Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/567a6b25-28fe-360d-8248-a6369c33b0c5.roa
File:                     567a6b25-28fe-360d-8248-a6369c33b0c5.roa (raw, json)
Hash identifier:          CJ5HUtR3TZRBSRcAC1BDbH4y2Pj0xTyK1DAkO6NsIbk=
Subject key identifier:   9C:49:2D:48:3B:79:3C:B4:7D:A7:63:58:C1:53:CD:1B:6F:46:DD:3C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E67E66BF827068510EAF89000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/567a6b25-28fe-360d-8248-a6369c33b0c5.roa
Signing time:             Wed 29 Jun 2022 15:27:08 +0000
ROA not before:           Wed 29 Jun 2022 15:27:08 +0000
ROA not after:            Thu 04 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        136.2.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:67:e6:6b:f8:27:06:85:10:ea:f8:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 29 15:27:08 2022 GMT
            Not After : Aug  4 04:00:00 2022 GMT
        Subject: CN=a1582309-80d0-4f0c-b118-13b60c2d3b5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a9:ec:9f:d2:5b:f2:74:e8:c7:8a:d3:23:94:
                    38:b5:a7:9e:99:90:e1:1f:13:f2:e4:3b:39:46:6e:
                    24:06:cf:63:09:29:15:ab:23:26:f1:de:b4:d3:1a:
                    0f:87:08:31:bc:2f:12:ab:fb:49:ca:c6:0d:3c:7e:
                    90:a4:40:e5:5f:8c:c0:09:12:fc:52:ba:2a:c6:8a:
                    27:76:9d:d0:74:d8:57:7b:9d:3b:44:4b:3f:c8:7d:
                    6d:aa:9b:43:7b:75:12:1a:04:5d:20:8d:43:cd:5e:
                    94:72:f3:ea:40:6d:b5:6b:5b:c7:06:6b:0c:9a:0e:
                    07:7a:00:b7:92:78:83:a2:09:cf:2c:66:0d:e1:9b:
                    60:7c:dc:12:98:6a:e6:73:be:cf:f0:e8:91:40:64:
                    e2:fd:25:d2:7b:21:69:ad:4e:7d:2a:81:17:7c:b1:
                    12:f8:50:28:22:ef:a3:cc:fb:a1:4d:02:7b:e7:49:
                    bc:11:3b:90:01:2a:83:df:74:23:9f:cb:c7:9c:45:
                    47:b5:29:ff:90:d9:1f:8f:7c:2b:73:da:73:08:7d:
                    e5:ce:b1:48:9f:d8:34:7a:83:c7:49:95:31:3a:81:
                    d7:53:75:42:7d:57:0d:cf:8b:cc:83:81:c6:20:6b:
                    3b:3c:93:04:66:fa:69:67:8d:de:b8:c4:55:db:64:
                    86:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:49:2D:48:3B:79:3C:B4:7D:A7:63:58:C1:53:CD:1B:6F:46:DD:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/567a6b25-28fe-360d-8248-a6369c33b0c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.2.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:d9:7b:d6:9e:df:b5:61:e7:7f:41:e1:5e:19:92:81:f6:d2:
         8c:eb:40:61:e6:65:51:ea:ef:88:84:a7:dc:3c:32:5f:5c:c3:
         bf:78:27:9d:21:8c:bf:86:90:74:9f:7a:63:a8:de:53:e5:c8:
         3b:b7:e8:0b:9e:a8:76:92:84:df:88:55:22:ea:97:04:5e:47:
         cf:ba:0c:50:97:66:64:f9:67:34:b5:f2:94:c4:84:49:ac:62:
         7c:59:5b:ff:73:cc:25:88:7b:89:1b:7e:4a:d3:0d:b2:05:00:
         d0:e9:42:a2:70:54:e6:b0:97:7d:1e:c0:b5:36:db:10:f1:57:
         26:15:a7:76:9e:54:00:69:5a:14:99:c6:bd:b3:16:aa:b3:c4:
         72:c9:89:35:e0:79:c6:ec:f4:c5:bd:1c:59:b1:8b:09:9a:6e:
         92:31:0a:d8:5c:23:ed:00:46:d2:9a:05:13:89:16:6f:9c:18:
         e0:b1:34:82:0e:0c:e7:63:40:38:50:56:74:51:f3:52:79:e1:
         4e:e1:f7:bd:f0:d6:09:ed:ae:86:6c:14:cd:81:8c:53:ff:3e:
         06:ce:b6:d0:3d:5d:1c:0d:7e:f9:21:4e:bf:f4:45:36:03:56:
         36:57:85:85:ee:07:0a:1d:24:e7:ad:76:e8:90:24:a1:ff:87:
         0f:cc:6f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:47 2025 by rpki-client