Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6b1a58c5-2c7c-37df-a3b5-d3abe6817b08.roa
File:                     6b1a58c5-2c7c-37df-a3b5-d3abe6817b08.roa (raw, json)
Hash identifier:          MQ2yi/ShXsYZOixKN4MuHJruBfsdgg/3vDCC9CnuD58=
Subject key identifier:   4D:A4:3A:50:47:BC:91:A7:2D:6F:87:72:33:19:5B:8D:6F:E5:FB:90
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840168DD88F543DFCCA1A554AF0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6b1a58c5-2c7c-37df-a3b5-d3abe6817b08.roa
Signing time:             Wed 30 Nov 2022 12:00:00 +0000
ROA not before:           Wed 30 Nov 2022 12:00:00 +0000
ROA not after:            Thu 05 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        136.18.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:16:8d:d8:8f:54:3d:fc:ca:1a:55:4a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 30 12:00:00 2022 GMT
            Not After : Jan  5 05:00:00 2023 GMT
        Subject: CN=c82fd2f6-aefa-44e4-b8eb-a93d364eabc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:40:9d:20:dc:09:43:40:ec:02:1f:2d:2b:f4:
                    9d:b6:b8:64:9e:b3:16:7b:33:60:66:22:23:bf:da:
                    a5:2c:a8:ca:c4:37:21:60:79:0b:ed:3d:48:3d:1d:
                    68:bb:61:8e:1b:ca:97:be:b3:5f:6b:cb:7c:f9:b0:
                    e2:28:c7:52:33:76:68:8a:26:7a:b3:aa:8e:e8:62:
                    ff:e4:b7:a6:0c:19:73:85:25:c2:ba:0d:a3:43:dd:
                    88:01:b3:3d:b0:0c:f8:d0:ac:d4:72:57:99:f3:3d:
                    59:47:47:fb:27:35:45:ad:44:68:6a:11:94:07:ef:
                    85:f9:26:ee:3d:af:8b:c5:3e:6a:0e:4d:f1:70:5f:
                    3d:a4:15:22:79:60:79:6e:df:cc:6e:bf:65:5c:1b:
                    65:45:0f:f1:7a:6f:cf:37:85:1c:0e:a2:bc:4e:84:
                    35:33:e5:35:b6:b1:c7:76:ea:e1:07:49:61:1d:24:
                    4a:b9:e6:ba:e0:76:5c:f7:21:9e:1d:a0:c8:45:1f:
                    d7:9f:49:05:9c:f5:7c:db:b6:40:5e:05:28:a9:d3:
                    cb:6b:81:9d:5f:c0:df:32:59:bc:ab:af:4a:60:08:
                    66:4a:02:ff:9b:2e:4d:4c:2b:3a:d9:b4:74:de:63:
                    d4:c6:0f:01:ae:77:99:36:49:25:38:1f:05:f3:80:
                    62:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A4:3A:50:47:BC:91:A7:2D:6F:87:72:33:19:5B:8D:6F:E5:FB:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6b1a58c5-2c7c-37df-a3b5-d3abe6817b08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:45:e7:72:f4:82:83:0f:6b:0d:fd:d6:61:3d:ff:ca:69:35:
         bf:b6:48:46:ca:d8:10:b4:0f:a8:97:51:e4:26:ae:b9:c9:0e:
         17:9b:07:4b:89:d9:8f:61:8f:d8:61:89:0e:7c:ab:5c:ea:dc:
         39:7c:aa:02:29:23:4d:1e:1b:56:16:d0:1b:26:75:b6:eb:b2:
         19:77:6b:8e:08:85:f8:36:01:48:30:ec:a5:ec:78:dc:4c:dc:
         d4:49:d1:a9:04:75:9a:de:3e:33:c3:0a:a7:fb:2f:2b:d5:58:
         4d:08:a8:91:9f:78:c2:62:04:0d:b7:05:e0:82:f6:d2:13:de:
         3a:9c:d1:e2:ee:96:c3:1f:be:3d:18:39:9b:fc:14:e8:82:3c:
         31:84:bb:fe:01:24:34:34:72:51:a2:d3:b2:f9:b6:0d:aa:1a:
         82:1a:87:a1:7a:82:43:74:09:0a:9d:43:05:80:f0:ea:07:47:
         bc:11:4c:30:f5:b3:d8:13:d4:32:89:62:fc:77:24:28:37:a4:
         8c:37:e9:de:62:98:b2:7a:54:a8:27:76:29:4b:66:51:49:75:
         da:94:90:b4:2a:c6:05:d1:75:f4:13:1f:6c:de:c0:e0:c9:40:
         1a:bb:bb:8b:92:f2:a8:4b:32:df:32:7e:25:d3:42:f7:5a:3c:
         4e:c0:de:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEAWjdiPVD38yhpVSvAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEzMDEyMDAwMFoXDTIzMDEwNTA1MDAwMFowLzEtMCsGA1UEAxMk
YzgyZmQyZjYtYWVmYS00NGU0LWI4ZWItYTkzZDM2NGVhYmM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjECdINwJQ0DsAh8tK/SdtrhknrMWezNgZiIj
v9qlLKjKxDchYHkL7T1IPR1ou2GOG8qXvrNfa8t8+bDiKMdSM3ZoiiZ6s6qO6GL/
5LemDBlzhSXCug2jQ92IAbM9sAz40KzUcleZ8z1ZR0f7JzVFrURoahGUB++F+Sbu
Pa+LxT5qDk3xcF89pBUieWB5bt/Mbr9lXBtlRQ/xem/PN4UcDqK8ToQ1M+U1trHH
durhB0lhHSRKuea64HZc9yGeHaDIRR/Xn0kFnPV827ZAXgUoqdPLa4GdX8DfMlm8
q69KYAhmSgL/my5NTCs62bR03mPUxg8BrneZNkklOB8F84BiPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE2kOlBHvJGnLW+HcjMZW41v5fuQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNmIxYTU4YzUtMmM3Yy0z
N2RmLWEzYjUtZDNhYmU2ODE3YjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGiBJAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHlF53L0goMPaw391mE9/8ppNb+2SEbK2BC0D6iXUeQmrrnJDhebB0uJ
2Y9hj9hhiQ58q1zq3Dl8qgIpI00eG1YW0Bsmdbbrshl3a44Ihfg2AUgw7KXseNxM
3NRJ0akEdZrePjPDCqf7LyvVWE0IqJGfeMJiBA23BeCC9tIT3jqc0eLulsMfvj0Y
OZv8FOiCPDGEu/4BJDQ0clGi07L5tg2qGoIah6F6gkN0CQqdQwWA8OoHR7wRTDD1
s9gT1DKJYvx3JCg3pIw36d5imLJ6VKgndilLZlFJddqUkLQqxgXRdfQTH2zewODJ
QBq7u4uS8qhLMt8yfiXTQvdaPE7A3sA=
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:10:37 2025 by rpki-client