Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5e8c4ff5-6df6-3aee-8bb2-3bf541d4d443.roa
File:                     5e8c4ff5-6df6-3aee-8bb2-3bf541d4d443.roa (raw, json)
Hash identifier:          DvquoLyJgbSewBwXJME3wIUn/eR6KxJwbH5RhWCrq/U=
Subject key identifier:   13:BF:78:08:2A:0E:45:E6:D6:79:28:BA:D9:9F:D6:11:D0:37:F6:DF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584016A44536A6C0520BC48D9280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5e8c4ff5-6df6-3aee-8bb2-3bf541d4d443.roa
Signing time:             Wed 30 Nov 2022 12:00:00 +0000
ROA not before:           Wed 30 Nov 2022 12:00:00 +0000
ROA not after:            Thu 05 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        136.18.24.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:16:a4:45:36:a6:c0:52:0b:c4:8d:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 30 12:00:00 2022 GMT
            Not After : Jan  5 05:00:00 2023 GMT
        Subject: CN=69d84c63-d21d-4b17-af3b-087cd3a6cd61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:52:d0:87:dd:58:3a:97:4f:ec:03:fc:38:21:
                    5e:dc:25:b0:e8:68:c4:db:b9:01:00:23:b5:40:1e:
                    9e:22:5d:cf:ab:95:47:fc:65:01:22:aa:cc:60:3d:
                    ae:83:cf:47:dd:c4:90:bb:be:6e:41:5e:54:aa:a5:
                    29:07:a9:39:91:e2:da:0d:55:f8:31:b7:2d:27:c1:
                    34:7c:d9:ba:fe:b8:e9:17:d4:70:98:cf:ef:66:a3:
                    da:7a:ce:e6:bb:8f:41:29:e9:7c:e6:78:fe:2d:29:
                    79:a9:db:42:3f:7d:0a:f4:ec:19:01:0d:8e:45:0b:
                    09:ae:f6:70:7e:2e:36:0e:59:1b:00:b1:bd:b1:6c:
                    65:d8:08:0b:98:42:fa:84:18:1d:c7:39:57:93:50:
                    c3:b4:9a:24:49:2c:61:95:9f:8d:26:86:d4:a9:60:
                    96:18:1b:ba:50:c6:82:00:b7:08:f9:8b:ef:d9:84:
                    ac:65:ac:25:4a:e5:7c:da:43:07:fa:61:af:d0:7c:
                    1f:2b:85:53:85:52:2f:f7:77:ee:9e:90:71:e6:7d:
                    e5:d6:5d:58:4f:2f:a4:95:ba:01:51:51:8d:ad:e2:
                    cd:98:fe:b0:27:63:a2:dc:2d:36:b7:e3:be:66:79:
                    e6:72:dd:dc:64:88:4a:9f:6a:10:8b:f2:32:63:56:
                    d5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BF:78:08:2A:0E:45:E6:D6:79:28:BA:D9:9F:D6:11:D0:37:F6:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5e8c4ff5-6df6-3aee-8bb2-3bf541d4d443.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:b3:1c:ef:0a:a1:21:11:a1:b7:e6:84:b4:12:c3:be:94:c1:
         fd:15:62:96:ad:d7:b4:d4:02:b3:90:c6:0d:60:5c:8f:ee:e0:
         fc:e8:29:a5:a3:af:fc:aa:e4:0d:40:01:4e:94:66:72:28:76:
         5c:0b:3c:d4:ee:6e:41:9d:26:97:00:36:d8:79:7c:9f:fd:7c:
         a0:e6:d8:79:63:6b:37:9b:7a:27:3b:8f:2c:18:9c:c9:bd:7f:
         04:f8:01:7e:a0:78:e6:ce:c1:6e:3f:f5:50:96:70:aa:54:70:
         e4:b4:c2:5e:ff:96:00:ec:3b:bf:10:e1:16:d5:0d:05:e1:7e:
         1b:49:e1:77:ee:74:c8:b0:56:8c:01:e0:b7:ad:0b:aa:85:77:
         e4:e3:b9:5f:87:a9:b4:04:71:44:91:f9:63:25:67:1f:b0:87:
         e0:16:6e:b1:cd:20:f4:13:31:1f:70:19:a9:61:4e:12:c1:79:
         71:7d:26:75:ee:0f:bf:3a:bc:0c:66:14:ff:39:c7:0a:56:67:
         5c:d0:a3:3e:5a:d9:30:e6:e2:bf:11:02:f0:ec:7c:ee:16:05:
         fb:af:22:7d:26:80:aa:bc:04:c2:3a:58:07:fc:8c:c8:9e:1a:
         52:d2:c0:6e:81:cd:ed:ac:48:51:9c:57:8d:1c:96:a5:e7:19:
         64:14:ad:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEAWpEU2psBSC8SNkoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEzMDEyMDAwMFoXDTIzMDEwNTA1MDAwMFowLzEtMCsGA1UEAxMk
NjlkODRjNjMtZDIxZC00YjE3LWFmM2ItMDg3Y2QzYTZjZDYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lLQh91YOpdP7AP8OCFe3CWw6GjE27kBACO1
QB6eIl3Pq5VH/GUBIqrMYD2ug89H3cSQu75uQV5UqqUpB6k5keLaDVX4MbctJ8E0
fNm6/rjpF9RwmM/vZqPaes7mu49BKel85nj+LSl5qdtCP30K9OwZAQ2ORQsJrvZw
fi42DlkbALG9sWxl2AgLmEL6hBgdxzlXk1DDtJokSSxhlZ+NJobUqWCWGBu6UMaC
ALcI+Yvv2YSsZawlSuV82kMH+mGv0HwfK4VThVIv93funpBx5n3l1l1YTy+klboB
UVGNreLNmP6wJ2Oi3C02t+O+Znnmct3cZIhKn2oQi/IyY1bV2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBO/eAgqDkXm1nkoutmf1hHQN/bfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNWU4YzRmZjUtNmRmNi0z
YWVlLThiYjItM2JmNTQxZDRkNDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiBIYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAmzHO8KoSERobfmhLQSw76Uwf0VYpat17TUArOQxg1gXI/u4PzoKaWj
r/yq5A1AAU6UZnIodlwLPNTubkGdJpcANth5fJ/9fKDm2Hljazebeic7jywYnMm9
fwT4AX6geObOwW4/9VCWcKpUcOS0wl7/lgDsO78Q4RbVDQXhfhtJ4XfudMiwVowB
4LetC6qFd+TjuV+HqbQEcUSR+WMlZx+wh+AWbrHNIPQTMR9wGalhThLBeXF9JnXu
D786vAxmFP85xwpWZ1zQoz5a2TDm4r8RAvDsfO4WBfuvIn0mgKq8BMI6WAf8jMie
GlLSwG6Bze2sSFGcV40clqXnGWQUrWY=
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:03:19 2025 by rpki-client