Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0067898f-e00f-326a-9bb7-3bd97383431f.roa
File:                     0067898f-e00f-326a-9bb7-3bd97383431f.roa (raw, json)
Hash identifier:          OYqxfjss+rmjsk/f/YaletWiFm845fN9Ox0M5CSMz+Q=
Subject key identifier:   66:16:C3:2A:54:CF:9E:77:E6:86:D3:BC:D3:BB:69:07:07:63:0F:66
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F7A123CDB9C81B38867D66FA0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0067898f-e00f-326a-9bb7-3bd97383431f.roa
Signing time:             Wed 05 Oct 2022 12:00:00 +0000
ROA not before:           Wed 05 Oct 2022 12:00:00 +0000
ROA not after:            Thu 10 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        136.18.56.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:7a:12:3c:db:9c:81:b3:88:67:d6:6f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct  5 12:00:00 2022 GMT
            Not After : Nov 10 05:00:00 2022 GMT
        Subject: CN=e6d56de5-3508-406c-8f1e-177161a8614d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:af:b9:51:b2:7f:de:c6:fe:b4:dd:59:48:c4:
                    3c:59:cb:25:40:50:2b:a5:00:4e:99:f4:c6:12:bf:
                    ed:e7:a7:6e:37:51:66:82:ac:1e:fd:78:bd:a5:ad:
                    a8:17:35:a3:ff:05:99:2f:59:c2:2f:2b:f8:23:7f:
                    f7:1b:23:5d:e6:d5:50:5d:7c:14:94:ec:29:1e:33:
                    5c:c2:f4:c9:ca:8d:e7:47:07:eb:cd:0d:f9:34:87:
                    b3:ac:9b:9a:74:d4:f2:7e:3c:e0:ae:52:3b:c5:7b:
                    1f:33:ff:25:b1:83:7b:ab:ec:fe:4d:d5:28:62:53:
                    4a:be:2e:98:85:16:b5:37:e6:68:46:67:48:38:b3:
                    e4:7e:f4:7b:54:bf:94:2a:d1:8f:63:24:ff:5d:c9:
                    7c:6c:af:d8:7c:79:77:3c:2f:67:4c:cc:f9:16:74:
                    07:29:41:86:0e:aa:fc:c5:ff:4c:e2:6e:cb:f5:96:
                    79:77:ef:7f:8a:25:81:da:cb:62:cd:50:68:d6:1f:
                    26:d6:a4:0a:ed:86:e4:1c:62:e7:37:bf:45:9e:10:
                    6d:57:9b:70:8c:c5:6b:cf:19:f1:ee:73:fc:15:db:
                    1c:45:64:3f:24:7f:0b:75:1e:96:f6:19:2e:e7:b5:
                    10:9e:d2:48:97:0d:71:08:c3:c6:e5:a4:24:24:fd:
                    58:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:16:C3:2A:54:CF:9E:77:E6:86:D3:BC:D3:BB:69:07:07:63:0F:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0067898f-e00f-326a-9bb7-3bd97383431f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:16:27:f9:4c:19:48:b8:b7:32:d3:6b:78:90:c4:3f:97:21:
         7a:4a:18:15:49:e8:28:63:d4:33:42:98:23:e9:73:fc:31:e6:
         17:52:79:b7:33:c3:25:2b:e4:1e:f3:72:1b:6b:de:aa:66:04:
         74:d9:5f:3b:a5:75:7e:5d:57:e5:e8:17:f8:7c:20:5d:1b:4a:
         bd:35:ba:df:d2:cd:18:6b:84:e3:52:7c:b9:b5:e3:1d:b8:82:
         be:dc:a7:2e:ae:dc:c8:02:d2:de:42:f1:51:82:5c:66:2f:bd:
         3a:55:2f:c2:c7:bb:9f:1f:d5:16:18:f2:19:66:26:ee:7a:7e:
         69:9d:de:0e:29:53:2b:e8:d7:73:9b:08:f7:40:55:2e:21:ca:
         05:59:3d:f5:fc:80:7f:21:7d:0d:dc:25:b2:ce:aa:7a:96:62:
         79:2d:4e:ef:f6:0c:06:18:5f:66:be:70:e3:68:f6:aa:18:dd:
         9c:f8:af:c2:15:06:46:d3:c6:ba:71:99:b1:78:75:c7:e5:25:
         b4:3b:df:97:af:83:ff:3b:1f:c0:1e:94:5e:c6:84:82:ad:1e:
         28:4f:6e:4f:c5:49:bf:c9:51:56:89:6e:70:d7:c1:d8:49:de:
         84:63:77:49:14:b1:0d:37:d8:33:8e:5f:32:7b:87:1a:8d:a1:
         0e:e5:5d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:11:33 2025 by rpki-client