Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d3556be-9cbc-36b4-89a3-e3a173a0883b.roa
File:                     9d3556be-9cbc-36b4-89a3-e3a173a0883b.roa (raw, json)
Hash identifier:          efwYhLhrg1XR8sBJXVQt6lGgjXC0kYkyl22BxExLHi8=
Subject key identifier:   35:88:25:35:30:BE:1C:08:6F:C1:86:A8:91:6E:19:50:91:2B:DA:80
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F2B525A4E4606A55B55FC4040
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d3556be-9cbc-36b4-89a3-e3a173a0883b.roa
Signing time:             Wed 07 Sep 2022 12:00:00 +0000
ROA not before:           Wed 07 Sep 2022 12:00:00 +0000
ROA not after:            Thu 13 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        136.18.32.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:2b:52:5a:4e:46:06:a5:5b:55:fc:40:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep  7 12:00:00 2022 GMT
            Not After : Oct 13 04:00:00 2022 GMT
        Subject: CN=835373e3-54d1-4f5b-b90d-baf168cc5d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f1:32:45:5b:2b:81:ff:14:f9:8f:10:34:3f:
                    ec:10:23:97:09:b1:02:31:48:91:14:65:7b:78:86:
                    15:61:90:32:82:c9:06:ca:1d:25:ca:ea:78:b4:ae:
                    24:d4:31:b2:a7:32:ba:58:38:f1:0e:0a:3e:c8:11:
                    0a:22:55:3b:3a:ac:d5:1f:f3:d9:a0:0d:79:22:fb:
                    5e:79:44:79:70:8b:79:ae:ca:14:fe:ab:07:ab:e5:
                    6a:b3:3b:a0:b2:06:b8:b0:23:0e:c0:55:99:f3:62:
                    4c:8b:12:da:6f:81:ad:17:97:f7:53:fe:59:da:95:
                    7f:57:35:7e:83:83:24:b8:bb:6e:fb:61:05:56:83:
                    de:18:f1:01:74:a2:9c:3c:84:50:75:98:c9:1c:81:
                    e5:fd:29:b7:45:ed:95:27:9e:42:75:89:ce:b6:33:
                    d0:3a:85:8e:eb:7d:0b:0d:fa:fc:6f:72:4f:68:ea:
                    f5:9b:9b:77:49:e8:0a:1f:89:45:fd:31:9c:36:a8:
                    04:cf:ce:4d:05:69:b1:60:f8:df:de:0a:dc:12:12:
                    72:0f:ca:1b:e8:3e:c2:89:1b:72:93:fd:b5:b5:3a:
                    47:4f:ec:ba:75:88:7d:b4:b6:18:75:78:f8:e4:a8:
                    cf:31:b2:1a:6d:c0:20:2f:53:50:ae:03:15:8b:85:
                    7d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:88:25:35:30:BE:1C:08:6F:C1:86:A8:91:6E:19:50:91:2B:DA:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d3556be-9cbc-36b4-89a3-e3a173a0883b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:d8:a2:21:1a:3c:38:94:35:a8:cf:6f:9b:c5:2f:1d:bb:00:
         dd:ac:5c:f0:c4:f7:10:a0:26:f1:3d:93:bc:00:b5:dc:dd:43:
         49:6f:22:db:0b:a7:32:7c:cc:cb:50:6e:af:32:b7:49:21:88:
         11:54:21:83:3a:19:15:14:ea:f0:63:51:b8:de:7a:0e:c7:2a:
         7c:17:f0:cf:25:4f:fb:c9:8e:10:37:1f:48:d2:17:aa:21:b8:
         27:0e:b3:dd:4a:61:7b:64:93:26:10:f5:68:e5:d4:59:9b:1d:
         52:b2:76:c9:76:26:e3:31:37:bc:9b:84:f8:82:b6:fa:8b:44:
         fe:94:76:42:40:80:9a:cc:ef:6f:b5:cd:04:67:3d:bc:11:eb:
         d9:4f:50:dd:3a:2a:15:dc:46:68:fd:cd:94:e4:da:15:c9:65:
         88:67:00:f8:0c:82:77:2c:50:3d:bf:bd:f0:3e:d9:39:03:81:
         90:ca:d5:71:d5:64:43:2f:1a:1c:58:84:7c:8b:8c:0f:2e:1e:
         6d:9d:73:11:6c:77:ce:14:3e:ff:42:69:0b:77:18:93:6d:9f:
         cf:3a:71:4d:65:51:bd:50:e2:dc:7f:fd:6b:f1:8a:df:a5:f2:
         dd:a7:64:cf:8c:24:62:83:aa:67:55:b1:af:14:80:d6:1e:ec:
         95:97:a2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:20 2025 by rpki-client