Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/19c71acf-1e0b-3a4f-b19e-0fa1e0ff920a.roa
File:                     19c71acf-1e0b-3a4f-b19e-0fa1e0ff920a.roa (raw, json)
Hash identifier:          vYuBTTankOhfoLXj7xNtE1qBurzRKtqBDk5Noetwcig=
Subject key identifier:   2A:48:A5:07:11:C7:AE:32:57:03:8E:CA:FC:BF:BC:55:AC:9A:D4:03
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C6B56B67C86F8EACFCE435000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/19c71acf-1e0b-3a4f-b19e-0fa1e0ff920a.roa
Signing time:             Wed 29 Dec 2021 05:00:00 +0000
ROA not before:           Wed 29 Dec 2021 05:00:00 +0000
ROA not after:            Wed 02 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        136.18.50.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6b:56:b6:7c:86:f8:ea:cf:ce:43:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 29 05:00:00 2021 GMT
            Not After : Feb  2 05:00:00 2022 GMT
        Subject: CN=507ea3b9-c1f2-4d7f-add3-4405fa1260a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ce:69:36:ee:4e:2f:5e:03:f9:93:27:2b:c8:
                    38:81:07:e1:e0:9e:04:1a:7d:b6:38:70:5e:b0:98:
                    e5:5e:14:02:f5:45:e2:08:80:eb:c7:6d:34:a4:80:
                    7d:03:1c:ae:ee:56:48:0d:b2:cc:e1:24:c8:f4:c8:
                    df:e4:d5:44:0a:c9:56:20:e2:4c:ed:0f:26:dc:ba:
                    06:16:2e:4c:b7:9a:12:76:e0:67:a8:e1:85:e2:28:
                    25:98:f3:16:e4:4d:5f:68:43:3d:ac:ef:aa:4f:3d:
                    c2:2d:89:9a:50:ee:76:9d:10:5f:70:32:49:0a:f7:
                    7a:e3:f8:50:a7:c7:5c:51:d8:4f:4e:3e:11:a3:ea:
                    d4:95:ad:65:f6:76:e8:3e:a6:a7:83:65:35:82:b0:
                    6d:ac:6f:c5:c8:12:fd:27:e5:8b:24:f2:56:35:a5:
                    b0:37:09:69:ec:61:97:2b:59:33:09:db:87:5b:6e:
                    bf:a0:2e:e7:08:64:fc:60:af:1e:64:ec:e3:51:70:
                    e3:8e:ce:71:cd:82:29:85:59:62:5e:30:a7:a8:d8:
                    bd:25:33:c5:c9:8d:a6:5f:2a:74:41:30:55:2d:fe:
                    17:b2:52:f1:b4:74:22:ef:d7:4e:3c:c4:18:11:ac:
                    d2:a9:11:4c:48:49:38:3d:63:0c:45:7d:e5:ec:29:
                    35:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:48:A5:07:11:C7:AE:32:57:03:8E:CA:FC:BF:BC:55:AC:9A:D4:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/19c71acf-1e0b-3a4f-b19e-0fa1e0ff920a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:13:c6:aa:c5:ac:89:31:42:28:28:66:c1:d7:a7:ca:84:0c:
         5e:9f:28:01:8d:3a:af:1a:1f:76:18:be:18:b1:7e:d0:d5:74:
         00:82:f8:fa:e4:46:bf:fc:7f:2a:64:07:60:45:81:c3:e2:81:
         47:4d:56:76:8e:0e:15:33:d2:b6:bc:77:b7:c9:12:cb:9f:cf:
         28:bf:b0:e0:67:80:2b:c0:d2:0a:f2:6c:db:de:93:4a:af:ea:
         3c:5d:2a:37:9a:b1:df:f8:d7:20:91:f6:f4:fd:f7:cb:66:fb:
         6e:d2:b3:09:49:7b:a4:b5:cf:d1:a8:43:fe:cf:25:f5:23:88:
         9b:af:70:f6:2d:75:2c:56:3d:69:d8:c2:aa:6f:43:31:35:97:
         1e:ee:a8:e9:9e:31:f9:e8:ef:7b:cb:e7:93:8a:07:76:1b:5f:
         42:ce:b0:4f:6d:fa:f7:0c:76:9d:99:ef:93:af:f8:de:c7:37:
         87:0f:1d:4b:9a:29:e9:b4:d3:4a:d8:23:9e:b7:ca:f3:c6:da:
         42:68:69:cc:da:ca:17:68:f8:16:2c:f9:b0:ae:01:b8:92:14:
         f7:05:c0:7b:40:7d:05:c0:14:6c:3a:de:26:66:20:40:2f:68:
         85:88:49:1f:3f:9b:4b:42:79:c3:c4:2c:1c:d2:34:96:43:a8:
         50:b9:9d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:13:30 2025 by rpki-client