Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/49ff2ed5-8780-36f7-b2c3-e33e8da36231.roa
File:                     49ff2ed5-8780-36f7-b2c3-e33e8da36231.roa (raw, json)
Hash identifier:          OsffM680RBjst97FGZyCP0Yr5cGrxX/crQH9i59ykgw=
Subject key identifier:   44:4D:DE:0A:6E:E7:8D:89:EA:3E:22:82:A6:33:D8:5D:9E:03:19:67
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FC12130544E1366BF32949640
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/49ff2ed5-8780-36f7-b2c3-e33e8da36231.roa
Signing time:             Sun 30 Oct 2022 12:00:00 +0000
ROA not before:           Sun 30 Oct 2022 12:00:00 +0000
ROA not after:            Mon 05 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        136.8.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c1:21:30:54:4e:13:66:bf:32:94:96:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 30 12:00:00 2022 GMT
            Not After : Dec  5 05:00:00 2022 GMT
        Subject: CN=12d35577-0ec7-4c0c-a5ea-364f41525438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:73:23:92:b9:b6:dc:b3:b1:a2:cf:11:32:ab:
                    fc:44:11:bc:7e:00:15:48:79:05:dd:d8:f4:a9:50:
                    bb:f8:2a:7e:00:ba:3d:75:6f:92:69:c6:ce:10:92:
                    d6:68:8d:82:a1:46:8c:3a:a1:eb:f5:f6:c7:cb:51:
                    b2:34:61:21:05:58:88:38:03:0f:4d:ad:40:29:5d:
                    1a:fd:9c:56:b6:ba:d9:f7:21:1b:74:14:ac:51:9b:
                    29:42:0b:96:ec:67:b9:7a:1f:e1:f2:cc:0d:00:87:
                    d5:8f:6a:2c:08:aa:7e:47:d5:5f:0c:59:ef:f3:62:
                    ad:15:0e:9b:95:4a:ef:23:e5:12:cc:bc:a2:ec:15:
                    80:1a:ec:79:97:25:2d:02:fc:41:9d:77:08:36:db:
                    2f:3c:94:c8:ad:dd:b2:4e:63:0d:7e:e3:56:19:56:
                    40:e9:c6:e9:01:6d:b9:24:4b:50:a7:61:13:d3:ac:
                    1d:87:c7:06:91:f2:f7:15:ac:dc:51:f1:01:0b:6e:
                    3a:dd:25:3f:b4:70:95:69:2c:8b:f6:90:7c:c6:ee:
                    d9:aa:0e:73:17:ee:6a:23:08:ec:eb:13:78:a3:2d:
                    d2:f8:e3:89:36:83:aa:8c:f0:85:79:ef:5d:a2:4a:
                    ea:bf:3f:3e:49:6c:8f:42:e3:f6:97:dc:45:36:43:
                    b7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4D:DE:0A:6E:E7:8D:89:EA:3E:22:82:A6:33:D8:5D:9E:03:19:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/49ff2ed5-8780-36f7-b2c3-e33e8da36231.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.8.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:a3:34:f5:0d:1b:2a:3d:35:48:08:74:3f:5d:81:19:ce:de:
         7a:62:71:c0:ae:a7:9c:1c:5a:b5:8b:ca:bd:48:66:90:a9:ea:
         d3:bf:a1:d0:ff:b5:f9:7e:09:93:ef:71:22:e8:23:4c:1c:eb:
         6b:11:7c:6e:dd:c5:1e:93:38:ee:0d:de:b2:db:28:6e:e7:19:
         db:03:71:07:21:8e:77:53:73:8c:1b:c9:58:07:08:45:d1:e3:
         fd:6c:a3:92:9c:f7:a8:23:bd:41:24:a8:c7:50:40:19:0b:19:
         25:08:73:6b:cc:31:0b:c6:77:ae:f9:3d:f8:29:ad:c3:c9:33:
         58:3f:eb:10:ae:72:2d:e3:1a:d9:e1:2a:06:f9:c5:9f:3e:0d:
         82:94:6f:e2:db:ba:0f:45:c2:36:c6:8a:7c:f2:a1:e9:6c:4d:
         50:77:0e:2f:6e:5a:dc:11:d3:78:3e:45:ce:eb:05:e8:58:75:
         5c:61:2e:fa:b3:43:ee:7e:a6:ab:07:7e:8a:8a:ed:7c:66:08:
         c8:d8:5e:bd:8c:94:25:6f:f1:88:b8:fe:a1:bf:a0:fb:f9:e0:
         9d:fa:31:22:04:27:d6:17:bd:6b:47:88:31:16:1b:8f:34:cb:
         56:68:e9:f9:92:58:b8:23:0d:26:21:31:bd:72:9d:20:77:c9:
         e7:03:b0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:13:26 2025 by rpki-client