Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a4f7aed8-d6bf-3588-8654-39e8a3873d63.roa
File:                     a4f7aed8-d6bf-3588-8654-39e8a3873d63.roa (raw, json)
Hash identifier:          4syGQuYmYwP288v/KWqBYEfcA2Fkxy8v8yQ5hGl823Y=
Subject key identifier:   7F:86:1B:77:D3:34:08:33:46:D9:CF:D1:DA:B0:2D:81:FA:95:47:03
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C6B65A4117E7BFB292749F400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a4f7aed8-d6bf-3588-8654-39e8a3873d63.roa
Signing time:             Wed 29 Dec 2021 05:00:00 +0000
ROA not before:           Wed 29 Dec 2021 05:00:00 +0000
ROA not after:            Wed 02 Feb 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        136.18.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6b:65:a4:11:7e:7b:fb:29:27:49:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 29 05:00:00 2021 GMT
            Not After : Feb  2 05:00:00 2022 GMT
        Subject: CN=99ae8215-aa20-4119-9911-df54a087cd30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3b:5b:aa:36:19:d9:ae:28:ec:eb:8b:1f:c5:
                    1f:92:cb:ca:a6:93:bf:1f:d7:8b:6e:9e:a3:a8:1b:
                    a5:09:f0:93:c4:98:1b:39:c4:75:fe:fb:af:d0:d5:
                    74:f4:2a:c6:75:a8:f8:c7:8f:7f:f7:3c:d2:02:05:
                    9b:8b:e2:39:61:66:5b:e0:c1:36:34:41:53:40:f1:
                    68:a3:47:20:12:c1:b5:7b:f6:f6:c4:96:e1:9e:00:
                    b1:7a:94:ba:aa:af:80:35:0f:0e:6f:05:46:c8:de:
                    0a:d4:d6:69:aa:82:08:22:ff:1b:27:19:ea:e2:34:
                    26:49:84:73:f1:a8:b0:bc:0a:fd:b7:7f:96:6c:2d:
                    61:58:8b:ed:2d:ae:37:92:44:16:79:e1:9f:21:a4:
                    21:94:c3:8a:d7:d0:10:7a:7e:66:5f:82:a7:2c:d3:
                    66:51:fd:c8:4f:68:5b:f9:70:95:e2:0d:ae:61:70:
                    27:7d:71:80:f1:47:82:26:e6:eb:fe:9a:c3:30:5d:
                    16:28:d4:01:49:4b:1c:98:ff:bf:49:0b:5e:1e:1b:
                    80:a2:eb:75:48:ed:94:12:af:00:a6:99:b7:e2:e8:
                    f7:89:b5:71:01:7d:12:24:66:ba:bb:42:24:54:73:
                    4f:98:52:15:fe:65:91:6d:f9:6d:d2:ef:1b:3e:c8:
                    79:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:86:1B:77:D3:34:08:33:46:D9:CF:D1:DA:B0:2D:81:FA:95:47:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a4f7aed8-d6bf-3588-8654-39e8a3873d63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:58:86:24:81:e5:ce:04:61:93:bc:4b:c2:ed:e0:8f:4b:4f:
         60:61:9f:7f:b2:4e:ad:ed:a3:2f:aa:e3:66:7c:c7:dc:03:98:
         0a:d9:71:d1:03:f4:3f:b4:5a:a1:03:0a:c0:16:1e:2f:99:6f:
         86:63:ce:f8:ae:78:6b:d3:fb:81:02:aa:b3:3f:85:3a:81:bb:
         d7:05:99:a2:38:42:e6:4c:49:9f:68:ab:db:4f:bf:fd:0e:77:
         e4:0b:c4:d7:e9:ab:7b:29:ba:49:f8:f8:84:b6:fb:19:56:67:
         bb:65:4f:31:de:d4:f8:a5:e5:1e:d6:d1:c0:45:28:3f:f2:6a:
         2b:0c:9b:00:f0:83:fb:17:bd:52:bd:96:8c:7d:2d:5a:89:5b:
         fc:bc:75:39:49:48:46:fb:c0:20:e6:43:23:7e:fe:e2:5d:46:
         9f:a8:fa:2b:1e:04:68:23:f8:5a:fb:15:67:55:71:0f:42:87:
         b6:e7:42:e3:54:42:2b:c9:17:4b:47:c7:f5:8f:de:da:bb:05:
         c6:52:d0:c0:bd:da:e4:c9:0b:f6:7c:a9:07:0a:12:1b:1b:aa:
         44:d4:2e:0e:b8:59:60:53:4c:14:9e:19:40:22:6e:8c:b5:1f:
         ee:e0:cd:7f:b9:a9:0e:c9:87:33:e5:88:ae:4e:44:8c:42:8f:
         3a:69:fa:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:26:01 2025 by rpki-client