Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5c4f91bc-a3ba-374c-b180-f9e36487c8c5.roa
File:                     5c4f91bc-a3ba-374c-b180-f9e36487c8c5.roa (raw, json)
Hash identifier:          lvzDTxhIF1q0qlPOYxQaW4KEvg9eBhkgWSJPjhycZyo=
Subject key identifier:   07:58:0B:1B:02:3B:32:B3:17:E9:A7:A5:FA:4C:CF:1A:9B:13:59:3F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DF2628CD67FC3BBE470261B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5c4f91bc-a3ba-374c-b180-f9e36487c8c5.roa
Signing time:             Tue 17 May 2022 12:00:00 +0000
ROA not before:           Tue 17 May 2022 12:00:00 +0000
ROA not after:            Wed 22 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        136.10.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f2:62:8c:d6:7f:c3:bb:e4:70:26:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 17 12:00:00 2022 GMT
            Not After : Jun 22 04:00:00 2022 GMT
        Subject: CN=c632263c-f339-4080-861e-764d2b43c4dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3a:73:ea:4d:7c:9b:0c:7c:27:50:68:30:ec:
                    d7:bc:5c:20:50:d1:81:42:c2:69:fd:b7:fc:20:52:
                    bd:75:75:28:2e:31:3f:a0:da:d3:c5:d5:e5:7e:fa:
                    2c:88:b2:ec:74:07:3a:6f:5e:76:86:62:d3:72:29:
                    12:20:5b:8a:0a:66:f0:17:53:9f:fd:9e:0f:a3:43:
                    fe:8d:6c:68:95:7f:88:4b:10:66:7a:7e:4d:13:df:
                    c4:2d:b0:b0:38:ba:62:ae:08:1e:fa:75:3f:f2:0d:
                    dd:50:7b:bf:95:6a:be:85:c0:ff:cb:f5:9f:b5:48:
                    95:bf:33:07:31:28:ee:a1:6c:4b:c5:cc:8d:8c:bf:
                    b9:6b:cf:e3:ac:04:23:e7:83:43:be:6c:8a:26:c9:
                    0d:2e:97:0f:17:74:51:68:dd:47:84:d2:18:03:ce:
                    89:75:02:a9:28:0d:fa:4c:6f:69:c9:65:a4:31:33:
                    21:af:74:ed:57:3f:73:f5:b0:14:9c:c8:3d:d9:97:
                    39:65:dc:e5:9a:8a:6f:b8:eb:21:aa:52:1c:50:f0:
                    10:bf:00:b3:13:ea:9c:75:4d:f6:6b:85:ee:ec:e6:
                    9e:9e:5e:93:47:79:57:ec:19:70:07:71:c7:6d:b3:
                    a5:07:31:ce:88:5d:31:88:bc:6c:79:68:b8:f3:e7:
                    35:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:58:0B:1B:02:3B:32:B3:17:E9:A7:A5:FA:4C:CF:1A:9B:13:59:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5c4f91bc-a3ba-374c-b180-f9e36487c8c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.10.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:4c:5b:92:e0:a7:26:bb:71:8f:7f:5f:3e:5e:63:74:e4:e6:
         41:94:f7:17:17:56:ea:7d:23:db:35:70:72:2b:23:56:ac:86:
         c5:37:ab:4e:c8:ab:7f:7d:4f:36:7d:eb:ba:11:6a:68:16:be:
         53:28:13:1a:b3:7e:f4:69:96:4a:d9:9d:cb:75:ae:e1:73:80:
         cf:52:64:c7:dd:f5:35:c1:87:7e:a5:c6:a6:50:25:ef:c9:7d:
         5e:22:d6:80:69:33:8c:f6:80:f4:a6:89:6e:5e:09:5a:b4:34:
         e9:68:7c:57:38:31:37:c2:d4:32:09:5f:68:d3:4f:63:07:1b:
         bd:6b:3f:d7:fe:0b:c9:ad:2b:60:99:b9:1a:f1:65:22:e9:80:
         3b:98:26:03:c0:56:7f:ea:5f:7c:45:07:31:92:98:98:de:69:
         4f:e6:04:ad:ef:6b:b6:b8:e9:9c:a4:2b:77:db:47:38:85:01:
         e4:3b:55:82:aa:cc:2f:61:3c:3a:8b:d9:d7:2a:55:3b:7c:82:
         20:87:9e:f7:1d:6d:01:31:84:9d:6f:3c:c6:7b:2e:08:8f:fb:
         35:0a:d1:84:c4:30:87:79:2a:b4:9b:a3:9d:d0:e9:fe:a2:d3:
         0f:f7:e2:dc:8f:e2:ad:6e:89:35:aa:4c:cf:e0:c4:e5:f7:cd:
         51:0d:e4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:51:44 2025 by rpki-client