Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/05757ddc-269f-3706-a4f3-b7b9054aff97.roa
File:                     05757ddc-269f-3706-a4f3-b7b9054aff97.roa (raw, json)
Hash identifier:          0+QPkg05cwXTgb8x8eMSZwwyVUxwmmgtR8wa6IMCVFQ=
Subject key identifier:   EE:9D:2E:90:C9:43:C6:0B:CF:09:AC:4F:7C:CD:CC:EF:2B:E6:C1:53
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D7D3FBA9B12553577281AEFC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/05757ddc-269f-3706-a4f3-b7b9054aff97.roa
Signing time:             Thu 07 Apr 2022 04:00:00 +0000
ROA not before:           Thu 07 Apr 2022 04:00:00 +0000
ROA not after:            Thu 12 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        136.17.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:7d:3f:ba:9b:12:55:35:77:28:1a:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr  7 04:00:00 2022 GMT
            Not After : May 12 04:00:00 2022 GMT
        Subject: CN=f4360c2d-44f0-411b-a2ad-d5bbaa4830fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4b:7b:fb:2f:93:8e:cd:6c:cf:3c:85:77:e0:
                    dd:43:42:5a:41:6a:12:77:82:81:77:7b:ca:4e:bb:
                    0b:30:ae:3f:82:9d:58:2d:0f:ca:77:b6:db:8f:24:
                    02:a5:b6:23:42:0d:b6:6a:6a:17:97:86:5f:a5:cf:
                    af:eb:ab:09:08:65:f5:d1:28:d3:73:db:24:d7:ca:
                    5e:28:b3:8c:1f:f8:fc:82:cb:6d:ca:7a:76:64:4f:
                    76:e5:ff:04:83:3b:a2:f8:89:bc:23:d4:b9:4d:25:
                    c0:d3:2e:d2:ff:65:7f:18:f2:cb:cd:3d:01:8c:4d:
                    40:8b:ee:15:2a:87:cb:cd:17:4d:fc:ea:82:56:8d:
                    12:96:95:8e:16:1f:09:bb:a9:f2:94:08:ef:d6:38:
                    fb:1a:9b:f5:e2:3f:86:99:ad:d6:a5:1f:11:8e:6f:
                    44:99:47:61:2f:86:4c:73:c0:c3:80:61:a7:9d:c1:
                    1c:e1:01:66:59:80:72:74:9a:05:30:92:ba:ad:b8:
                    3b:c4:88:99:cd:db:2b:1a:f1:08:61:1f:e9:1e:47:
                    a6:0e:e9:96:59:a9:d4:e0:59:38:e3:d2:b3:96:58:
                    6d:aa:22:fe:73:c6:95:92:7b:12:8a:a0:f0:53:e3:
                    b5:7a:7c:55:69:73:f9:14:5c:aa:cd:d9:cb:11:e0:
                    eb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9D:2E:90:C9:43:C6:0B:CF:09:AC:4F:7C:CD:CC:EF:2B:E6:C1:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/05757ddc-269f-3706-a4f3-b7b9054aff97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.17.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:3a:7d:31:61:4d:d2:97:f3:dd:4e:c4:34:6f:9b:10:77:53:
         d7:f1:1b:13:75:7c:4f:b0:70:62:a8:90:7f:fd:c6:94:d9:7f:
         f0:4c:44:c6:e7:3f:da:33:ac:a3:0e:9f:5e:54:0f:f5:60:2c:
         a5:d9:6b:0a:e0:cc:66:6c:4c:8f:5b:34:07:ed:b9:b3:72:19:
         a1:14:66:e1:8e:0c:34:59:14:03:61:cb:4d:bf:c9:d6:5f:54:
         8b:e8:e1:cc:1a:63:5b:9f:ce:04:e1:10:75:b6:c9:aa:61:eb:
         02:e0:ce:24:12:74:71:de:fe:0d:3d:e9:63:6c:eb:50:9f:50:
         9e:c3:e3:63:76:c5:55:87:4f:3b:f9:7f:6e:57:34:ca:3c:79:
         e1:eb:5a:3d:cc:63:fe:08:2e:bb:4c:d6:aa:52:0d:60:8d:db:
         60:2b:50:34:8b:bd:52:06:9f:b7:10:72:38:1b:e5:88:a8:62:
         95:09:eb:9b:8f:21:6c:cc:aa:4f:38:c6:17:89:55:0a:66:d5:
         04:67:bd:3a:4d:87:c8:92:34:fb:d5:5f:27:ec:8d:5a:ca:41:
         21:80:38:01:ff:76:49:13:57:4d:96:71:97:f4:f5:34:09:66:
         4d:ed:09:e9:0f:56:d4:9a:83:8b:9c:ae:69:88:9d:77:91:af:
         a3:eb:9f:22
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD19P7qbElU1dyga78AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDQwNzA0MDAwMFoXDTIyMDUxMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZjQzNjBjMmQtNDRmMC00MTFiLWEyYWQtZDViYmFhNDgzMGZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEt7+y+Tjs1szzyFd+DdQ0JaQWoSd4KBd3vK
TrsLMK4/gp1YLQ/Kd7bbjyQCpbYjQg22amoXl4Zfpc+v66sJCGX10SjTc9sk18pe
KLOMH/j8gsttynp2ZE925f8Egzui+Im8I9S5TSXA0y7S/2V/GPLLzT0BjE1Ai+4V
KofLzRdN/OqCVo0SlpWOFh8Ju6nylAjv1jj7Gpv14j+Gma3WpR8Rjm9EmUdhL4ZM
c8DDgGGnncEc4QFmWYBydJoFMJK6rbg7xIiZzdsrGvEIYR/pHkemDumWWanU4Fk4
49KzllhtqiL+c8aVknsSiqDwU+O1enxVaXP5FFyqzdnLEeDrnQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFO6dLpDJQ8YLzwmsT3zNzO8r5sFTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMDU3NTdkZGMtMjY5Zi0z
NzA2LWE0ZjMtYjdiOTA1NGFmZjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiBEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAkjp9MWFN0pfz3U7ENG+bEHdT1/EbE3V8T7BwYqiQf/3GlNl/8ExExuc/
2jOsow6fXlQP9WAspdlrCuDMZmxMj1s0B+25s3IZoRRm4Y4MNFkUA2HLTb/J1l9U
i+jhzBpjW5/OBOEQdbbJqmHrAuDOJBJ0cd7+DT3pY2zrUJ9QnsPjY3bFVYdPO/l/
blc0yjx54etaPcxj/gguu0zWqlINYI3bYCtQNIu9UgaftxByOBvliKhilQnrm48h
bMyqTzjGF4lVCmbVBGe9Ok2HyJI0+9VfJ+yNWspBIYA4Af92SRNXTZZxl/T1NAlm
Te0J6Q9W1JqDi5yuaYidd5Gvo+ufIg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:25 2025 by rpki-client