Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0eb7078b-bcff-3d86-b828-8a14780e97eb.roa
File:                     0eb7078b-bcff-3d86-b828-8a14780e97eb.roa (raw, json)
Hash identifier:          gFjY7UO/CZ7yc6SiyyETHY9fZj70ZgrIxXFCQpO2Dls=
Subject key identifier:   41:88:BA:04:38:B1:58:14:FA:AF:CC:1E:4E:05:F5:E4:75:B1:54:CF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C96B3803DDAC597B8B319D8E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0eb7078b-bcff-3d86-b828-8a14780e97eb.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        108.136.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:96:b3:80:3d:da:c5:97:b8:b3:19:d8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=26d5c559-285b-44be-be12-f8523a780855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:09:92:81:8c:f4:fe:c3:10:11:fb:c6:6f:55:
                    8f:02:5e:bc:4c:f7:27:15:51:26:f6:ce:c4:00:c7:
                    8a:d5:c5:58:f2:d4:71:65:00:41:b0:3d:af:b9:04:
                    a4:b7:4c:50:52:c6:d2:28:66:aa:1a:87:4f:f6:1a:
                    33:bd:36:84:23:ed:6a:68:60:f9:00:9f:41:78:04:
                    53:33:4c:3e:18:27:f6:d0:d8:f8:31:67:a3:98:dd:
                    73:53:78:11:37:f9:13:f9:6f:5f:cf:09:e9:54:8c:
                    cd:52:10:0e:bc:25:68:09:b9:8b:42:1c:7c:94:e7:
                    a0:eb:3b:9e:27:8e:45:74:18:8d:22:e7:24:29:b2:
                    57:88:c4:7a:5b:6a:a6:37:3d:fc:01:35:b3:a1:9f:
                    29:e0:4b:e0:cb:78:2c:e4:cb:67:06:85:e9:13:d9:
                    55:ba:62:02:5a:ae:76:48:cb:ae:ac:f8:69:90:81:
                    a2:28:0d:fb:17:38:ee:08:c9:c1:0d:8a:ec:6f:63:
                    4a:d3:fa:1e:ab:97:54:37:d0:59:a1:8a:ad:25:ba:
                    ab:e0:83:df:14:d9:41:ad:2d:19:14:43:53:a7:9d:
                    7d:2e:6c:63:47:f5:a0:9b:ba:c9:62:e7:a8:2f:e0:
                    b4:7d:46:bd:81:1d:24:54:12:29:38:4f:eb:8f:a4:
                    8c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:88:BA:04:38:B1:58:14:FA:AF:CC:1E:4E:05:F5:E4:75:B1:54:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0eb7078b-bcff-3d86-b828-8a14780e97eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.136.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:82:6c:90:d1:74:f2:7e:e7:50:40:5f:d2:fe:20:10:a3:68:
         33:7f:dc:cd:b5:1f:7a:09:18:1a:1f:d2:c1:78:cb:7c:1d:d2:
         84:59:6f:7e:72:1f:2c:e7:18:ae:db:19:d0:6c:03:c9:c3:cb:
         e8:cf:f6:3f:e8:17:44:9e:49:89:9c:6a:37:41:8b:8c:ba:c0:
         ea:1f:5b:1c:fd:07:ba:7a:b8:a7:d4:4f:ee:47:c9:e8:cf:7c:
         53:39:a4:21:f5:c6:e0:13:1f:44:ed:da:f0:c2:cb:c1:25:24:
         db:e0:4d:e8:b0:c0:ba:ea:d2:51:4f:81:e9:a6:78:c4:33:a4:
         9c:7b:1d:b1:21:cb:07:b5:52:17:7f:ed:48:29:fc:f4:ea:ea:
         d0:59:97:3f:1d:73:9e:3d:9d:a1:45:8e:6a:b9:8a:68:a4:c5:
         43:a9:f8:e1:90:be:f1:c7:cc:dc:35:e5:f7:ce:1c:42:9c:da:
         12:a0:c1:7a:90:3d:2d:ff:86:e9:d9:f8:aa:84:c2:eb:58:04:
         b6:e3:94:f0:cf:7d:6e:3b:aa:11:25:60:65:5f:63:4b:f9:8e:
         81:d7:43:0f:31:07:70:b0:17:83:ef:16:7e:7f:1c:c7:df:42:
         75:8d:2b:c5:66:ef:74:d9:5e:ad:ac:7b:47:79:47:02:1f:ee:
         1d:25:4b:7a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDyWs4A92sWXuLMZ2OAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDExNDA1MDAwMFoXDTIyMDIxODA1MDAwMFowLzEtMCsGA1UEAxMk
MjZkNWM1NTktMjg1Yi00NGJlLWJlMTItZjg1MjNhNzgwODU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQmSgYz0/sMQEfvGb1WPAl68TPcnFVEm9s7E
AMeK1cVY8tRxZQBBsD2vuQSkt0xQUsbSKGaqGodP9hozvTaEI+1qaGD5AJ9BeART
M0w+GCf20Nj4MWejmN1zU3gRN/kT+W9fzwnpVIzNUhAOvCVoCbmLQhx8lOeg6zue
J45FdBiNIuckKbJXiMR6W2qmNz38ATWzoZ8p4Evgy3gs5MtnBoXpE9lVumICWq52
SMuurPhpkIGiKA37FzjuCMnBDYrsb2NK0/oeq5dUN9BZoYqtJbqr4IPfFNlBrS0Z
FENTp519LmxjR/Wgm7rJYueoL+C0fUa9gR0kVBIpOE/rj6SM9wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEGIugQ4sVgU+q/MHk4F9eR1sVTPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMGViNzA3OGItYmNmZi0z
ZDg2LWI4MjgtOGExNDc4MGU5N2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCbIgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAqYJskNF08n7nUEBf0v4gEKNoM3/czbUfegkYGh/SwXjLfB3ShFlvfnIf
LOcYrtsZ0GwDycPL6M/2P+gXRJ5JiZxqN0GLjLrA6h9bHP0Hunq4p9RP7kfJ6M98
UzmkIfXG4BMfRO3a8MLLwSUk2+BN6LDAuurSUU+B6aZ4xDOknHsdsSHLB7VSF3/t
SCn89Orq0FmXPx1znj2doUWOarmKaKTFQ6n44ZC+8cfM3DXl984cQpzaEqDBepA9
Lf+G6dn4qoTC61gEtuOU8M99bjuqESVgZV9jS/mOgddDDzEHcLAXg+8Wfn8cx99C
dY0rxWbvdNlerax7R3lHAh/uHSVLeg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:04:12 2025 by rpki-client