Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1852b547-b969-3b33-b24e-26780214104e.roa
File:                     1852b547-b969-3b33-b24e-26780214104e.roa (raw, json)
Hash identifier:          k6ZrdOy8FW+E22MLU++pnbx1SQZPp46FgZUGM3HerxU=
Subject key identifier:   20:96:73:3E:69:CB:C5:CC:1E:2E:43:B1:1F:C5:EA:7C:C6:70:46:F0
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FCF6C634BEAC0800B9C08C5E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1852b547-b969-3b33-b24e-26780214104e.roa
Signing time:             Fri 04 Nov 2022 12:00:00 +0000
ROA not before:           Fri 04 Nov 2022 12:00:00 +0000
ROA not after:            Sat 10 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        108.136.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:cf:6c:63:4b:ea:c0:80:0b:9c:08:c5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  4 12:00:00 2022 GMT
            Not After : Dec 10 05:00:00 2022 GMT
        Subject: CN=8bfcd856-4eb0-43f8-aa1a-c03477a7946e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5b:75:8e:c4:58:c2:b0:6f:73:af:28:5a:a5:
                    6c:4d:45:ad:3d:e5:84:36:5c:46:f5:43:98:fc:f0:
                    d3:87:5f:e1:58:c5:0c:4e:8c:dc:2e:aa:f9:75:eb:
                    b1:b0:16:76:39:0b:e7:95:3a:0c:d9:31:9e:e4:49:
                    20:1d:3a:6f:db:14:fb:c9:1c:5a:e0:16:17:25:ac:
                    e8:0b:9b:56:bd:eb:a2:69:0c:42:c8:62:aa:11:6a:
                    ad:72:5e:ad:7d:5e:cd:d9:53:72:19:07:c8:3c:11:
                    ae:4e:3b:23:8c:68:62:bf:30:26:91:d8:e4:60:53:
                    12:ba:c7:32:17:13:79:43:c2:83:ef:fa:91:29:9a:
                    8e:63:ab:3a:50:07:c1:2c:1b:52:6b:8b:b0:bf:76:
                    1c:60:4e:0a:25:b6:d2:5e:db:17:13:13:4f:39:0a:
                    b7:18:a9:fe:ef:de:10:9d:93:d6:90:5e:89:14:fd:
                    db:ec:5d:3a:b8:c7:58:42:e2:c9:81:6b:97:50:c3:
                    5d:6a:dc:88:9c:81:0b:9e:a3:47:11:8c:da:74:e9:
                    ee:8c:0c:93:0a:0a:9a:9d:59:0e:95:85:c2:76:52:
                    81:27:3a:32:4a:35:05:d7:c1:c9:08:ea:0e:69:54:
                    57:41:95:5e:ae:d8:c2:1a:a3:ec:ac:e6:2b:58:82:
                    9b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:96:73:3E:69:CB:C5:CC:1E:2E:43:B1:1F:C5:EA:7C:C6:70:46:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1852b547-b969-3b33-b24e-26780214104e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.136.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:c4:42:5d:70:36:29:ff:e5:08:bf:af:8f:45:21:85:2a:a1:
         6a:13:5e:bd:29:5e:5c:39:a8:84:24:da:3f:4a:43:14:62:5e:
         68:25:01:90:7a:08:ea:ce:11:a2:99:ca:3a:63:74:72:04:aa:
         9a:d8:f8:00:b0:67:f3:1e:b0:5c:20:36:25:f8:44:8c:c1:ae:
         52:a1:35:1b:b2:cc:19:69:59:35:23:81:05:9d:e4:e2:9f:87:
         2a:03:a4:7c:2e:93:c2:76:40:d7:b8:b3:14:7e:c5:10:74:d2:
         30:a4:e9:c1:38:c7:29:ec:07:cf:c7:b8:19:db:35:84:8a:07:
         33:96:5e:9d:72:7c:58:ba:3c:1d:af:c6:50:b5:30:73:ea:91:
         8f:b9:eb:e4:29:ce:60:50:9a:14:5c:7f:5e:3a:df:71:41:43:
         ea:8b:eb:5c:7e:e1:d3:c4:48:d4:63:d7:6d:0b:15:98:e8:27:
         9f:1c:3d:8b:21:be:82:39:7a:a8:10:8c:9c:6a:c6:e2:d7:b0:
         00:bc:dc:81:8c:01:ed:2b:70:d9:81:28:68:86:27:57:c5:19:
         47:67:f7:f4:df:b6:76:86:2e:6b:3e:11:b8:0c:b9:4e:11:89:
         e9:39:86:67:90:12:9c:3a:f3:89:fb:7c:03:16:97:46:36:8a:
         75:26:9b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:14:12 2025 by rpki-client