Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/72810813-58bc-3313-9123-763e7b653f44.roa
File:                     72810813-58bc-3313-9123-763e7b653f44.roa (raw, json)
Hash identifier:          b1LIsz8BOP68P553muQ0D5LcK3sPRTcLdJXzTwOzgE4=
Subject key identifier:   C5:97:8F:92:F3:8F:71:B9:7F:AC:95:7F:4E:30:87:78:15:50:AB:58
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B299B56FEE409036AEECDE8F
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/72810813-58bc-3313-9123-763e7b653f44.roa
Signing time:             Wed 25 Jan 2023 12:00:00 +0000
ROA not before:           Wed 25 Jan 2023 12:00:00 +0000
ROA not after:            Thu 02 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        136.17.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b2:99:b5:6f:ee:40:90:36:ae:ec:de:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 25 12:00:00 2023 GMT
            Not After : Mar  2 05:00:00 2023 GMT
        Subject: CN=42ee4790-7bf9-4b15-9286-d9fabe5e79fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:09:4f:3e:2b:9f:93:0b:3e:27:c8:b4:7e:f2:
                    d3:45:77:41:fa:47:4a:34:75:d1:12:29:1c:65:54:
                    51:70:49:a5:0b:81:33:2d:38:10:49:cc:f2:dd:ce:
                    38:b9:5f:76:2a:c6:6f:7a:3e:36:d7:ea:80:6b:08:
                    b8:ff:8f:b5:4e:c9:df:63:6a:74:d1:0a:26:79:8e:
                    f6:cd:58:a5:0b:1b:f7:09:5e:75:10:4c:14:e2:38:
                    35:e8:65:f7:60:1d:ed:7d:c3:13:1d:73:d4:99:93:
                    14:2b:02:6c:5b:18:ac:8d:45:95:b9:a6:ac:23:fa:
                    86:62:dc:6d:dc:43:ba:33:f6:ae:fd:4d:05:b9:1b:
                    56:db:80:de:03:81:56:c7:b2:83:19:ee:20:67:8a:
                    f2:0a:c7:66:ee:69:c9:1c:da:c2:80:3d:71:ec:87:
                    16:1d:cf:10:bc:aa:f9:fd:a2:ed:6e:1f:d8:91:08:
                    89:0b:d4:c1:14:a3:fa:0a:d7:a4:6d:22:f8:0b:bc:
                    d0:d0:d1:a8:1a:ee:2e:06:89:3e:78:6f:8a:bc:f5:
                    fd:af:8b:f4:d1:e3:69:aa:8a:3b:41:e6:78:b7:55:
                    fc:7b:ed:15:cb:d0:60:79:d9:41:d2:f8:91:66:ab:
                    e7:11:02:24:02:c4:d5:9a:91:8f:46:ac:c8:21:61:
                    8e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:97:8F:92:F3:8F:71:B9:7F:AC:95:7F:4E:30:87:78:15:50:AB:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/72810813-58bc-3313-9123-763e7b653f44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.17.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:3f:5a:49:6a:1e:24:db:29:8b:65:3d:3d:d2:cc:d6:97:6c:
         cf:bd:f4:0e:3f:70:6d:77:d9:5b:28:9b:b5:ca:23:6b:6b:b3:
         9f:76:a1:36:f8:aa:7a:f0:62:62:8e:2d:d6:f0:0b:d8:55:b5:
         1b:4b:e6:49:e8:66:db:42:a1:c6:df:e7:f7:fa:5e:22:50:33:
         ca:84:6a:5b:4d:06:27:f3:59:ea:68:ec:0d:13:30:ae:88:03:
         19:76:fb:2f:b5:a6:9a:67:ec:fd:ba:87:f4:c2:75:fe:58:d0:
         c5:af:d1:8d:94:31:d9:dd:43:b2:36:12:77:19:b5:54:1d:71:
         ed:71:b2:41:a5:55:30:22:67:62:c8:52:4f:35:4e:3f:65:d3:
         b2:35:d7:e9:61:39:87:b3:62:92:f3:d5:a3:9d:da:14:0e:f0:
         0b:5d:8e:57:20:26:4e:96:f2:bf:0b:c0:51:75:3e:f1:40:44:
         58:7d:ee:b0:e4:93:94:29:72:d4:a3:40:b1:80:5d:2e:e2:47:
         dc:a6:cb:0c:5a:b0:49:7f:c9:c5:88:77:91:f3:5f:25:ce:d0:
         58:d5:cc:8b:9e:84:e3:2a:26:4a:07:7f:1c:8b:eb:6a:49:80:
         03:40:99:5f:3b:58:9d:d5:25:ac:05:21:8a:66:73:b1:3b:3c:
         09:7b:e8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:15 2025 by rpki-client