Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0d61825a-f511-3ac1-bf47-5c4bc238eef3.roa
File:                     0d61825a-f511-3ac1-bf47-5c4bc238eef3.roa (raw, json)
Hash identifier:          CPOrPcRRW1PP5XaK6D2c6aH3nSSsZC9PwXaAwORLqTw=
Subject key identifier:   5C:A4:99:D5:A1:3C:62:4B:AD:70:87:DC:8C:E6:76:14:14:6E:1C:7C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584064D6C672B9D9A17F56ABDD80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0d61825a-f511-3ac1-bf47-5c4bc238eef3.roa
Signing time:             Wed 28 Dec 2022 12:00:00 +0000
ROA not before:           Wed 28 Dec 2022 12:00:00 +0000
ROA not after:            Thu 02 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        136.18.50.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:64:d6:c6:72:b9:d9:a1:7f:56:ab:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 28 12:00:00 2022 GMT
            Not After : Feb  2 05:00:00 2023 GMT
        Subject: CN=ff64991e-3755-401c-b4ad-3f4c82a8c3da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:04:a7:e3:c0:ec:0e:99:1e:75:bb:8a:6c:4f:
                    ba:bb:71:74:26:f5:6a:cc:0c:3d:53:76:d9:0b:32:
                    4f:b1:1a:ce:b8:52:1f:7f:75:f0:8e:91:fa:ac:81:
                    f6:d5:2b:7e:43:94:d7:61:c2:29:54:ef:04:d7:3b:
                    6b:67:53:c5:63:15:e7:26:73:ba:90:4b:fa:6f:75:
                    12:65:6e:97:0d:37:6d:db:86:3f:17:21:49:3b:48:
                    63:3e:55:00:ae:5f:51:20:41:92:57:a5:da:6d:8b:
                    d2:7b:c2:72:e1:49:38:ab:69:d5:38:4d:53:71:6a:
                    ec:61:cf:2c:d2:35:83:78:d0:18:2f:c6:c3:f0:3c:
                    58:13:e2:bf:f2:3e:42:2c:18:f3:5e:67:84:e4:56:
                    68:ef:4b:e5:78:c6:7d:b2:13:56:59:c9:bd:a7:ab:
                    49:2b:f1:32:c9:d9:a7:14:c5:21:22:41:89:1d:b8:
                    60:4d:74:39:bb:14:5f:ce:a1:a9:c8:0c:6a:6f:d8:
                    d8:b7:ad:de:09:fb:6d:c7:80:6a:da:2c:22:53:98:
                    38:da:f6:62:4c:0d:f3:ca:73:07:7c:b2:6f:25:26:
                    16:66:62:6d:ba:bb:33:36:92:9d:a3:a7:bc:10:21:
                    b9:0f:df:13:14:e9:cf:fc:32:eb:13:5f:19:3f:45:
                    b1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A4:99:D5:A1:3C:62:4B:AD:70:87:DC:8C:E6:76:14:14:6E:1C:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0d61825a-f511-3ac1-bf47-5c4bc238eef3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:0f:b2:aa:ca:c9:64:c0:63:6f:43:de:99:25:77:c6:eb:42:
         f2:ef:17:e8:ad:74:44:0a:90:22:a0:be:8c:6e:7f:f1:e2:fd:
         cb:3f:d0:1e:fc:57:e2:48:dd:3c:83:60:20:b9:e8:9b:ba:93:
         d8:2f:a3:9a:6d:18:62:56:89:dd:9f:a7:17:b3:29:09:5f:7a:
         94:ec:19:57:87:be:67:8d:cb:a1:00:b4:fb:b8:ec:1f:46:fc:
         1b:28:1d:b1:e4:93:7c:50:1f:0c:c4:7a:ce:7f:5e:05:ff:bc:
         dc:53:e6:3b:76:a4:8e:10:07:6b:66:d8:98:2b:10:e5:21:c2:
         ba:11:ac:a4:4c:33:6a:f6:15:0f:35:44:92:28:f2:6a:e6:e7:
         3d:c4:58:81:68:db:6d:08:27:7a:8f:62:61:3a:f2:09:46:98:
         ce:0c:57:79:53:b8:86:bc:31:9d:0e:a6:80:f3:78:da:e9:d9:
         48:73:93:da:12:71:a5:0a:2c:75:8f:f3:7d:69:bc:8d:e4:bc:
         ce:ad:b6:b4:76:04:70:22:ae:8f:1c:bb:32:83:dd:e2:0d:0d:
         e3:72:94:77:7f:58:6b:53:58:eb:7f:bd:c2:fc:ff:24:2b:1e:
         2a:7a:fc:cf:7e:b2:fd:41:84:84:f0:fc:d8:78:d4:d9:00:e5:
         11:c7:63:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:21 2025 by rpki-client