Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b5775d6a-d86e-343a-beb9-d88fc118a152.roa
File:                     b5775d6a-d86e-343a-beb9-d88fc118a152.roa (raw, json)
Hash identifier:          draS8tW/QTLIV6pcdx9XUGi/GAF060yNhDKJ3rPiUiA=
Subject key identifier:   B4:69:53:28:FD:14:E6:F2:F7:73:5C:61:1A:7C:07:A4:F9:1B:06:D6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FC942148085E4F45ADAAB8400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b5775d6a-d86e-343a-beb9-d88fc118a152.roa
Signing time:             Wed 02 Nov 2022 12:00:00 +0000
ROA not before:           Wed 02 Nov 2022 12:00:00 +0000
ROA not after:            Thu 08 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        136.18.32.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c9:42:14:80:85:e4:f4:5a:da:ab:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  2 12:00:00 2022 GMT
            Not After : Dec  8 05:00:00 2022 GMT
        Subject: CN=9bad898d-c6b1-46b8-aa9d-c1b87717ce08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f0:13:6b:58:09:71:1c:8e:bd:a7:f2:e8:44:
                    dd:74:48:fa:33:9f:ce:1f:b8:bf:02:b3:46:ca:46:
                    d5:d3:7c:d8:bd:09:c7:5d:08:b5:ea:d7:78:e9:e0:
                    ee:fc:dc:26:c4:eb:55:58:87:a8:4b:93:bb:b6:41:
                    49:7a:3f:0b:8f:24:d7:e5:aa:b4:85:3a:af:78:a4:
                    07:99:21:fa:b4:52:9b:74:d8:65:73:c6:46:20:de:
                    ce:cd:6b:4c:11:16:b4:62:1b:00:d8:19:e6:d3:dd:
                    e4:84:97:69:f6:77:87:a6:bb:8d:3d:02:9d:5f:86:
                    b5:57:da:05:1f:eb:1c:05:b3:24:06:94:26:e5:a8:
                    2c:ef:b2:fb:5b:e8:63:d9:a1:88:12:fe:d1:e8:35:
                    f3:ef:e5:e4:16:b2:31:56:fb:cf:a4:a0:f2:67:1a:
                    08:b3:38:e2:81:a5:ac:91:88:f6:d7:1d:6c:22:f2:
                    33:c4:4e:97:b8:d9:98:ca:32:57:0b:e3:57:bb:68:
                    67:71:04:c2:3f:07:2f:87:d6:06:14:69:e7:28:ef:
                    c6:ce:ef:32:e2:f2:af:0c:9e:4f:7b:f6:af:8e:ba:
                    03:cf:fe:8b:42:1e:59:84:28:2b:38:8c:02:ec:91:
                    27:52:7b:f1:99:9c:e1:a9:f2:0b:29:97:30:49:ed:
                    0e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:69:53:28:FD:14:E6:F2:F7:73:5C:61:1A:7C:07:A4:F9:1B:06:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b5775d6a-d86e-343a-beb9-d88fc118a152.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:d5:0f:06:f2:15:26:18:3a:4b:e0:c7:0b:00:96:a6:92:4d:
         52:1a:7a:00:0c:86:92:48:b8:64:6d:a9:8c:35:ca:b9:ca:da:
         b1:37:27:29:ea:df:4e:56:6c:63:e3:9b:a2:45:da:1e:fd:2b:
         08:b9:c0:fe:62:db:54:e9:2c:e4:16:55:86:25:dd:4c:e6:cf:
         9e:c7:34:c0:9f:38:6b:af:d1:f6:d7:47:7e:bc:46:2f:e7:dd:
         4a:24:97:68:7d:9f:1e:d0:99:0f:74:8f:61:17:67:80:cb:53:
         eb:cd:12:c5:b5:18:68:65:f5:45:6c:a5:27:b3:d1:ce:b7:04:
         be:8a:94:90:40:03:56:fa:76:dc:24:24:96:91:00:c9:a9:85:
         01:20:24:c9:90:31:9b:65:00:b1:4f:df:69:fd:c0:9f:4c:83:
         dc:83:33:3f:94:ce:37:57:36:83:84:10:21:e1:14:7f:a8:de:
         88:8d:be:e3:92:2c:71:ea:0e:a7:44:7b:26:70:6c:e6:18:62:
         18:84:aa:9f:a5:f1:26:a4:5c:00:31:75:32:fe:9b:24:fa:dd:
         ef:3e:a2:21:c7:c2:f2:86:95:c9:a0:e5:ee:ba:b7:2c:27:dc:
         d3:6d:e2:34:cf:48:4c:5b:1d:d0:7a:1f:9e:c8:a7:f2:a6:a0:
         ae:6e:50:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:35 2025 by rpki-client