Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5e9de859-7fe1-3462-8253-8d79931781d1.roa
File:                     5e9de859-7fe1-3462-8253-8d79931781d1.roa (raw, json)
Hash identifier:          phPrxQNjxuGJ6Gn3jvlBYA0WZq8Ri529BhoGBcvRiU8=
Subject key identifier:   D6:C3:18:2D:B9:9D:05:27:A7:E5:66:E4:16:50:0E:79:29:DB:7E:77
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E8EF48D23E3AF69A48E6FC150
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5e9de859-7fe1-3462-8253-8d79931781d1.roa
Signing time:             Wed 13 Jul 2022 12:00:00 +0000
ROA not before:           Wed 13 Jul 2022 12:00:00 +0000
ROA not after:            Thu 18 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        136.18.24.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:8e:f4:8d:23:e3:af:69:a4:8e:6f:c1:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 13 12:00:00 2022 GMT
            Not After : Aug 18 04:00:00 2022 GMT
        Subject: CN=d9fbad6d-74fa-4334-9cef-17ff101d9fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c5:62:cd:28:a4:03:d6:4a:60:04:73:00:a1:
                    c6:dc:65:84:41:30:52:80:80:4d:4b:0b:da:b5:91:
                    9e:d4:39:12:b6:2f:1b:2b:86:dd:e9:72:8e:93:dd:
                    ee:3e:e6:31:6a:dc:19:b5:4e:ee:40:61:ce:50:a9:
                    85:ba:53:1e:d1:be:aa:67:6c:fa:e0:e2:0a:bd:6f:
                    a3:aa:fc:ce:9b:be:4f:b8:8f:db:3d:b3:cc:a1:81:
                    20:60:41:97:49:03:93:fc:21:ab:98:db:f0:2e:c4:
                    07:8c:a9:af:07:9d:35:13:82:8e:3a:36:d1:9f:f6:
                    b8:17:74:68:41:4e:7c:7b:b2:02:aa:01:75:04:44:
                    be:83:16:8d:a9:af:e5:02:ae:ea:b9:23:92:9d:75:
                    bf:85:2e:d1:c6:87:d4:e8:ca:37:84:06:e5:ac:c5:
                    4d:08:05:0a:ee:60:94:b4:a8:76:3b:ac:1f:a7:cf:
                    51:3b:51:78:5b:8b:04:8a:39:48:47:f7:83:94:a5:
                    72:e6:44:dc:61:77:9b:1e:9d:57:7e:b7:54:26:c0:
                    0e:08:23:44:9c:f3:de:7e:65:4b:88:41:f6:86:31:
                    56:a0:fe:53:63:09:23:b3:c7:0f:7e:91:06:83:b6:
                    0e:94:db:f9:28:8a:f3:c7:8b:ba:ab:e2:c7:fc:d0:
                    9c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C3:18:2D:B9:9D:05:27:A7:E5:66:E4:16:50:0E:79:29:DB:7E:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5e9de859-7fe1-3462-8253-8d79931781d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:14:e5:dc:93:75:82:30:b2:f6:18:8a:6b:46:58:f2:6c:77:
         1e:03:03:8d:c8:06:e3:4e:07:44:e7:1b:b8:9e:fd:eb:7a:82:
         ac:bb:d0:df:aa:50:05:39:59:d4:43:dd:ed:00:87:67:5b:e8:
         97:cd:44:51:1f:6f:80:db:f7:2e:06:a0:eb:df:47:a3:a1:31:
         67:a9:d0:fe:1c:47:9d:5b:b7:95:07:3b:e9:74:b4:f5:ba:eb:
         db:2e:1b:30:36:11:f6:fd:f7:3d:1b:7d:e2:76:8a:fa:12:71:
         b7:e3:fd:f5:32:83:d3:b6:cb:95:db:c9:41:9a:37:31:12:0c:
         0d:c8:65:c3:ed:4e:e3:06:22:19:92:31:fc:fc:92:88:04:af:
         b2:06:3f:04:59:ec:6e:1f:11:6e:2d:69:d3:39:d4:fa:2a:f2:
         25:22:72:e5:66:71:2d:5e:57:34:a7:b8:25:dc:86:24:c2:88:
         e1:68:3a:03:64:0b:3c:30:54:58:af:84:15:a8:c7:70:45:e5:
         2a:e7:a8:9c:e8:29:46:ee:a3:e2:bb:35:98:9b:f0:01:de:cd:
         8f:2a:58:76:b9:0a:71:22:29:55:13:81:ec:51:49:29:0f:cb:
         39:1b:c7:c0:08:b9:38:a0:4d:27:6e:b5:36:c7:18:2e:02:4b:
         2e:78:e6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:24:55 2025 by rpki-client