Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5ab0383c-82a8-302d-8a87-ced23a9f48d4.roa
File:                     5ab0383c-82a8-302d-8a87-ced23a9f48d4.roa (raw, json)
Hash identifier:          iWRhPjYKCmXhStfnL57LDSl4Gv9KXuFTBxYHhZ98yyA=
Subject key identifier:   26:98:0B:EF:A4:45:93:BD:08:38:5F:12:1E:76:DB:AB:58:DC:DC:F3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F7A3F32D8742C7D47EC3C83A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5ab0383c-82a8-302d-8a87-ced23a9f48d4.roa
Signing time:             Wed 05 Oct 2022 12:00:00 +0000
ROA not before:           Wed 05 Oct 2022 12:00:00 +0000
ROA not after:            Thu 10 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        136.18.50.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:7a:3f:32:d8:74:2c:7d:47:ec:3c:83:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct  5 12:00:00 2022 GMT
            Not After : Nov 10 05:00:00 2022 GMT
        Subject: CN=be99ba99-f0d1-40ca-aafe-5ed6c919bad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1d:7c:5a:ea:38:01:c9:e3:a2:dc:41:b6:5a:
                    a8:9a:08:bd:b0:aa:0f:17:1f:c1:51:44:c2:f8:1c:
                    7e:d0:2a:e0:4d:c6:42:db:3e:e3:3c:fd:69:37:42:
                    13:eb:94:f3:8a:e4:2d:df:2c:12:3c:65:a0:09:1c:
                    cb:eb:8d:14:9e:eb:86:9a:2a:af:aa:32:8e:1c:80:
                    3b:3f:de:2d:5d:e8:4f:6c:8a:d9:09:f9:d6:c8:51:
                    86:ad:b7:14:9b:35:ec:b0:b5:3f:b4:4c:a2:71:5f:
                    7c:6d:d6:a1:f1:29:e5:b1:79:4a:1f:19:04:83:a9:
                    ca:37:27:ed:fa:48:10:28:16:e5:02:51:7d:fc:15:
                    7b:d1:6c:f7:a7:4b:3b:08:0b:63:e3:e4:72:0c:9d:
                    65:4b:45:d6:2c:d1:37:1c:0f:d2:d9:81:c5:ff:22:
                    41:e2:47:36:c9:72:0d:69:34:93:c7:a4:45:b0:8f:
                    41:7e:74:b8:66:59:bc:e2:bf:21:26:01:ba:87:02:
                    05:d6:d3:63:fd:4a:6c:0a:90:4b:16:39:ad:07:c3:
                    72:12:61:fb:5d:34:15:cd:b4:3a:da:7d:32:ec:77:
                    90:5a:d7:7e:b0:45:e9:b9:4d:13:94:c8:a9:2b:ff:
                    60:be:07:02:35:98:ed:da:50:59:69:e8:f2:42:9f:
                    e4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:98:0B:EF:A4:45:93:BD:08:38:5F:12:1E:76:DB:AB:58:DC:DC:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5ab0383c-82a8-302d-8a87-ced23a9f48d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:03:2b:49:4c:1b:fa:c5:6e:3d:9a:58:2f:11:f7:8e:97:9e:
         bf:69:16:6f:30:78:94:5e:d0:de:96:72:e1:92:95:bf:ba:d8:
         9c:2b:0d:3b:d2:6c:97:b8:02:fc:a0:ac:3b:6c:f9:dd:57:58:
         36:f1:72:01:b3:2a:27:64:34:f2:25:3b:20:33:d5:1d:38:4c:
         a8:38:35:f4:ac:a2:f2:61:3e:5f:7f:45:93:19:16:20:70:15:
         10:94:5f:0c:82:da:6f:c0:5a:16:2a:50:d9:59:0a:95:2c:8d:
         e7:c3:b3:2e:9e:13:0f:90:21:b5:df:25:2e:ec:9f:ac:dc:25:
         c3:2e:6a:e9:f1:5c:99:70:e9:1a:bc:2e:95:a0:8b:04:86:05:
         e2:72:cc:05:e7:4b:3d:e0:17:e0:53:53:36:d7:98:08:2a:90:
         4a:b1:6c:b3:07:bc:51:3a:12:ac:c8:28:d8:64:64:3e:01:b9:
         d5:d7:e4:1f:00:b1:0d:9b:e7:6a:3a:f3:23:ff:9b:1f:1b:77:
         41:83:cc:cd:1e:af:f0:00:25:74:87:1f:1d:81:cf:8d:cb:a5:
         c2:d2:a0:1a:8f:ab:63:73:60:51:cd:21:75:50:21:cb:56:e7:
         72:bc:bc:51:d3:89:aa:80:5d:95:ef:7d:a8:13:20:3a:43:ff:
         0f:b5:47:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 10:37:16 2025 by rpki-client