Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/175df8ac-ac90-3b7d-b2b0-25bd8c244de7.roa
File:                     175df8ac-ac90-3b7d-b2b0-25bd8c244de7.roa (raw, json)
Hash identifier:          8QzrkJ+k+YeBQSxCt3FT893ok+l4A0NSUeAV4gpk84c=
Subject key identifier:   02:51:96:33:05:D9:D0:FF:C4:24:8D:FF:29:43:BB:E1:84:41:10:88
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F530BBEA765CD7B5669498880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/175df8ac-ac90-3b7d-b2b0-25bd8c244de7.roa
Signing time:             Wed 21 Sep 2022 12:00:00 +0000
ROA not before:           Wed 21 Sep 2022 12:00:00 +0000
ROA not after:            Thu 27 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        136.18.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:53:0b:be:a7:65:cd:7b:56:69:49:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 21 12:00:00 2022 GMT
            Not After : Oct 27 04:00:00 2022 GMT
        Subject: CN=f307cfc0-799a-4b85-ab89-5e9b87fcd8a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0d:14:09:0f:49:57:62:6b:ed:c4:3c:ee:52:
                    4d:de:31:4e:2b:84:e6:20:ba:c0:7e:a6:f0:54:94:
                    e0:b0:97:e1:21:87:a4:63:37:b1:87:47:31:f3:8a:
                    1d:3f:54:c9:b7:b1:10:dc:30:ab:c0:ff:bb:85:11:
                    f9:08:79:d5:3f:a0:90:1f:8f:55:88:67:8f:1c:67:
                    d9:bd:40:8c:71:04:02:a7:85:91:78:e8:c6:0a:d0:
                    d2:94:03:c2:4c:3e:d6:35:91:32:fe:80:94:10:28:
                    09:39:b0:e4:a2:fb:73:f1:7e:55:65:4c:af:b4:fb:
                    c1:99:ac:76:18:18:42:18:40:03:19:84:a1:6b:75:
                    a7:5e:05:e7:48:e4:14:37:e8:e9:3e:80:c9:75:82:
                    23:54:17:f0:ed:48:a3:f8:ae:4e:a8:3d:d4:41:8e:
                    c7:8a:f7:16:b5:c5:0f:d3:33:3b:76:b2:df:9a:53:
                    27:47:c3:ec:23:d6:79:ee:a6:60:d7:6f:e7:b7:fc:
                    9a:1a:5b:72:f4:cc:df:8f:95:d4:34:b4:1f:8e:d0:
                    29:81:d2:e9:25:76:0f:35:ce:ee:51:6b:5b:f2:94:
                    a6:58:08:58:ed:7f:97:fb:5e:74:45:e8:3b:6f:04:
                    73:0f:e5:61:2b:b0:27:47:5c:79:53:fc:eb:a9:8b:
                    36:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:51:96:33:05:D9:D0:FF:C4:24:8D:FF:29:43:BB:E1:84:41:10:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/175df8ac-ac90-3b7d-b2b0-25bd8c244de7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:db:66:26:3d:9c:85:75:ce:da:3d:33:8b:50:98:e8:43:d4:
         4f:cd:12:82:88:7a:45:23:57:b0:81:4d:59:52:04:11:1f:11:
         53:9b:3e:7a:d1:50:53:bc:c4:fd:bd:38:a5:86:1b:d8:c3:3b:
         ef:30:c1:9b:55:51:12:24:60:e9:cb:28:b1:65:aa:5e:a8:0b:
         61:0f:ea:82:41:6e:06:9c:88:49:e8:40:3e:4e:e6:d5:ac:10:
         1e:27:b1:1b:ad:df:45:ec:dc:94:4b:df:b4:95:fe:75:e9:ec:
         fe:f6:a9:30:45:24:59:76:a7:98:bf:23:9a:8d:0d:71:ae:ab:
         17:dc:67:75:75:61:99:d3:6e:19:a7:a9:dd:bf:ca:20:c3:96:
         a5:38:1a:b7:05:a0:a4:82:3f:97:14:2d:5b:2f:91:f8:35:7a:
         a0:c9:fb:4e:49:10:e8:53:5a:8e:38:25:26:97:47:eb:1e:62:
         20:42:b0:78:4a:5d:2b:bf:ce:0b:12:62:2b:a5:80:02:bc:90:
         2a:d7:5f:8c:dc:11:08:12:61:5d:60:3a:e4:fe:60:ce:0d:f1:
         9e:0d:2d:55:aa:a0:8a:ca:fa:24:38:ba:ae:e2:39:64:32:4a:
         22:3d:e8:77:b3:2c:69:33:da:77:e5:47:89:16:31:f2:bb:34:
         51:80:f1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:30 2025 by rpki-client