f45c0c-f932-3c0a-9da1-826876ef03a0.roa
Signing time:             Tue 25 Oct 2022 12:00:00 +0000
ROA not before:           Tue 25 Oct 2022 12:00:00 +0000
ROA not after:            Wed 30 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        56.133.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b1:ac:66:9e:0a:3f:15:06:7f:cb:2c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 25 12:00:00 2022 GMT
            Not After : Nov 30 05:00:00 2022 GMT
        Subject: CN=c03a4895-7d2e-4f37-8810-583a12760f69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:be:ab:a1:41:01:57:4f:e0:c0:d6:fb:9a:55:
                    75:4a:6d:90:43:e8:32:f5:d6:32:21:18:c8:e4:3a:
                    f0:5f:7c:1b:4a:2c:43:34:49:87:f0:4b:f0:9a:93:
                    1a:3b:36:fa:7d:dd:f4:54:bc:80:da:d4:7f:f4:4d:
                    82:5c:9e:ce:03:7a:0c:da:d8:38:59:d1:fb:48:6a:
                    3b:cf:77:fa:3c:05:ef:93:34:7e:25:00:92:cb:b4:
                    e8:4a:48:9c:9d:e3:89:32:9c:e8:e2:3d:d0:7f:ad:
                    e3:dd:9c:44:d3:19:36:47:2d:6c:c3:d0:c6:85:46:
                    15:79:cd:5a:29:a2:49:a9:b5:d4:93:6b:51:dc:6e:
                    77:9b:d8:12:ad:2d:17:d6:c1:41:ee:5d:83:58:5f:
                    3d:e6:04:5f:4b:54:9a:09:a0:0b:ca:26:e9:88:27:
                    d5:3a:d6:6e:bf:37:36:a9:de:25:e2:a9:44:62:27:
                    b9:d7:54:c9:da:ac:c6:01:f2:bb:96:32:2b:71:c2:
                    f9:4c:72:64:55:6f:1c:47:4a:4d:70:b0:23:d9:54:
                    93:46:c7:48:d9:ce:41:01:b9:1e:e2:0b:fc:1e:cd:
                    78:5f:72:95:aa:0f:4f:23:7b:3e:76:fc:19:25:57:
                    e1:b2:a1:af:32:99:91:83:3b:97:9a:10:50:34:21:
                    5b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:85:DE:BE:5E:08:80:FC:8A:4C:CB:7D:40:C7:62:3B:E9:49:65:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f7f45c0c-f932-3c0a-9da1-826876ef03a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.133.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:71:72:2b:fd:58:2a:b6:8e:5a:de:a7:69:57:24:49:29:e7:
         41:2d:0d:ae:9e:c3:24:1e:a6:5e:7d:9d:8f:09:d8:55:c0:53:
         a3:ee:60:8f:69:5e:51:42:cd:03:c8:3e:df:fd:dc:85:85:13:
         13:40:cc:af:2e:fc:90:d8:65:a1:ec:5b:ef:28:b4:a6:74:7a:
         49:db:9b:01:b2:f0:61:6b:c8:36:69:77:6d:dc:58:f2:be:f2:
         d7:7a:6c:4c:ee:5c:65:80:b8:06:83:03:5f:13:0c:4b:3f:61:
         2b:ac:54:62:96:58:e0:e1:8e:05:8f:30:7c:74:b1:29:b7:3e:
         8f:23:ab:2a:4a:7e:66:17:2f:1f:af:92:96:a3:b5:79:a1:b8:
         52:d2:d9:5c:a9:55:ce:1b:f3:ea:c5:ab:11:87:2f:f9:b4:69:
         9b:42:10:d7:8a:88:3a:08:50:3a:86:d4:2d:a4:00:6d:6b:a0:
         8a:0c:a2:de:bd:34:16:94:20:13:a2:84:3d:56:4d:88:a9:25:
         6a:6f:93:c5:fd:4a:95:c6:28:26:da:73:cb:d9:04:7d:a2:7a:
         bb:53:41:5a:7d:24:79:bd:32:48:b0:4d:73:e2:47:09:40:99:
         0b:27:4f:1a:34:b1:61:7d:d2:22:f3:c6:a7:a1:ec:94:69:be:
         f7:77:fa:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 12:57:29 2025 by rpki-client