Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/74c96f4b-16dd-318e-804e-272f86bc43d5.roa
File:                     74c96f4b-16dd-318e-804e-272f86bc43d5.roa (raw, json)
Hash identifier:          6rBOOZlWtvdIV47cdtu2GQ252/tq8AulwMIk6xRKhEo=
Subject key identifier:   EE:F3:75:54:9A:1E:E8:49:50:B4:B8:58:4F:A3:06:D1:CB:CD:15:7E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D7D0B74525A07B6876B4F5400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/74c96f4b-16dd-318e-804e-272f86bc43d5.roa
Signing time:             Wed 06 Apr 2022 04:00:00 +0000
ROA not before:           Wed 06 Apr 2022 04:00:00 +0000
ROA not after:            Wed 11 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        136.10.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:7d:0b:74:52:5a:07:b6:87:6b:4f:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr  6 04:00:00 2022 GMT
            Not After : May 11 04:00:00 2022 GMT
        Subject: CN=cdbc45a5-3022-4d0e-a8d1-89b058ddcafa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3a:35:37:64:b0:d9:98:15:31:a9:8f:c7:b7:
                    5e:22:1f:6f:28:a5:86:61:78:7a:90:3c:6d:8e:4b:
                    c3:9c:04:6b:99:d5:15:43:ad:b8:3c:91:78:34:36:
                    b1:ed:3f:ce:47:f8:81:56:e4:b8:d1:c5:c9:7b:a3:
                    45:b7:6d:53:fd:46:38:41:8d:66:06:cd:0c:54:14:
                    de:41:2a:34:13:3b:d1:cd:40:9a:65:3a:bf:65:c8:
                    b0:8a:80:11:a6:93:82:d9:de:ed:28:89:bd:a9:88:
                    5c:b6:fb:cd:c2:08:45:66:2c:cf:07:0f:33:5f:d8:
                    8b:38:0b:0a:39:e6:da:2f:a5:c8:69:b1:6f:da:65:
                    80:ea:95:e2:90:a9:20:b3:a9:73:8c:f3:b4:89:0d:
                    9c:cb:27:41:09:76:d9:07:6d:7b:91:2d:5b:bf:dc:
                    87:b7:cb:54:c4:cb:46:44:0a:2a:d6:18:f0:f7:22:
                    b7:47:28:27:ff:6a:ed:f0:0d:31:04:20:78:de:8e:
                    9b:f5:b5:a3:42:c3:6c:08:e9:ba:4b:09:ca:17:dd:
                    24:a7:38:13:5f:98:2d:1c:17:0a:a1:ba:40:da:f4:
                    82:75:9f:87:0e:70:f7:e7:b1:6e:cd:4e:7d:52:21:
                    d3:b5:82:35:1a:25:7f:89:60:77:0a:f2:fc:c5:55:
                    9a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F3:75:54:9A:1E:E8:49:50:B4:B8:58:4F:A3:06:D1:CB:CD:15:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/74c96f4b-16dd-318e-804e-272f86bc43d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.10.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:b8:2a:46:6e:93:ca:98:54:82:af:93:11:fd:41:1b:3e:50:
         65:15:76:22:b2:09:0d:40:32:a9:73:61:62:bb:9b:26:9f:89:
         88:cd:25:6e:93:5a:b7:2f:41:3f:68:16:de:a1:86:62:7a:db:
         0a:3a:dc:5a:d4:89:6d:b0:e6:63:61:93:e0:1f:0e:e5:e1:5a:
         47:31:a1:4c:12:01:98:ae:e0:37:5c:ff:69:da:d7:33:69:ef:
         b8:3a:45:e8:7c:7a:0d:f6:6c:22:c7:aa:19:d9:82:a4:01:bc:
         28:50:6d:5b:10:90:8d:6a:84:19:7b:76:31:84:a9:25:2a:e6:
         8e:45:d9:76:0d:ca:34:4c:16:8a:4e:b6:05:7a:1c:6f:04:e8:
         4c:3c:f2:44:58:3d:dd:82:8d:2d:2f:67:15:0a:c7:fb:b7:fc:
         65:82:a0:6e:fa:6a:03:8a:61:d2:f4:e1:68:fc:73:52:29:b9:
         d6:b3:68:97:9a:fb:ae:2d:44:00:f8:2e:96:e8:89:cf:97:bb:
         25:09:03:a9:2b:b4:84:bc:5e:5c:60:7f:ce:ff:a5:de:dd:e3:
         8d:2c:99:58:66:7a:34:02:e4:75:6b:fd:99:dc:33:36:99:2f:
         52:33:01:d5:7a:a8:8d:2d:a2:f8:09:b5:20:4d:dd:c4:c3:06:
         fe:92:db:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:10:30 2025 by rpki-client