Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b096ca0e-58d9-33ea-893a-131d2e546c8f.roa
File:                     b096ca0e-58d9-33ea-893a-131d2e546c8f.roa (raw, json)
Hash identifier:          4OR5HD5yq1gALhYQohLeWQPRsYYnoM1wdCdkDs8w0go=
Subject key identifier:   9F:3B:C3:21:D5:53:7B:26:E8:06:19:67:C7:5A:D7:C9:C9:E8:51:20
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E409CBC5F62F812ECC7E45000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b096ca0e-58d9-33ea-893a-131d2e546c8f.roa
Signing time:             Tue 14 Jun 2022 12:00:00 +0000
ROA not before:           Tue 14 Jun 2022 12:00:00 +0000
ROA not after:            Wed 20 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        136.10.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:40:9c:bc:5f:62:f8:12:ec:c7:e4:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 14 12:00:00 2022 GMT
            Not After : Jul 20 04:00:00 2022 GMT
        Subject: CN=fd0baf5d-cd7f-488a-901c-8d9531c76bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:27:11:79:19:04:20:a8:a0:62:86:16:f2:16:
                    76:c4:6d:aa:8c:25:fe:25:c3:b7:b8:d1:0a:1d:5f:
                    59:04:c0:1c:31:89:48:c5:b4:0d:de:48:9a:55:4e:
                    a8:3d:61:3a:b3:e1:6b:01:80:ff:4f:18:13:a4:77:
                    c5:6b:29:0a:69:34:ce:d1:14:6c:c2:ea:4d:89:7e:
                    d2:4b:58:39:49:d3:d0:8a:67:89:46:c7:8c:c1:89:
                    64:d6:17:16:5a:db:36:bc:65:20:1d:f8:f5:72:5a:
                    14:08:57:c6:12:b9:98:03:a0:c7:cd:29:8b:9e:39:
                    70:69:18:14:fe:c8:66:3b:b4:df:18:6c:57:4e:9d:
                    c6:1e:13:ae:c0:8a:b3:4e:3a:f3:01:60:05:01:19:
                    e4:40:37:21:a4:1a:4e:ff:26:db:fb:7c:64:4f:11:
                    d6:6b:3a:1e:e7:80:ee:77:ad:bd:76:49:fc:b5:52:
                    5d:cb:66:82:c0:4f:ff:e9:6c:24:a9:fa:39:ea:2b:
                    2f:3c:e0:b3:eb:50:04:d1:26:3f:7d:31:8b:e5:a0:
                    33:77:86:18:fd:8f:87:32:3c:09:c5:66:a9:00:1f:
                    ad:ff:cf:2d:4a:7d:27:19:1c:59:a3:93:d8:95:6b:
                    29:b0:16:3f:79:fa:c4:31:b4:ec:ad:d5:77:03:19:
                    46:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:3B:C3:21:D5:53:7B:26:E8:06:19:67:C7:5A:D7:C9:C9:E8:51:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b096ca0e-58d9-33ea-893a-131d2e546c8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.10.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:4f:20:2f:31:43:78:ed:53:a3:49:49:53:38:a9:eb:14:01:
         7f:f0:c8:1c:9a:a8:f5:75:86:58:9e:88:bc:8a:c1:6d:13:81:
         50:0d:26:f0:7b:8e:b1:41:d5:d6:a9:09:19:d1:e1:d5:fd:22:
         b2:38:d9:04:9c:99:4b:d1:47:13:87:e6:4a:18:2c:5b:95:1a:
         44:ba:1a:04:15:c0:bd:0f:cb:14:39:aa:ab:f4:77:fd:e7:57:
         26:69:1f:30:05:c5:72:8d:2f:ea:7b:aa:c0:d0:7b:69:c5:76:
         0b:20:0b:22:ea:92:3b:a9:51:42:07:17:f2:27:9e:65:dc:f4:
         95:6f:d3:d8:48:4f:a9:ce:2b:6b:44:20:b7:59:69:ac:68:69:
         42:e4:1d:91:c0:c6:6d:31:3a:d7:37:2c:8e:59:f9:26:db:18:
         c7:ff:0c:39:b8:a3:4f:e6:14:4e:12:4f:f5:6c:2a:cd:52:a0:
         01:0d:ba:7e:8b:8e:73:15:6b:36:46:7e:b1:2d:31:ac:7e:68:
         7f:bf:b7:b2:7a:75:e1:87:66:34:87:3c:d4:40:9e:55:5a:3d:
         6f:3a:24:64:56:d0:9a:bf:4b:32:9e:1e:9d:ba:62:6f:90:64:
         71:39:52:52:b2:20:a3:ea:a3:81:84:ed:e6:97:f4:78:47:84:
         cf:32:f2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:43:04 2025 by rpki-client