Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/48c72aba-d61a-3291-849d-07ea4dc377cc.roa
File:                     48c72aba-d61a-3291-849d-07ea4dc377cc.roa (raw, json)
Hash identifier:          wBoJyQ6GNgaywz2KGJBcH/QHldoZN5y1DAQHNWTQdPE=
Subject key identifier:   3B:B6:CF:5B:FA:D5:5C:52:D7:89:04:09:58:DD:37:5D:2F:AE:E0:18
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858403D5905C3E6989D4E7A1D7200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/48c72aba-d61a-3291-849d-07ea4dc377cc.roa
Signing time:             Wed 14 Dec 2022 12:00:00 +0000
ROA not before:           Wed 14 Dec 2022 12:00:00 +0000
ROA not after:            Thu 19 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        136.17.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3d:59:05:c3:e6:98:9d:4e:7a:1d:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 14 12:00:00 2022 GMT
            Not After : Jan 19 05:00:00 2023 GMT
        Subject: CN=8b90cf62-489c-42cd-9dd3-416b4069029f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:12:1a:f5:d1:52:39:4e:ed:99:ba:01:98:0f:
                    d0:a5:47:16:17:0a:a7:c9:fd:77:1f:09:e7:0c:94:
                    97:a5:ae:ee:cb:fe:1f:58:dc:44:7b:a1:04:7d:6d:
                    a2:05:4b:2d:08:4d:90:07:d5:d9:43:bb:e8:4c:dc:
                    0d:90:92:a8:b4:19:36:38:e5:7c:16:9d:f1:3a:b1:
                    26:f7:87:02:b4:42:08:11:e7:b8:ef:d8:25:65:6d:
                    04:66:2d:77:64:20:bd:6a:f3:fd:a3:5a:c8:f8:d9:
                    ad:ee:5b:a7:21:e3:ba:f4:f4:1d:33:ef:49:e0:27:
                    13:e4:b0:5b:3e:b8:fa:97:1b:03:74:b1:d3:68:c0:
                    36:e5:23:80:83:62:51:56:3c:3a:58:35:f2:53:5c:
                    d2:8a:31:21:52:0d:a7:5e:91:dc:a3:15:12:69:27:
                    3e:b7:9d:19:3d:99:81:a6:5d:ff:13:5a:bd:f4:b3:
                    02:d6:4c:7b:fd:cf:1f:28:17:9d:d5:e3:28:fc:11:
                    e6:ae:59:d9:34:b9:55:cf:c6:60:3b:1b:fb:66:81:
                    9a:bd:30:40:74:9a:d6:70:c7:c1:bb:4d:f0:46:bf:
                    c8:8e:38:b5:d8:b4:2b:fb:65:5b:cf:88:6b:eb:0a:
                    28:84:d0:18:ba:2a:ab:35:f1:55:d9:d7:94:a8:32:
                    9a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B6:CF:5B:FA:D5:5C:52:D7:89:04:09:58:DD:37:5D:2F:AE:E0:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/48c72aba-d61a-3291-849d-07ea4dc377cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.17.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:e1:af:32:12:62:18:05:b1:25:29:71:4c:3b:7d:37:a3:ec:
         95:05:91:f8:2e:f8:b1:bd:fa:7f:9b:80:66:58:14:53:b3:b4:
         d7:7d:c6:0b:d5:cf:ae:01:bc:63:32:5a:3c:af:b8:56:77:fd:
         93:0c:ff:c5:2d:58:f8:fc:fb:84:ae:21:f1:f8:83:f1:02:c3:
         cf:95:46:38:98:ef:7a:10:5d:5c:c0:f1:2b:d0:1c:54:f4:35:
         6a:e1:c9:ce:d6:a0:a9:1e:77:2a:f1:76:27:36:4f:09:b4:11:
         8b:39:49:78:e9:26:7c:b2:19:db:07:e0:10:90:a9:cf:e6:56:
         0d:0c:28:4a:7f:d0:5e:60:64:31:ee:81:2c:1a:68:13:c1:39:
         9f:4c:14:a7:43:45:9e:23:c1:54:8b:8e:49:5e:41:a0:f8:d0:
         32:99:04:da:4b:cf:79:b5:70:32:55:6b:8a:0a:b4:d6:d9:5e:
         fd:d0:f9:e3:63:74:65:91:0e:00:89:b8:18:b9:9d:3c:9f:2b:
         7d:35:96:1a:e2:2a:ed:61:b2:f2:96:36:22:26:f2:30:af:a2:
         b2:89:d7:b5:60:d8:cf:56:ce:ca:13:5f:83:ef:b8:5b:52:4b:
         ce:0b:b1:9f:41:b7:12:25:08:b4:a0:e1:22:8b:35:dd:15:1a:
         cf:3a:34:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:17:01 2025 by rpki-client