Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fee52051-04c2-300c-9a4e-1380c712f997.roa
File:                     fee52051-04c2-300c-9a4e-1380c712f997.roa (raw, json)
Hash identifier:          UqFnunc7KDlgnX0Bup9Uim+J4HetnzQWN/LF2edztlU=
Subject key identifier:   49:71:72:D5:98:F4:DE:75:B8:FF:86:64:67:C0:B4:6E:F1:0A:74:D0
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DA88CE31DF89C5B79A6BF0600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fee52051-04c2-300c-9a4e-1380c712f997.roa
Signing time:             Thu 21 Apr 2022 12:00:00 +0000
ROA not before:           Thu 21 Apr 2022 12:00:00 +0000
ROA not after:            Fri 27 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        104.255.56.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a8:8c:e3:1d:f8:9c:5b:79:a6:bf:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 21 12:00:00 2022 GMT
            Not After : May 27 04:00:00 2022 GMT
        Subject: CN=557c8275-db86-465e-8623-0ae065862f1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:79:0d:62:12:55:39:45:82:38:87:8f:6a:56:
                    65:5f:9b:c6:89:fc:da:95:58:53:3a:1f:0c:83:74:
                    3e:08:5d:81:ce:2e:33:ed:cf:26:a7:4e:8f:b8:c2:
                    ef:fb:34:f7:f0:6a:cc:9c:4b:b2:b6:f0:82:71:11:
                    36:16:cc:38:99:45:7a:5d:04:e8:aa:78:c5:bd:c5:
                    51:d1:68:fd:3f:e5:a4:dd:27:c5:55:3d:14:72:43:
                    a9:52:99:62:c4:f3:7c:92:29:25:f3:08:f8:11:09:
                    7d:d8:89:0b:1a:8e:5c:20:62:99:f6:74:cc:c9:cc:
                    47:8c:4f:fd:7b:62:10:dd:ff:08:5a:cc:a1:93:0e:
                    68:c7:c3:d7:e5:d9:b1:fb:18:de:f2:79:0a:ca:ac:
                    c6:52:fe:0e:8f:c8:46:15:c7:4f:53:b0:12:a9:04:
                    47:6a:5b:19:b4:cb:35:d4:97:0a:2e:f2:f0:8e:0b:
                    c2:6d:d5:6b:4e:26:02:72:1b:55:3c:f6:1c:3a:ea:
                    b6:8a:11:ef:b3:67:c6:21:bb:70:7c:c5:08:c1:bd:
                    0d:99:ac:3f:48:d2:55:60:fc:ed:47:a2:06:4f:43:
                    18:60:09:43:74:1b:16:04:d4:45:03:c1:a2:6f:a5:
                    ca:74:fa:9f:70:c9:5a:7f:5b:96:c7:93:a3:55:8e:
                    64:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:71:72:D5:98:F4:DE:75:B8:FF:86:64:67:C0:B4:6E:F1:0A:74:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fee52051-04c2-300c-9a4e-1380c712f997.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:da:73:2b:42:56:1b:2b:aa:9e:b5:92:0b:00:97:82:69:c6:
         d5:ff:c3:61:a7:1e:44:5a:b5:46:2d:17:7e:d7:12:f2:22:9e:
         eb:5a:8c:e9:eb:a9:b8:ff:b8:af:5c:33:ae:4d:6e:50:b8:6b:
         4a:d1:45:78:a0:24:e0:20:df:36:0e:fa:79:a1:9a:e1:9b:bf:
         3c:0b:23:a5:09:a9:5e:c8:f0:c5:3a:8b:5b:dc:2b:19:0b:2e:
         03:7c:e3:62:c1:6e:4d:48:84:99:dd:c5:4f:c9:c2:37:f6:94:
         78:7c:f3:bf:99:4a:99:3c:19:2b:b7:d9:fd:59:38:6f:2a:e8:
         06:2b:19:1e:03:e5:4e:c6:29:51:fb:f9:32:f6:0f:30:26:b9:
         1e:23:5f:c3:2a:4c:c3:86:a4:64:ec:64:8d:c5:19:10:43:ca:
         2c:cc:bf:cb:f8:fd:10:b3:09:86:ad:46:3e:69:bc:b8:1a:b6:
         ce:8f:6e:eb:c5:d2:0b:21:89:03:9e:11:eb:17:44:c5:0a:d2:
         2d:61:a9:26:d9:9a:32:5d:b4:22:99:2a:2c:21:4e:82:6d:23:
         d3:f0:9a:44:3e:0a:a5:83:36:3e:ad:d1:bf:82:b8:b1:6e:db:
         45:b9:74:e8:1e:ba:09:d7:34:9d:82:09:8c:c3:2b:a4:be:59:
         62:11:ce:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD2ojOMd+Jxbeaa/BgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDQyMTEyMDAwMFoXDTIyMDUyNzA0MDAwMFowLzEtMCsGA1UEAxMk
NTU3YzgyNzUtZGI4Ni00NjVlLTg2MjMtMGFlMDY1ODYyZjFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnkNYhJVOUWCOIePalZlX5vGifzalVhTOh8M
g3Q+CF2Bzi4z7c8mp06PuMLv+zT38GrMnEuytvCCcRE2Fsw4mUV6XQToqnjFvcVR
0Wj9P+Wk3SfFVT0UckOpUplixPN8kikl8wj4EQl92IkLGo5cIGKZ9nTMycxHjE/9
e2IQ3f8IWsyhkw5ox8PX5dmx+xje8nkKyqzGUv4Oj8hGFcdPU7ASqQRHalsZtMs1
1JcKLvLwjgvCbdVrTiYCchtVPPYcOuq2ihHvs2fGIbtwfMUIwb0Nmaw/SNJVYPzt
R6IGT0MYYAlDdBsWBNRFA8Gib6XKdPqfcMlaf1uWx5OjVY5kZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFElxctWY9N51uP+GZGfAtG7xCnTQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZmVlNTIwNTEtMDRjMi0z
MDBjLTlhNGUtMTM4MGM3MTJmOTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaP84MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJLacytCVhsrqp61kgsAl4JpxtX/w2GnHkRatUYtF37XEvIinutajOnr
qbj/uK9cM65NblC4a0rRRXigJOAg3zYO+nmhmuGbvzwLI6UJqV7I8MU6i1vcKxkL
LgN842LBbk1IhJndxU/Jwjf2lHh887+ZSpk8GSu32f1ZOG8q6AYrGR4D5U7GKVH7
+TL2DzAmuR4jX8MqTMOGpGTsZI3FGRBDyizMv8v4/RCzCYatRj5pvLgats6PbuvF
0gshiQOeEesXRMUK0i1hqSbZmjJdtCKZKiwhToJtI9PwmkQ+CqWDNj6t0b+CuLFu
20W5dOgeugnXNJ2CCYzDK6S+WWIRzsg=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:32 2025 by rpki-client