Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1ed78e92-e21b-3508-baf1-277d1eb81e39.roa
File:                     1ed78e92-e21b-3508-baf1-277d1eb81e39.roa (raw, json)
Hash identifier:          lE4NKZliZnfESsgf6wkb73EapQHBqVOTXPF/E3nphWc=
Subject key identifier:   E1:E6:3E:6B:A2:C1:94:A5:1A:C8:54:DF:E5:56:54:28:D0:13:3C:49
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CE0A68004E0E01A8F19DC3F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1ed78e92-e21b-3508-baf1-277d1eb81e39.roa
Signing time:             Wed 09 Feb 2022 05:00:00 +0000
ROA not before:           Wed 09 Feb 2022 05:00:00 +0000
ROA not after:            Wed 16 Mar 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        136.18.52.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e0:a6:80:04:e0:e0:1a:8f:19:dc:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  9 05:00:00 2022 GMT
            Not After : Mar 16 04:00:00 2022 GMT
        Subject: CN=6ea012e6-4863-4076-b76e-b6b993f0d152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:01:16:86:ac:a6:8e:25:51:a6:6d:49:57:78:
                    2c:f3:cd:fa:a0:01:1d:f7:6d:c1:e2:56:4f:93:b6:
                    dd:9b:bd:9b:7b:8c:b0:0d:7e:f8:74:2b:2e:25:ae:
                    cc:f4:9c:94:30:cf:4a:b7:9a:3d:78:dc:b5:00:54:
                    5f:31:71:e8:a6:95:45:06:bd:b2:38:ca:f7:03:4d:
                    9f:f4:3f:2a:18:5d:ff:96:68:78:ed:e3:67:0f:f8:
                    1f:a8:94:82:23:b0:4b:24:0d:c3:db:de:9b:7a:7a:
                    13:28:0d:62:bc:42:47:4a:b5:d9:e0:c2:8b:5d:07:
                    f5:42:c2:21:77:ad:f8:5c:e6:a9:86:c0:52:3f:47:
                    34:f9:ba:d9:8c:8c:87:da:78:f9:3c:88:31:1d:f3:
                    8d:b0:87:e1:e6:1c:81:97:03:4d:c8:4e:ac:05:43:
                    31:a1:32:8c:1e:cc:a4:ed:e3:cd:69:44:f7:d2:ae:
                    01:c2:1a:a0:59:c9:67:e6:f4:da:e2:ef:1b:70:5f:
                    5a:c3:dc:ae:56:14:b7:70:98:4f:ed:f7:22:42:db:
                    92:c6:29:ed:2f:e7:6e:f3:01:41:0b:42:bb:cf:21:
                    bc:1a:fa:ac:45:3e:50:ab:48:a2:8b:c6:da:11:06:
                    b1:5b:33:2c:63:39:f0:c6:df:4c:c3:94:e2:7a:21:
                    01:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E6:3E:6B:A2:C1:94:A5:1A:C8:54:DF:E5:56:54:28:D0:13:3C:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1ed78e92-e21b-3508-baf1-277d1eb81e39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:38:bb:5d:cc:be:ee:0d:53:c5:23:e1:48:28:1c:06:ce:61:
         3d:61:db:17:15:58:63:78:a4:5e:61:4e:5e:53:ba:c8:5f:7e:
         95:28:93:7b:b4:a6:fb:11:fb:d0:05:ff:0a:c5:02:11:91:da:
         e0:81:9e:ed:d9:ff:4c:98:86:02:d9:f0:9c:63:fa:c7:95:53:
         ca:63:2f:75:5d:52:2f:a5:b7:a9:48:65:22:5f:a7:dd:04:b4:
         d1:cc:1e:dd:bf:d0:da:76:eb:f5:ab:f9:04:50:76:58:5e:ce:
         09:ca:8f:ef:05:bb:84:34:d6:0c:d3:c6:2f:2e:c3:f3:a3:6b:
         4f:0b:28:ae:49:94:12:ad:a1:e0:21:af:31:53:d6:0e:04:6e:
         0e:79:0f:b9:2d:ec:c5:2b:79:e1:c9:0f:1f:c8:ee:f0:5b:bf:
         3d:00:24:0a:68:5b:52:0f:ab:40:0d:2f:56:cd:20:a0:48:30:
         46:42:95:43:76:41:f7:ec:da:48:f7:b7:5c:48:35:1a:5d:2a:
         20:8c:e2:4d:fa:b2:fb:1d:a6:88:2e:05:26:da:2e:45:1b:8f:
         c9:73:5e:07:f9:2d:19:a6:12:21:79:c2:39:2d:ae:a8:c2:af:
         89:a2:73:26:ac:bf:7c:d5:87:03:16:79:05:49:f5:70:e8:d5:
         11:90:b3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:42 2025 by rpki-client