Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8fdd0962-7b34-3611-ba5f-b66a5d55c3d5.roa
File:                     8fdd0962-7b34-3611-ba5f-b66a5d55c3d5.roa (raw, json)
Hash identifier:          AFKtXbWJiG1ZbXVvR9gPPljVW8aS/T7GOgkpSNNfOVw=
Subject key identifier:   96:57:9B:DC:39:0E:21:FA:DD:A1:8B:42:FB:78:8F:31:6D:94:74:5E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F79F4636C1593C948E626C700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8fdd0962-7b34-3611-ba5f-b66a5d55c3d5.roa
Signing time:             Wed 05 Oct 2022 12:00:00 +0000
ROA not before:           Wed 05 Oct 2022 12:00:00 +0000
ROA not after:            Thu 10 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        136.8.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:79:f4:63:6c:15:93:c9:48:e6:26:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct  5 12:00:00 2022 GMT
            Not After : Nov 10 05:00:00 2022 GMT
        Subject: CN=7c12c93f-bed5-40c7-a03b-99f3085615fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f2:cb:a1:43:6a:a3:3b:89:61:fb:32:2f:81:
                    fd:76:77:d6:f6:dd:2e:cd:c2:5c:f9:75:82:43:c2:
                    c4:76:d9:52:5c:6f:5c:04:70:37:e9:25:5b:8f:65:
                    63:e0:99:4b:08:c8:cc:43:9c:46:52:3c:35:db:33:
                    79:6e:97:33:bf:0b:cf:57:ca:7e:5d:96:59:a0:16:
                    22:71:01:88:5e:33:8c:da:07:d4:f6:4a:78:be:0a:
                    e6:ea:4e:97:c7:8a:c2:81:82:09:4b:37:ae:e6:cd:
                    62:ca:23:ab:68:92:42:d2:d7:1d:3b:e4:9c:27:f7:
                    aa:e2:b5:1c:a7:bc:19:10:f2:04:2b:7b:6c:e0:0e:
                    12:a9:78:7e:d9:12:80:86:7e:10:b7:e3:d2:5e:a9:
                    29:5f:6b:2d:4f:8a:d0:01:ad:49:e9:ef:5f:07:0e:
                    7d:7f:de:32:3b:2f:cf:cd:1f:81:b8:2b:7d:ee:ce:
                    99:a2:ae:67:69:10:1f:33:85:4c:87:10:82:de:eb:
                    5d:fe:6c:73:48:90:36:40:41:30:ce:a0:ff:ea:52:
                    50:24:02:0d:98:7a:d6:8f:38:2d:62:ba:34:00:80:
                    1a:3e:73:18:da:fa:e5:eb:54:b6:47:9f:cc:3c:e7:
                    e9:5a:81:c9:c4:a7:84:47:7a:61:94:40:60:91:30:
                    3e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:57:9B:DC:39:0E:21:FA:DD:A1:8B:42:FB:78:8F:31:6D:94:74:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8fdd0962-7b34-3611-ba5f-b66a5d55c3d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.8.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ed:b3:a6:a0:74:62:aa:29:03:35:d6:27:3d:bc:4b:e5:e9:
         ab:b7:a6:0a:49:45:5b:d2:d4:bb:0d:1c:80:15:ed:26:49:57:
         75:1a:7f:38:d4:34:2e:5c:ff:13:49:c4:5b:8a:7a:d2:50:57:
         2a:4b:d3:73:97:21:d5:0c:64:c8:35:d6:6e:aa:a6:1d:8e:14:
         50:d9:5d:bc:38:d3:e4:09:4c:b5:f6:fa:c9:32:f8:72:26:5b:
         c1:00:d4:8e:25:3c:b8:45:c6:f0:6e:c2:84:54:2c:46:80:bb:
         49:6d:49:f1:8b:40:a0:04:af:6b:62:7f:cd:25:b3:35:39:7c:
         2c:56:07:74:f4:06:ec:fc:55:08:bf:60:30:a6:07:32:68:38:
         2d:fe:fd:ae:f3:e8:31:a8:24:ce:4d:ee:e0:78:1c:20:11:47:
         d3:e3:60:02:0d:a9:2e:ff:7d:fb:57:f3:a1:57:ea:2f:08:a8:
         af:1f:f5:20:8b:9c:61:ef:4f:94:40:0e:79:c5:ba:ae:39:92:
         9c:47:f6:97:4d:78:9d:dc:22:38:c9:1a:94:87:57:d3:23:34:
         18:88:ef:1b:5b:ad:b6:99:e1:cb:8e:61:7e:31:95:24:18:4a:
         d0:aa:93:84:a8:8c:f4:d6:00:13:5d:77:a0:3f:f5:f6:0b:c4:
         37:7e:68:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:17 2025 by rpki-client