Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/89d74ff0-7ac7-3767-9d3e-785b3cda4831.roa
File:                     89d74ff0-7ac7-3767-9d3e-785b3cda4831.roa (raw, json)
Hash identifier:          t0RjlmZ5MtwwwKA9bK2klCYHg7fcvAYiHaCJB7J5GcI=
Subject key identifier:   14:26:16:76:C2:D9:AD:54:AA:66:26:9A:0C:2A:BF:11:65:40:79:2E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DCB63729222014B4C4F0AD680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/89d74ff0-7ac7-3767-9d3e-785b3cda4831.roa
Signing time:             Tue 03 May 2022 12:00:00 +0000
ROA not before:           Tue 03 May 2022 12:00:00 +0000
ROA not after:            Wed 08 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        136.18.24.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cb:63:72:92:22:01:4b:4c:4f:0a:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  3 12:00:00 2022 GMT
            Not After : Jun  8 04:00:00 2022 GMT
        Subject: CN=eee0c70c-1eed-4752-b62c-87ef27d9910d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5e:6f:c6:6a:38:b3:ba:09:70:46:d9:dc:67:
                    54:d4:bb:09:a4:6b:21:4c:e7:32:f1:74:7b:dd:0a:
                    be:ab:c5:7f:51:6d:a0:59:55:33:71:4d:fe:a8:3f:
                    0b:73:22:a9:95:52:1c:0a:ad:36:11:47:a8:44:97:
                    df:49:b3:3d:9b:1c:3b:05:6f:67:87:24:a0:29:7c:
                    ae:21:84:ee:60:cf:56:d2:7e:bd:8e:c1:27:a1:20:
                    c3:91:43:46:89:36:ae:71:96:f1:9c:b7:05:dc:4d:
                    8f:5b:66:d0:8e:21:2e:d4:1a:63:73:e5:2d:14:a5:
                    c8:a5:38:3c:a4:ba:79:13:59:cb:a3:c8:90:ad:c3:
                    24:98:20:09:cd:8c:a0:3d:3f:fb:29:a1:53:14:00:
                    0a:a3:51:e3:4f:5f:f2:ed:dd:7a:1d:04:36:4c:e4:
                    69:f7:86:be:1e:e5:2d:33:26:a4:4b:f4:17:3d:77:
                    ea:ec:d4:16:b0:49:92:91:1d:1b:23:73:85:30:98:
                    98:1d:e3:74:b2:07:b7:0e:f1:c8:56:4c:16:1a:4e:
                    3d:ef:f6:3b:a2:bb:98:c8:e2:c6:89:4a:49:df:01:
                    84:b8:3b:8e:5a:48:06:61:51:b8:b1:90:d2:9e:bd:
                    16:ba:75:9e:c2:4e:69:38:76:ab:0a:18:d7:5e:7c:
                    a0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:26:16:76:C2:D9:AD:54:AA:66:26:9A:0C:2A:BF:11:65:40:79:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/89d74ff0-7ac7-3767-9d3e-785b3cda4831.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:21:de:76:e1:80:dd:e4:5f:a3:39:34:7a:49:e4:1e:99:3d:
         25:61:cf:fe:bb:b1:9e:44:63:a0:0d:43:bd:74:b2:76:ee:e8:
         f2:94:a3:20:bb:70:cd:09:3f:24:c5:43:0f:96:1d:8e:2b:1e:
         7c:21:95:07:8a:51:a3:c2:9f:26:7d:c7:05:ef:2f:80:59:d9:
         5e:e7:1e:21:10:b8:f9:df:df:d5:d6:1f:d1:82:42:1d:9a:19:
         f8:35:06:6d:ca:cc:79:43:16:b2:3a:6b:97:7b:6a:f8:85:9d:
         db:55:02:76:d4:6b:6a:04:5b:0a:25:29:81:17:c0:1e:ae:f6:
         08:79:d1:e1:aa:5a:f8:7c:ac:77:46:2d:6d:11:b3:a0:39:d2:
         d8:51:cd:58:fd:99:05:bb:50:1d:bc:19:4c:1a:08:ee:cd:4d:
         c6:2c:ff:a0:77:60:cd:15:50:ee:f6:71:2b:7e:5a:fe:e3:7a:
         95:42:1e:00:0a:e2:5b:e6:f8:2d:3b:55:3c:55:38:9d:60:2c:
         c6:53:24:b5:35:a4:59:cd:80:70:db:d8:43:b7:a2:18:ea:30:
         86:c1:79:69:df:52:98:72:e5:62:2e:32:43:58:bc:28:57:13:
         c5:7f:2d:a6:e6:cf:b5:0c:76:4e:c2:5e:b3:23:b6:0b:ca:34:
         bf:8c:a3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 18:49:33 2025 by rpki-client