Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ff764ccd-0cf4-3a75-ab51-0a805aaaba49.roa
File:                     ff764ccd-0cf4-3a75-ab51-0a805aaaba49.roa (raw, json)
Hash identifier:          MmtDl5PYCZ182jRXnMJOIASYekPk/N/QgDpqeoGmOD4=
Subject key identifier:   42:9E:C2:5D:CD:28:34:0A:1F:A8:2C:D0:DB:BE:21:DC:4C:6E:CE:C7
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E6328C2F815619FADAF3B9480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ff764ccd-0cf4-3a75-ab51-0a805aaaba49.roa
Signing time:             Mon 27 Jun 2022 12:00:00 +0000
ROA not before:           Mon 27 Jun 2022 12:00:00 +0000
ROA not after:            Tue 02 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        139.56.0.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:63:28:c2:f8:15:61:9f:ad:af:3b:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 27 12:00:00 2022 GMT
            Not After : Aug  2 04:00:00 2022 GMT
        Subject: CN=f21825c1-26b0-4abc-a906-61a97296124a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:47:4a:0f:9d:94:95:65:f6:73:dc:79:41:20:
                    c9:6d:72:8f:5b:72:1c:43:5b:58:67:6c:4a:97:c9:
                    1f:ae:b3:2d:12:c2:68:99:60:f8:4d:b2:a3:4e:c4:
                    a0:70:df:58:ee:d2:db:f6:c1:0b:43:0c:50:78:26:
                    0d:18:59:22:bd:6e:7e:90:ee:4b:4f:e3:f2:bf:b8:
                    cc:07:6d:ca:21:e2:57:f5:0d:3d:2d:e4:bd:ac:a9:
                    ec:41:fc:11:58:d9:a8:4d:74:52:53:a6:ae:f6:b4:
                    c2:0b:09:07:4d:21:a2:bf:1c:8c:d3:f9:00:6d:45:
                    36:0e:d6:e7:44:f8:a5:42:55:34:64:b6:8a:82:da:
                    bc:65:f2:9c:08:64:12:1a:4a:93:e1:76:54:6f:b7:
                    7e:02:7e:ac:ca:e1:d3:25:66:95:00:e7:c2:b8:04:
                    60:b1:f9:61:84:b1:e7:67:fd:b8:9f:1f:21:1e:40:
                    22:73:d4:42:12:86:ff:e6:f8:bc:b5:0a:69:7e:6f:
                    3f:80:d3:9e:a1:03:6f:4f:ef:97:02:74:c8:7f:96:
                    a8:fa:ff:0d:2f:3c:b4:30:75:c5:2c:f7:f7:e5:73:
                    86:91:54:fb:48:f1:b6:dc:f8:d5:15:9d:2d:0a:5c:
                    5e:4a:6f:9a:d8:11:d7:55:2a:f7:de:ef:28:ea:02:
                    60:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:9E:C2:5D:CD:28:34:0A:1F:A8:2C:D0:DB:BE:21:DC:4C:6E:CE:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ff764ccd-0cf4-3a75-ab51-0a805aaaba49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:8d:66:dd:77:98:33:8b:93:12:70:50:f3:33:85:af:47:6a:
         38:20:8d:e3:c8:f8:02:d9:19:d8:2f:85:ed:ae:29:e4:7b:d5:
         af:b3:fa:5a:58:3d:dc:7d:f7:db:d7:34:78:d7:4b:c6:32:2a:
         75:1b:f6:84:f1:af:92:2d:8e:62:e3:ea:84:4b:c2:16:f1:86:
         d8:cd:34:05:91:c1:b7:38:96:e9:d1:31:10:30:4b:54:76:33:
         f8:6e:7b:87:65:7a:6e:73:d0:84:5c:3f:b7:2b:62:fa:ac:87:
         1d:fa:2e:b0:56:fd:aa:d2:d2:7d:bd:e0:5c:90:0a:a6:11:ba:
         b2:d2:77:37:25:0e:79:08:d0:e7:eb:23:46:1c:63:c6:c9:6e:
         20:69:6d:c1:e2:90:f7:74:6c:ea:a4:f4:e8:27:79:72:15:08:
         e2:a7:43:62:7e:41:0c:54:da:b8:0a:78:2d:a6:2b:31:23:0f:
         09:9a:ed:1d:16:2b:d5:fc:73:65:3e:68:47:ee:a3:d8:bf:eb:
         a3:e9:b8:cd:b2:3d:c2:7a:e8:80:64:90:ad:38:8a:f3:9e:95:
         56:6e:dc:e5:a2:8e:b6:e0:1c:4f:10:f6:46:43:a5:27:ac:8c:
         1a:3e:c4:e0:1c:38:8d:74:85:80:1a:61:63:38:91:69:97:7e:
         e0:cc:15:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:24 2025 by rpki-client