Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/811b380c-dbc7-303a-869b-2d4554d7e569.roa
File:                     811b380c-dbc7-303a-869b-2d4554d7e569.roa (raw, json)
Hash identifier:          +1MmVW6RfEsjy+cnmftb5LTOoXKLjgi/MkgUSJdif5s=
Subject key identifier:   00:47:71:B8:E4:35:B9:94:BC:29:55:F5:72:BC:9A:D8:3E:71:A9:93
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D2F05BCC4C606F1FE75009E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/811b380c-dbc7-303a-869b-2d4554d7e569.roa
Signing time:             Wed 09 Mar 2022 05:00:00 +0000
ROA not before:           Wed 09 Mar 2022 05:00:00 +0000
ROA not after:            Wed 13 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        136.18.18.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:2f:05:bc:c4:c6:06:f1:fe:75:00:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar  9 05:00:00 2022 GMT
            Not After : Apr 13 04:00:00 2022 GMT
        Subject: CN=67048f86-4a0d-4f70-b81b-3f900041cc8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:17:6d:74:0a:e0:e5:3f:a0:01:72:b2:fb:67:
                    f1:de:45:e3:7c:c9:b6:89:bc:53:e9:cb:4f:1f:20:
                    1c:18:67:84:31:d8:eb:ed:da:c6:66:c9:38:b3:51:
                    da:51:e6:3d:c0:59:18:13:b2:dd:0c:1a:90:e0:8a:
                    0f:f1:fb:58:01:d7:02:31:de:6b:c9:f2:5b:1d:27:
                    24:d0:d9:32:54:d9:37:d9:a0:f2:70:25:23:03:89:
                    30:53:62:82:45:e0:9f:71:11:85:65:0d:90:fe:f4:
                    5c:f7:8a:95:68:d5:fa:e1:1b:86:34:3c:72:05:b6:
                    39:93:b2:47:31:8d:03:9d:dc:6d:1a:ca:37:a1:e0:
                    b7:4a:9f:2a:d2:89:6d:95:ec:6b:0d:69:43:39:48:
                    9a:9c:35:bf:38:0b:15:24:47:bf:9e:82:0e:b1:7c:
                    22:e3:92:ef:3f:47:e5:c4:f9:8f:7f:0c:fa:62:fe:
                    36:b2:79:52:71:df:89:b0:3b:e8:d6:0b:c4:8f:72:
                    eb:b4:58:71:c5:44:2e:07:5d:2c:f8:d8:9b:bc:3f:
                    d5:f8:7a:21:ff:e3:5a:4c:eb:63:14:9e:66:e3:6b:
                    48:bd:ea:68:71:ab:de:c1:92:5c:59:f9:0a:10:56:
                    ff:af:04:38:75:79:ea:3a:ef:32:f3:80:7f:01:9d:
                    be:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:47:71:B8:E4:35:B9:94:BC:29:55:F5:72:BC:9A:D8:3E:71:A9:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/811b380c-dbc7-303a-869b-2d4554d7e569.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:e2:ca:a5:01:67:49:28:6d:fb:45:32:5d:13:39:6c:db:71:
         3f:5b:d9:c5:6e:be:21:62:2f:9c:94:aa:d2:3c:a1:76:85:88:
         08:02:6d:27:ca:d1:b8:ba:f0:a8:89:77:c6:f2:0d:b8:eb:0e:
         1d:90:1c:90:76:53:fb:e4:4f:41:a7:09:b0:5e:1d:a5:9e:44:
         ff:11:a3:52:78:bd:ac:42:be:5b:b6:fd:3d:b8:f1:f4:10:32:
         27:7a:48:d2:14:e1:27:f2:da:77:1e:f3:12:dc:01:eb:ef:e5:
         23:6b:63:8a:b0:29:3b:28:54:6d:cc:ab:ac:59:c4:fd:b4:3c:
         42:b8:35:0b:f2:33:9d:d1:7f:98:22:61:b5:52:d1:af:55:ba:
         cb:17:90:bb:5f:e7:49:52:30:35:ef:f8:16:b1:32:d6:10:ab:
         a2:ee:75:6c:92:b2:da:5b:87:c2:21:91:1a:c9:8e:52:d6:7c:
         02:8d:3f:17:a5:da:fc:8e:ea:d3:6a:5e:e8:08:97:c1:e9:d7:
         dc:44:35:2c:99:2f:31:9c:89:36:90:94:f0:7a:b2:eb:f6:41:
         1c:98:78:61:64:e8:df:7d:12:55:2f:9e:c6:f9:20:a1:e2:cc:
         06:56:c6:f8:93:76:be:d0:9c:47:ea:89:e0:b5:22:e2:8b:a8:
         e6:2e:9c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:03:36 2025 by rpki-client