Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/67c6b40d-f589-3547-8298-7a13b51e423f.roa
File:                     67c6b40d-f589-3547-8298-7a13b51e423f.roa (raw, json)
Hash identifier:          Fz5CN/FQzt6385KzYB7WIqEf8cMKUx9JrjW9UitDxG0=
Subject key identifier:   08:03:A3:1D:4D:87:42:27:9B:4E:48:E6:A1:C0:3B:5A:F7:49:08:AF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E8ED69036BE76340904146D40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/67c6b40d-f589-3547-8298-7a13b51e423f.roa
Signing time:             Wed 13 Jul 2022 12:00:00 +0000
ROA not before:           Wed 13 Jul 2022 12:00:00 +0000
ROA not after:            Thu 18 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        136.10.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:8e:d6:90:36:be:76:34:09:04:14:6d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 13 12:00:00 2022 GMT
            Not After : Aug 18 04:00:00 2022 GMT
        Subject: CN=2bd6597e-0a08-4d14-87e4-9772e09c545f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6e:cc:a3:7c:35:b1:be:a0:97:3c:76:e7:0a:
                    17:81:a7:45:d2:e0:df:05:6b:e7:14:e4:a1:02:39:
                    14:5a:ec:79:6b:5e:a9:9c:5d:b6:26:c0:d7:1b:38:
                    52:1f:d7:8d:b0:08:db:65:cf:8c:ba:c4:56:37:2d:
                    c8:99:c7:cf:bb:3b:bc:61:4e:7f:14:ba:7c:a2:e5:
                    e7:13:a5:47:fc:a9:56:c1:dc:5a:2a:e6:53:b7:c7:
                    9d:7d:b0:bc:d6:ff:27:c5:84:1b:15:cd:7f:50:07:
                    c7:1f:1a:63:27:3e:d4:bf:ea:9f:3e:0b:d6:41:29:
                    73:e5:e9:23:23:fe:be:e7:f6:3c:59:4a:55:8d:29:
                    53:13:8b:ca:c9:48:9c:6b:36:12:15:5c:c8:7f:06:
                    6e:f4:62:0c:99:ff:9a:58:10:2c:6c:ab:7e:10:55:
                    6b:aa:5a:85:65:d1:68:c8:70:6e:14:e6:15:dd:f4:
                    03:ac:d6:5f:d2:07:8b:59:36:f8:46:30:bd:ba:c0:
                    de:ff:3c:c3:fe:38:d0:c2:72:6e:0f:8d:58:43:62:
                    5c:9e:72:37:c5:28:09:7a:03:47:7c:1f:97:b2:a8:
                    34:6d:01:ba:3a:7d:8a:81:30:e8:a6:26:cb:96:44:
                    b7:53:8d:f4:3d:5c:7a:a1:d9:de:19:d5:66:e0:d8:
                    6d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:03:A3:1D:4D:87:42:27:9B:4E:48:E6:A1:C0:3B:5A:F7:49:08:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/67c6b40d-f589-3547-8298-7a13b51e423f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.10.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:12:04:fa:76:ff:4e:aa:82:f2:9c:8a:e0:04:02:c3:86:b7:
         98:c3:1f:6a:47:a8:2f:1b:54:36:ec:24:71:e2:23:82:d9:f9:
         16:64:49:10:9e:53:24:c7:d7:ef:65:ed:5d:c7:27:ad:d6:6f:
         62:80:6c:5a:29:79:2c:1d:9b:6d:71:30:88:12:3a:fc:2e:c1:
         33:bc:50:01:a9:9b:2a:5e:e6:2b:05:08:4f:e7:ad:be:6f:83:
         4e:05:b6:92:56:c6:97:72:09:ce:17:75:a8:2a:4e:99:86:34:
         52:d7:dd:c9:66:26:34:e3:98:0c:90:f7:6e:82:e0:03:aa:65:
         7b:9b:cd:8f:5e:5c:fb:f8:0d:d4:ea:a9:3f:9e:0e:5d:d6:6f:
         53:e3:c8:8d:33:86:1f:e3:61:02:94:4d:2f:15:65:9f:83:bb:
         15:d5:b0:91:6b:1d:b8:e8:06:1c:88:71:d1:67:48:ab:46:ba:
         bd:52:8e:66:8b:aa:32:18:e8:5f:91:d2:2a:89:85:2b:5e:20:
         6f:a2:6e:7c:f6:8f:8c:e3:1a:3f:d4:2b:10:74:64:21:3b:b0:
         6d:36:ab:96:5d:24:96:6c:a3:69:59:81:b3:63:3d:87:38:ef:
         b6:f6:99:4a:31:23:40:38:49:1f:b8:31:c5:0f:2e:fb:4d:05:
         48:48:00:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:02:45 2025 by rpki-client