Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4d2826bb-03db-3c08-87a4-60041393e9ee.roa
File:                     4d2826bb-03db-3c08-87a4-60041393e9ee.roa (raw, json)
Hash identifier:          GYarEaQOR3YJ+7XNqc1314IVgRcAK3Tvsl9Ukd3eXHw=
Subject key identifier:   63:2C:D8:19:79:88:23:E1:B7:B2:99:9C:34:D7:D3:5A:A2:47:22:45
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CE09F10F2AACAC2F2D33F6F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4d2826bb-03db-3c08-87a4-60041393e9ee.roa
Signing time:             Wed 09 Feb 2022 05:00:00 +0000
ROA not before:           Wed 09 Feb 2022 05:00:00 +0000
ROA not after:            Wed 16 Mar 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        136.18.32.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e0:9f:10:f2:aa:ca:c2:f2:d3:3f:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  9 05:00:00 2022 GMT
            Not After : Mar 16 04:00:00 2022 GMT
        Subject: CN=31ec375f-bf02-4efd-b4b0-11dc9a9bdcfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1d:57:3d:95:99:59:93:61:c6:97:8a:bf:d9:
                    6a:7a:32:d1:e4:19:38:37:db:bb:23:8f:70:cd:e6:
                    fd:88:e3:36:0a:6e:78:ee:9f:98:6e:3a:4a:ee:ec:
                    60:06:9d:89:c7:19:4b:e9:83:f2:a5:d4:c1:63:4c:
                    a5:0c:8f:19:5e:c1:82:a1:f1:7b:fd:dd:1f:c2:93:
                    73:3e:bd:bb:4b:c6:0d:f8:29:04:70:02:15:ac:88:
                    32:86:8b:59:d6:07:a5:5c:09:c0:cd:bf:84:de:4b:
                    5b:87:b4:71:53:db:ba:6c:fe:c5:e3:20:ad:aa:f9:
                    65:21:5a:13:2d:0f:86:15:f5:8c:77:27:0f:5c:ae:
                    c4:73:64:42:6b:23:c3:46:88:5f:f1:8b:dd:b7:86:
                    74:bb:cc:96:0c:cb:fc:13:ba:cd:e5:de:13:c6:0c:
                    3a:fa:30:ea:33:c1:9b:3b:7e:63:57:3a:c1:98:45:
                    e2:c5:e0:26:5e:e7:ff:4b:20:4a:01:8b:57:00:e3:
                    8c:46:f0:aa:4d:88:be:bf:a3:31:de:60:19:4c:b0:
                    cf:20:4f:bb:18:db:ab:21:c4:c4:06:81:95:65:15:
                    7e:6a:c0:cd:05:62:93:76:fe:d1:19:6e:cd:4e:ab:
                    c3:8b:74:51:42:9c:26:39:cd:7a:64:a7:a0:b3:ea:
                    5c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2C:D8:19:79:88:23:E1:B7:B2:99:9C:34:D7:D3:5A:A2:47:22:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4d2826bb-03db-3c08-87a4-60041393e9ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:fd:df:d8:fe:ef:a7:ce:84:9d:68:c3:67:0e:ca:21:95:43:
         16:53:d8:49:b1:d9:3c:94:a8:a2:27:0a:86:34:4b:49:88:56:
         c2:cb:ea:06:cb:75:fe:c4:95:b6:f8:7d:ff:7a:b6:be:7d:d2:
         75:04:91:df:b7:95:e8:c8:d4:d8:21:01:45:16:fd:1e:c7:c9:
         c3:fe:c9:01:4e:ae:30:20:cf:e8:55:10:09:24:04:b2:56:8f:
         b9:c8:85:68:c8:23:e9:54:a8:7d:29:12:ba:7c:12:4d:f5:88:
         eb:c3:29:a9:86:8e:a8:fe:22:42:fb:32:68:d9:ec:f6:4c:54:
         05:ae:04:2f:4b:33:30:bf:05:7d:f4:35:1d:fd:ff:6d:aa:a5:
         ab:65:75:cb:40:66:ba:a9:22:92:c1:2b:f0:d9:85:78:74:95:
         1e:97:ff:e7:50:f5:94:d9:3b:38:db:1b:12:a3:6d:0d:43:2f:
         77:56:3e:23:f3:ba:f1:44:44:24:c9:3c:47:2f:6d:9b:19:02:
         54:c7:74:e0:7c:6e:96:54:f4:a3:4d:7d:90:a0:30:36:2a:87:
         c9:f7:48:10:81:84:72:9d:e2:c3:4f:02:c6:06:b4:6e:91:2d:
         3f:a9:69:74:f4:14:79:78:e1:70:a7:54:77:a0:a3:ef:d4:a5:
         8f:b5:a3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:13 2025 by rpki-client