Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c95440a-dd18-3b18-aa83-c2e579e78b24.roa
File:                     3c95440a-dd18-3b18-aa83-c2e579e78b24.roa (raw, json)
Hash identifier:          F2DLCgZkUaA8Ca+nrqPJZhd5bxxApCFYg1dkSULaGBY=
Subject key identifier:   77:8A:EA:F6:D6:19:48:F3:E6:08:1A:84:17:4A:A3:D8:BD:EB:46:21
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E67C10D507C0AC21823FD6776
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c95440a-dd18-3b18-aa83-c2e579e78b24.roa
Signing time:             Wed 29 Jun 2022 15:27:08 +0000
ROA not before:           Wed 29 Jun 2022 15:27:08 +0000
ROA not after:            Thu 04 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        136.18.20.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:67:c1:0d:50:7c:0a:c2:18:23:fd:67:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 29 15:27:08 2022 GMT
            Not After : Aug  4 04:00:00 2022 GMT
        Subject: CN=956ee902-4360-41ea-8572-92d6997249b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2e:e4:0d:a6:bd:aa:a0:a0:14:ed:ad:c9:c3:
                    e0:7f:76:d7:fa:ab:6e:fe:69:8c:41:31:4c:d8:99:
                    ad:5d:48:18:a9:39:01:51:19:91:92:bb:2f:52:35:
                    2f:d9:2b:c1:b1:83:db:7e:66:15:04:f8:bf:f9:d5:
                    9e:d5:65:25:f7:22:57:cd:43:cf:33:75:76:37:39:
                    b4:8f:8c:cd:5c:f4:a0:78:4e:f2:0b:e3:62:e1:e3:
                    67:68:f5:ab:36:0f:86:95:90:98:7d:44:b4:bc:c8:
                    71:aa:c0:62:13:28:b8:31:1d:fb:33:83:bf:54:6b:
                    bf:ca:1d:a0:af:bb:93:79:63:ce:3b:63:ac:a6:95:
                    64:16:a0:09:35:af:3e:4c:46:59:0f:4e:31:56:0c:
                    d4:fc:62:fa:80:ca:7b:4a:c0:0a:7c:72:b6:e6:a8:
                    f1:49:69:3d:22:a2:e7:fa:3b:9d:5e:be:2d:c5:ac:
                    af:c9:5d:5b:07:f3:c3:25:47:0e:23:cf:8c:ae:e3:
                    3c:3e:10:02:9f:40:28:65:45:c9:f1:c7:9c:74:98:
                    96:7c:fb:c3:b0:7c:25:fb:a3:0d:1f:9e:a1:cf:75:
                    a2:dc:75:d6:83:21:01:c1:66:4d:31:7b:cb:a8:e2:
                    cc:60:d6:27:06:67:14:25:88:bc:8b:c0:ec:0e:e8:
                    08:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:8A:EA:F6:D6:19:48:F3:E6:08:1A:84:17:4A:A3:D8:BD:EB:46:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c95440a-dd18-3b18-aa83-c2e579e78b24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:eb:2b:e6:74:b9:61:70:55:28:11:de:3d:c2:49:06:3d:45:
         52:06:21:80:0e:68:e2:65:ab:4f:0e:da:95:f7:81:0e:6e:da:
         89:0b:fe:23:b7:ed:f4:da:a3:96:55:13:77:2d:0d:ce:3d:56:
         a2:f7:59:68:cd:42:28:68:30:dd:5f:65:c4:2a:9a:b5:66:b7:
         a1:ab:b9:d9:15:65:c0:32:f6:ea:12:f8:29:0f:45:ea:69:90:
         01:00:b4:16:a7:ef:a9:e3:64:77:bc:13:09:04:fb:f9:34:5e:
         44:49:98:1f:01:41:62:bf:71:0b:84:3d:63:ad:b7:70:7a:25:
         6c:bc:c0:15:cd:a1:c8:03:bb:2f:3a:ef:d2:08:fe:26:66:fc:
         11:74:d6:d1:8d:cb:5c:44:86:8f:45:f1:94:83:ec:ce:f7:9b:
         90:43:8b:75:0f:ec:4d:22:fb:1b:03:8d:41:7f:f2:75:44:a1:
         95:26:cc:bd:d2:49:9b:1b:96:ac:7b:5c:ad:4f:66:d4:2f:cc:
         d1:cc:34:7b:8e:f3:39:a3:15:d0:69:22:78:52:b3:5b:65:da:
         9a:cb:41:c6:28:69:98:df:a9:cc:11:05:e3:ee:ba:db:c4:fc:
         ad:2c:50:28:d0:56:8e:e6:d5:1c:87:c7:cf:b5:de:08:99:5d:
         21:30:bc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:57:36 2025 by rpki-client