Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/756ea5a2-d84f-38d3-870e-5092fbbfbe70.roa
File:                     756ea5a2-d84f-38d3-870e-5092fbbfbe70.roa (raw, json)
Hash identifier:          IqkbGPzoHuovdViXqXwd77H/qGy4eq39QblpzwgDu1w=
Subject key identifier:   C9:59:45:8C:A8:95:7D:CA:69:B2:57:34:97:8B:90:34:17:D4:5E:ED
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D07D9D2CC26C2D8494C324238
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/756ea5a2-d84f-38d3-870e-5092fbbfbe70.roa
Signing time:             Wed 23 Feb 2022 05:00:00 +0000
ROA not before:           Wed 23 Feb 2022 05:00:00 +0000
ROA not after:            Wed 30 Mar 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        136.18.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:07:d9:d2:cc:26:c2:d8:49:4c:32:42:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 23 05:00:00 2022 GMT
            Not After : Mar 30 04:00:00 2022 GMT
        Subject: CN=49d56e3d-8763-4f15-ace0-75b568b0b472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c2:85:04:9d:70:82:ec:94:3e:04:45:e0:eb:
                    c5:c1:7d:90:16:58:1d:ea:6b:a7:10:fd:ac:02:d8:
                    ba:4a:c3:cb:8c:47:89:ec:a2:4c:9b:37:28:a9:6e:
                    50:ad:14:17:cb:a2:79:a7:5b:6a:30:cc:12:31:2b:
                    4d:ea:70:f2:18:89:4f:f1:cb:9d:e4:58:22:b5:63:
                    9e:3d:52:ae:97:c7:49:47:84:f2:31:c9:01:31:49:
                    80:96:2d:a8:53:03:48:1a:91:73:c2:f4:33:ff:e5:
                    d8:5e:2c:d3:a7:b9:96:0a:9e:ab:c2:74:58:90:63:
                    df:e2:e6:13:46:31:b1:9b:dc:e7:21:c0:83:08:00:
                    7d:17:73:44:5d:c0:3a:e0:8d:9b:57:48:3c:44:25:
                    81:5c:df:9b:91:e0:3d:15:d4:20:2c:54:d5:ef:0c:
                    0b:43:61:86:fd:58:61:df:7c:6e:c3:60:0f:6b:ee:
                    8d:fd:46:1c:3e:86:e5:e3:b6:67:27:07:fe:67:8c:
                    b2:83:20:ff:d4:f7:b2:ab:06:3c:1c:99:85:ec:ee:
                    49:5d:a2:f7:21:34:03:7e:43:22:69:8d:87:c9:00:
                    f7:07:28:e2:94:4f:60:e4:43:33:a4:49:7a:01:13:
                    7c:6a:d9:fd:c2:3a:be:3b:98:d7:6a:1e:f0:30:7b:
                    9d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:59:45:8C:A8:95:7D:CA:69:B2:57:34:97:8B:90:34:17:D4:5E:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/756ea5a2-d84f-38d3-870e-5092fbbfbe70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:44:ef:4f:e2:49:0c:88:9b:59:94:e2:68:47:37:dc:bc:f9:
         0b:bc:a5:89:7a:6c:81:32:9f:d2:aa:31:65:7a:fa:f1:6f:2b:
         82:73:ac:82:71:ef:d7:f0:f9:52:3a:d4:d5:e6:46:d0:12:7a:
         55:4b:fb:7a:40:33:03:d9:22:3a:60:9c:86:45:05:32:9b:9d:
         04:3d:d3:6b:39:ec:08:bd:51:ee:19:c3:f7:1c:fb:2e:c1:59:
         55:2d:7d:9c:99:96:20:66:bc:d8:2b:bd:ed:ef:ad:92:9c:b0:
         75:e8:80:c5:eb:f9:e9:1b:e0:c5:5b:87:d7:9b:cd:8e:b0:38:
         25:3c:74:9a:aa:19:71:83:fd:6c:ef:3a:5f:be:b6:75:62:39:
         b9:c2:89:f0:b7:43:c5:7f:71:11:1a:74:d2:8c:f4:79:64:ed:
         b6:fa:04:6f:2b:0d:4c:f6:ef:ae:2e:ff:fa:fb:51:9c:88:bd:
         52:f3:30:9c:43:e1:15:78:64:6a:96:77:fe:4f:4d:c0:04:02:
         75:60:48:59:1a:8d:53:aa:b1:a5:ee:e8:8c:24:cf:73:f7:a9:
         bb:e5:9a:d0:b6:86:c8:f0:d7:a7:03:6a:10:d6:4b:fd:49:e9:
         81:01:4c:f5:53:aa:ca:ed:d2:bd:a6:f8:16:1e:11:86:a4:1d:
         15:b1:0d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:40 2025 by rpki-client