Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a675d8f-5d1d-3a71-add6-9a3a15bfde7f.roa
File:                     8a675d8f-5d1d-3a71-add6-9a3a15bfde7f.roa (raw, json)
Hash identifier:          eD2o6OCzGCpHUldeOYLLlh9d27WWKaLTlR3rabxsSuA=
Subject key identifier:   B0:03:10:8F:4C:4B:D0:BE:8A:A0:0B:C4:F6:38:E1:73:2C:82:F9:DC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FC84515E5E13AA2C3E6B6F3F0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a675d8f-5d1d-3a71-add6-9a3a15bfde7f.roa
Signing time:             Wed 02 Nov 2022 12:00:00 +0000
ROA not before:           Wed 02 Nov 2022 12:00:00 +0000
ROA not after:            Thu 08 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        136.18.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c8:45:15:e5:e1:3a:a2:c3:e6:b6:f3:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  2 12:00:00 2022 GMT
            Not After : Dec  8 05:00:00 2022 GMT
        Subject: CN=5105648a-f637-43ea-9d4f-823726bff154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f7:e2:b8:c9:80:0f:b2:ff:77:6c:e2:a6:a6:
                    b9:d4:08:0f:0c:31:37:d4:e6:dc:a2:66:d6:ba:38:
                    6f:87:74:a8:0d:d1:b2:69:1a:be:a9:6d:4a:04:b9:
                    1f:13:5b:84:8e:e1:db:84:20:b2:4e:1f:91:e9:33:
                    96:bd:f2:57:fa:f3:ab:7a:30:4a:63:63:57:d8:8a:
                    f4:b4:45:dd:54:d0:83:7c:bb:ef:a3:49:72:3c:1a:
                    3d:cd:13:5d:ce:a2:c6:cc:6b:54:7e:f8:11:83:95:
                    fa:37:4a:70:98:43:d9:d6:35:66:d3:e6:45:ca:08:
                    ce:fc:e5:f9:ae:d9:63:1f:b7:d3:50:3d:af:83:e2:
                    69:14:30:b3:88:7c:74:14:f8:21:bb:47:3f:27:74:
                    95:15:a7:6a:62:99:9d:ce:30:b0:86:b5:43:26:6d:
                    58:02:26:ea:b2:c2:b1:3b:88:41:76:21:aa:85:be:
                    dc:7e:66:e5:dc:c7:f8:fa:cb:20:72:35:c9:66:fe:
                    39:a0:60:7e:b8:29:8e:9f:1e:be:be:5c:d4:0c:c4:
                    b5:21:77:fb:88:bd:51:d2:93:3e:8e:1e:a5:9b:cc:
                    dc:75:11:01:df:7c:7d:c2:b9:5a:ef:90:ef:9d:2d:
                    21:7f:ae:13:fb:c1:99:0e:a3:4d:99:5a:73:0b:79:
                    99:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:03:10:8F:4C:4B:D0:BE:8A:A0:0B:C4:F6:38:E1:73:2C:82:F9:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a675d8f-5d1d-3a71-add6-9a3a15bfde7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:1b:73:bd:4d:a6:d4:e7:e7:dc:ae:4d:ae:46:67:d4:e8:12:
         d8:b6:43:68:38:dc:7a:65:37:37:29:7f:a5:5c:dc:6c:06:ab:
         7e:09:0c:9c:cb:68:2b:2b:15:fc:45:4e:84:f4:d7:85:22:87:
         64:f4:d4:f2:26:91:66:03:04:0a:81:e0:b1:01:11:e2:53:31:
         5c:20:89:02:10:1d:f5:a3:79:aa:61:9d:24:d2:b5:ed:de:6b:
         c4:f3:0e:b4:53:5c:58:c6:b4:c3:e4:98:6a:74:a7:a3:d1:e7:
         fa:b5:b4:ba:79:07:78:7e:89:f3:6e:22:65:6b:58:78:0e:0e:
         b3:ca:55:33:26:36:f3:ae:d3:19:c9:87:d2:c1:a1:03:b1:9c:
         87:07:1a:49:8a:55:39:cb:2f:4c:e1:5d:a9:eb:1a:d6:de:16:
         25:0b:38:1e:3f:20:09:58:74:32:27:49:b3:ee:24:4f:74:b9:
         5e:bc:12:a1:d6:6f:df:d9:c0:bb:42:42:7b:71:73:c5:82:bb:
         0e:1b:84:a5:47:25:af:5e:77:5b:10:5b:57:49:f3:dd:f3:c7:
         4f:56:d6:31:8d:76:98:2d:64:79:6d:5b:47:ee:72:ba:50:09:
         f5:87:9f:fa:d2:0e:14:b1:0d:0f:23:44:76:75:b4:3e:1c:cf:
         75:76:d3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 20:25:52 2025 by rpki-client