Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7ba3cade-efc1-36a0-b7ad-b873a11ac9e7.roa
File:                     7ba3cade-efc1-36a0-b7ad-b873a11ac9e7.roa (raw, json)
Hash identifier:          GFVE9274tDAIN35ouS4J7H5cec7P26psqKQiplL5YNs=
Subject key identifier:   D8:00:6B:25:1C:12:22:65:7E:ED:7D:38:03:49:45:E5:FB:98:BE:C3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C6B5E1C119BC214827F5A9220
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7ba3cade-efc1-36a0-b7ad-b873a11ac9e7.roa
Signing time:             Wed 29 Dec 2021 05:00:00 +0000
ROA not before:           Wed 29 Dec 2021 05:00:00 +0000
ROA not after:            Wed 02 Feb 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        136.18.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6b:5e:1c:11:9b:c2:14:82:7f:5a:92:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 29 05:00:00 2021 GMT
            Not After : Feb  2 05:00:00 2022 GMT
        Subject: CN=3c5de57f-3b7e-4dab-8ebe-b89644ab99c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0a:85:a6:de:7d:91:03:ac:73:76:8a:95:b8:
                    e7:c6:3e:10:21:c4:4a:66:0b:dd:c0:85:c7:1f:93:
                    2c:6d:da:21:42:54:48:c3:54:7a:ca:1c:1e:b0:35:
                    b1:1b:6f:12:4e:31:ed:25:da:b7:f8:59:1c:8f:dd:
                    b1:da:87:4b:8e:4a:d9:75:04:81:4c:a2:dd:24:4b:
                    b0:b1:fb:d1:d4:ec:75:12:df:a7:7e:01:63:91:6e:
                    dd:06:d2:e0:8d:ee:8a:8b:2b:ef:fe:59:bc:54:4c:
                    68:8c:0e:43:7b:69:27:b8:3e:22:bd:1a:8b:22:63:
                    b3:1f:7d:73:75:5a:9e:04:20:12:9d:f0:48:a5:80:
                    98:e6:84:a2:36:33:b0:86:5c:a5:f9:78:0d:e4:ef:
                    94:9d:19:87:3a:4a:0d:07:8e:a9:ce:e2:7f:6c:f5:
                    71:5b:c2:b2:e6:a4:58:a0:10:82:1e:c9:c5:60:95:
                    f8:b2:55:08:3a:5f:cf:b3:ae:2b:26:cb:5c:70:4b:
                    d7:6f:d7:3b:97:29:b2:2d:50:32:20:4d:e1:b3:5f:
                    a9:9d:e1:c3:87:db:35:50:b3:60:f6:aa:80:c3:b7:
                    14:6b:6b:16:cf:af:16:6f:27:09:d1:8d:6f:e9:47:
                    43:a8:0c:de:e8:af:10:90:e1:75:7d:2a:ec:f1:ef:
                    fd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:00:6B:25:1C:12:22:65:7E:ED:7D:38:03:49:45:E5:FB:98:BE:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7ba3cade-efc1-36a0-b7ad-b873a11ac9e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:e0:a6:c2:0b:5f:b3:2d:5b:29:0a:02:0d:dc:19:64:37:ed:
         fe:80:64:8f:f5:88:d0:be:d5:36:97:7d:07:8c:1d:41:79:77:
         93:aa:5a:23:5c:f0:f6:ca:bc:f3:87:b6:eb:c3:4b:6b:7d:87:
         24:13:ed:c5:3c:1a:87:de:1d:ef:9a:dc:c1:e0:94:b3:22:fb:
         35:4b:e0:f6:c1:69:1b:47:90:20:7d:1a:c2:77:2a:83:75:2e:
         99:ea:d6:4a:a5:cf:a2:73:a7:1b:87:68:fe:4d:16:90:c4:9e:
         dc:b3:72:5d:52:fb:66:ad:b1:22:0b:22:d3:ba:90:09:84:79:
         c0:dc:c8:93:2d:3c:84:1c:0b:13:09:2b:ec:65:3a:78:7e:76:
         cf:a4:5f:52:55:99:9c:1d:12:61:7a:b2:b3:2a:5b:b5:34:89:
         02:7c:a9:a8:1c:50:b5:cf:7b:b7:50:06:a3:f4:da:da:19:7a:
         0a:09:48:75:51:11:27:25:2a:98:d1:c1:50:7d:56:f2:e3:e4:
         36:7c:b2:b4:65:28:0f:c1:f6:d0:8d:59:8e:51:74:b3:c4:6a:
         16:d1:9c:47:b8:24:60:89:4a:93:e3:1e:d3:ba:73:0e:f2:49:
         df:e0:22:a3:c8:44:a7:4a:1e:c7:00:a6:2a:04:ff:b0:58:08:
         d3:07:6b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:57:39 2025 by rpki-client