Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fbfb1d49-abc9-312f-b2a5-d5d9c8480f83.roa
File:                     fbfb1d49-abc9-312f-b2a5-d5d9c8480f83.roa (raw, json)
Hash identifier:          3ZgbbxyPmMEsqT13kZM3BCqDil1m5nqP66TeEfTx720=
Subject key identifier:   7E:19:31:E2:C6:E0:78:E4:8B:6A:7C:17:8C:44:C9:CB:82:20:E0:96
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F564603B125EEC2830C08E880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fbfb1d49-abc9-312f-b2a5-d5d9c8480f83.roa
Signing time:             Thu 22 Sep 2022 12:00:00 +0000
ROA not before:           Thu 22 Sep 2022 12:00:00 +0000
ROA not after:            Fri 28 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        104.255.56.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:56:46:03:b1:25:ee:c2:83:0c:08:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 22 12:00:00 2022 GMT
            Not After : Oct 28 04:00:00 2022 GMT
        Subject: CN=4da7dc0f-b763-49b0-af4e-8ca0370bf291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4d:e8:25:62:56:d6:31:43:13:2d:f7:1c:2a:
                    dd:ab:7a:45:26:57:30:b7:cf:6c:67:59:c0:b6:92:
                    86:d6:41:ff:f3:ec:ca:bf:f2:0b:cc:30:ff:79:e1:
                    e0:9b:5a:70:5f:3e:a7:d1:66:25:0d:c8:e4:0a:1f:
                    e3:06:91:d9:12:2b:08:de:a4:30:fb:4a:b1:42:b6:
                    f3:d7:18:6a:e9:32:ff:23:1f:e3:66:ed:82:03:48:
                    f4:72:91:49:85:52:be:23:f6:82:33:d2:6c:6a:2b:
                    03:f9:75:f6:5f:e1:b9:e0:10:52:ae:09:91:8e:ff:
                    15:e6:c9:62:75:e2:00:89:ee:46:db:fe:c2:47:f0:
                    b5:9d:5c:97:4d:ba:94:29:8c:bc:28:21:6a:1e:39:
                    3b:af:71:35:30:23:b5:e8:b9:7a:d8:0e:64:ad:04:
                    25:62:9c:6f:5d:af:b6:fe:76:df:ab:7e:2f:7f:97:
                    95:71:8a:9b:f0:55:44:61:62:36:6a:70:a4:01:70:
                    b7:7f:6b:6e:90:51:ad:8b:d4:b4:26:c2:3f:7e:6a:
                    b1:15:8b:ca:8f:85:26:f3:8c:36:7b:02:e3:34:be:
                    64:97:07:f1:a9:28:b3:a2:62:8b:90:47:f6:a4:54:
                    31:9c:be:b9:d2:2a:e9:ee:23:71:e4:71:e6:60:93:
                    a6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:19:31:E2:C6:E0:78:E4:8B:6A:7C:17:8C:44:C9:CB:82:20:E0:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fbfb1d49-abc9-312f-b2a5-d5d9c8480f83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:ff:46:b3:af:21:53:dc:f0:70:bc:61:e7:4e:53:07:f9:76:
         4d:82:81:ab:05:6a:4e:06:a8:c9:b5:48:67:a2:5d:21:7d:b7:
         18:6d:22:1a:37:09:70:9e:f7:22:61:2d:b1:b6:22:7d:c6:48:
         ab:a0:79:1f:17:69:7f:1f:34:99:e6:ee:f2:00:f1:40:fb:d4:
         8f:d4:91:95:05:d4:e1:b1:33:70:67:0a:e4:86:99:01:dc:24:
         5f:5b:fd:f5:d1:f1:0b:5e:c3:d3:f9:79:3d:86:07:37:d8:8b:
         36:ad:00:06:20:55:a5:56:bd:f1:50:f0:11:cd:68:38:c1:c8:
         fc:96:7d:e3:05:21:53:41:fe:0f:85:b6:71:02:dc:82:d7:35:
         c2:cd:14:96:97:d2:8e:7e:a3:d5:a4:69:8e:83:29:a9:9d:eb:
         33:24:16:93:2a:63:02:2c:2c:3a:fd:0a:f2:d9:49:73:85:4f:
         cb:f7:cf:83:8b:31:07:8a:f5:28:95:a9:2d:e8:96:f1:c1:4b:
         a6:8d:eb:fd:54:2b:c1:3a:ea:32:4c:ba:f9:97:c6:5d:13:25:
         24:d6:d2:13:15:f6:d0:01:98:8f:3f:b2:23:02:ea:f7:f1:ff:
         c4:73:c1:6e:ff:9d:c0:50:9f:22:c4:45:3c:89:e7:31:48:65:
         27:09:09:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:49 2025 by rpki-client