Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fa14bcb8-ea15-3574-9dfa-060272beb162.roa
File:                     fa14bcb8-ea15-3574-9dfa-060272beb162.roa (raw, json)
Hash identifier:          7T8xB/6MdlNpf6HAmfnsqS9fYq97mk7PKdwtqlv6Caw=
Subject key identifier:   16:55:4C:05:04:B8:6C:93:79:24:37:8D:DB:2C:44:22:B8:90:91:1A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840622299BDBC3519F129816380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fa14bcb8-ea15-3574-9dfa-060272beb162.roa
Signing time:             Tue 27 Dec 2022 12:00:00 +0000
ROA not before:           Tue 27 Dec 2022 12:00:00 +0000
ROA not after:            Wed 01 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        56.212.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:62:22:99:bd:bc:35:19:f1:29:81:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 27 12:00:00 2022 GMT
            Not After : Feb  1 05:00:00 2023 GMT
        Subject: CN=945a74db-d1f8-4d37-b859-65f96d2b8f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8a:0d:07:c9:c0:18:3e:36:78:2b:1d:f6:46:
                    23:4b:6b:93:66:c7:c0:bf:7b:07:b0:4c:76:71:4b:
                    d9:32:68:89:1e:69:1d:82:12:bb:6e:23:72:7f:b9:
                    34:14:43:7e:07:97:c2:64:b4:97:f5:28:de:da:c3:
                    0d:5d:65:e4:13:02:ec:f7:c4:08:8d:24:44:a4:7c:
                    f0:5c:cd:d5:a6:bd:cb:8c:a9:a5:c0:41:87:e5:34:
                    c7:02:ae:d6:01:09:ec:ed:12:b7:f8:e9:1d:b6:c4:
                    82:fa:3a:68:7b:14:a2:24:21:28:7e:07:16:70:5b:
                    e6:81:81:ab:2d:97:21:f8:38:30:74:49:6f:87:ce:
                    f2:15:6b:db:48:03:8b:a4:dc:9c:82:e9:35:75:d0:
                    14:99:9f:3b:c2:44:f2:63:97:eb:67:71:df:bd:f6:
                    e7:94:85:46:29:b9:0c:1b:3e:99:68:60:d2:a0:05:
                    e1:2c:df:8c:df:c3:91:72:5d:3f:6e:f5:26:7e:4d:
                    b2:3f:39:f3:cf:15:5c:ea:f8:47:95:95:7d:33:62:
                    38:ee:e5:06:3e:74:00:32:e2:8f:9e:57:95:a6:bb:
                    58:de:41:cb:db:e9:0c:ba:96:38:53:37:4e:c5:88:
                    3e:6c:82:21:db:bf:e2:f7:0b:f6:1d:50:55:70:cd:
                    b6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:55:4C:05:04:B8:6C:93:79:24:37:8D:DB:2C:44:22:B8:90:91:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fa14bcb8-ea15-3574-9dfa-060272beb162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.212.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:83:bf:f6:be:a1:4e:5c:fe:26:8a:a0:f8:75:e3:e7:fb:7f:
         c3:30:f6:3f:23:84:da:a0:55:39:fc:f3:3b:9b:82:65:c2:8a:
         db:56:e2:7a:32:59:a1:d0:5b:a5:91:f1:7f:61:68:0e:de:a9:
         ff:04:53:1e:42:ea:93:d8:eb:c9:be:45:fc:75:19:a8:a5:59:
         79:11:30:eb:2c:e1:50:c3:47:08:d5:3d:8b:79:b1:63:07:0f:
         7e:77:e9:51:e2:bb:45:ce:d1:9e:a0:0b:64:55:91:5e:24:25:
         91:ad:86:61:71:22:24:f2:84:e2:8f:a4:e2:19:dd:a0:5a:ff:
         61:eb:12:8f:81:14:bb:45:13:02:14:a6:0c:24:54:92:5f:fb:
         1a:53:3b:19:9e:c7:8b:0b:9a:d0:8f:3a:06:54:d4:f6:29:a5:
         0e:76:ef:6c:ec:35:fe:d1:e3:0f:c0:d8:97:53:1a:0b:b1:cf:
         5c:c5:80:fb:87:63:ae:c3:34:7d:13:f8:fd:2f:da:aa:9b:2a:
         0c:6a:fd:fc:a0:6c:c7:c9:9e:88:16:bb:60:cf:0a:8d:2b:c8:
         e9:d1:19:17:03:4a:a2:f8:74:b8:0c:fb:53:62:8f:66:a9:4a:
         a3:65:ae:ec:64:17:b1:50:20:71:8b:7c:b5:94:43:7b:13:1d:
         c9:2a:3d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:58 2025 by rpki-client