Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7639e2d2-ef85-3e39-8282-756fc99f1149.roa
File:                     7639e2d2-ef85-3e39-8282-756fc99f1149.roa (raw, json)
Hash identifier:          yrlAZbq43lnkSMEb310gAgaBVveC3jF+w8ubGCn/MsU=
Subject key identifier:   C3:70:3D:AA:F5:23:77:3A:E4:30:53:5C:9B:32:55:B6:CD:53:D0:4F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FC8450BB9A1B1CC8B05EBB380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7639e2d2-ef85-3e39-8282-756fc99f1149.roa
Signing time:             Wed 02 Nov 2022 12:00:00 +0000
ROA not before:           Wed 02 Nov 2022 12:00:00 +0000
ROA not after:            Thu 08 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        136.18.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c8:45:0b:b9:a1:b1:cc:8b:05:eb:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  2 12:00:00 2022 GMT
            Not After : Dec  8 05:00:00 2022 GMT
        Subject: CN=c8e18993-3339-4d50-9862-3473f1a3e5ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6c:13:51:e6:34:9d:ae:fd:cb:0d:7f:69:5d:
                    91:5f:a2:8b:3a:19:c1:e3:49:f0:68:8b:8d:53:7e:
                    58:be:b4:e0:65:74:2d:76:ff:25:c9:36:7b:df:38:
                    0c:0b:86:b6:1c:fa:97:f6:19:1f:3f:dd:b3:ce:f8:
                    36:35:5e:8e:79:c4:96:97:b0:8b:9a:cd:c7:78:d8:
                    96:fb:52:ac:34:0d:09:29:45:83:7e:48:47:bc:9c:
                    3f:b0:a2:58:0c:2a:f4:76:f8:a0:56:7e:44:2e:18:
                    b0:c9:cb:f7:47:ae:08:65:c6:83:b7:36:46:b3:04:
                    ce:a6:12:46:69:27:f0:57:31:85:64:db:dc:10:a7:
                    a2:51:cb:bd:4d:67:db:6f:61:29:f4:20:2f:c0:70:
                    4f:aa:b0:a8:e3:ee:53:a4:71:fe:f4:8a:ee:af:86:
                    c7:8c:13:15:6b:e4:56:71:cd:ab:aa:73:47:27:ef:
                    5b:49:2f:02:b7:80:29:3e:3b:4a:27:9c:41:9c:40:
                    4e:d4:61:62:63:09:1f:30:e5:9d:df:d5:53:a0:61:
                    f6:e6:36:1d:36:e9:aa:ea:2f:c1:94:87:6a:6d:30:
                    6d:3f:ee:6d:70:5d:07:71:f4:4c:b9:78:6c:52:0e:
                    7b:78:7b:87:4c:ed:97:8c:89:79:b9:d7:b9:f0:76:
                    49:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:70:3D:AA:F5:23:77:3A:E4:30:53:5C:9B:32:55:B6:CD:53:D0:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7639e2d2-ef85-3e39-8282-756fc99f1149.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:9e:34:03:c9:47:e1:3f:ac:c0:90:ce:ea:3b:53:41:5e:5c:
         5a:77:d8:78:f2:b9:f0:95:be:45:4b:74:63:13:9c:89:d1:e7:
         d5:e5:f1:99:29:46:f0:91:a7:5e:22:d4:3d:20:f8:60:c1:cc:
         ab:1d:75:7d:06:44:be:0b:0c:9b:99:9c:76:25:10:4a:c0:3f:
         05:31:7e:cc:b3:21:40:31:3d:1f:9f:1b:e6:d3:bc:16:ce:30:
         37:3f:7f:34:b7:a5:f2:8e:4b:92:ad:a1:b6:33:66:23:0d:3b:
         fb:81:48:5b:10:ef:aa:b2:8e:1b:a3:7c:f9:13:81:b1:b3:e9:
         de:d8:24:1b:f4:3a:4f:54:0e:f6:1a:fd:8b:60:64:4f:60:0c:
         4c:3b:c5:f0:2c:b7:43:26:09:a2:7f:a6:ea:b0:99:2e:17:09:
         cb:e1:a1:89:d6:6a:81:a9:d1:a0:0b:c7:14:05:04:99:4b:e4:
         19:87:fe:6c:c2:49:62:a3:6e:73:b0:21:57:3a:99:ae:14:83:
         58:43:a6:cd:60:9b:a7:9d:7a:40:10:3a:42:ef:46:ea:16:4f:
         99:57:40:bd:7e:34:8f:01:d7:ab:f9:7f:7e:a6:8f:c3:04:b1:
         7a:3c:65:10:dd:47:00:9c:3e:26:09:99:cb:6d:b1:25:10:fb:
         ab:14:e1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:21 2025 by rpki-client