Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b77de2c9-39b9-3893-b756-935fbdb152c0.roa
File:                     b77de2c9-39b9-3893-b756-935fbdb152c0.roa (raw, json)
Hash identifier:          PYI42V/HmkDQTbNbk6nOkrIdhDPR6FRyqfpC6goyAgE=
Subject key identifier:   02:BD:D5:50:4D:B0:E9:FD:84:6D:8B:E9:49:D6:0A:C9:99:62:8D:03
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CE0C42D58803F5622A9033D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b77de2c9-39b9-3893-b756-935fbdb152c0.roa
Signing time:             Wed 09 Feb 2022 05:00:00 +0000
ROA not before:           Wed 09 Feb 2022 05:00:00 +0000
ROA not after:            Wed 16 Mar 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        136.2.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e0:c4:2d:58:80:3f:56:22:a9:03:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  9 05:00:00 2022 GMT
            Not After : Mar 16 04:00:00 2022 GMT
        Subject: CN=4c7bbd47-b6a7-4eb6-b574-65e96af70c03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a8:7f:72:8a:f9:49:cf:9e:72:80:29:98:79:
                    32:0f:c1:d4:f4:4f:22:6a:fb:e7:2a:ea:84:7e:4d:
                    af:11:bb:b8:62:6f:6d:b8:2f:e5:15:c6:ce:19:f5:
                    d3:3a:52:b2:83:6e:cc:18:56:af:ae:8a:cb:48:bd:
                    4f:f2:83:aa:26:7b:c2:00:32:79:14:37:39:aa:72:
                    f4:89:bc:4b:2f:8a:54:e7:1f:a6:6f:13:95:ed:36:
                    1e:52:c1:12:55:b0:c9:ab:d6:2d:39:c1:da:68:92:
                    c8:f3:93:ca:24:c4:b6:ca:7d:06:33:c5:4d:ff:2d:
                    32:2f:39:42:43:78:36:12:7e:aa:1c:df:34:8e:7f:
                    6c:e9:de:02:f7:0d:2c:70:9b:35:1a:14:8a:4d:af:
                    0b:14:4c:79:f6:2f:7d:b4:18:4c:d1:b8:e4:0b:fe:
                    ed:bc:1d:d7:d5:f7:da:dc:eb:0f:1b:38:13:30:ed:
                    10:c8:f2:c9:11:44:60:c7:66:c0:78:31:5f:79:db:
                    d0:a2:b2:36:5e:47:e8:67:6d:15:75:06:9e:36:1e:
                    a9:f1:b1:cb:bd:88:25:e4:31:85:82:bc:d1:e8:0a:
                    ff:a7:c5:70:1e:72:78:63:59:d2:45:ca:44:a2:9f:
                    dc:47:74:00:85:c0:2c:06:17:b3:ad:03:d1:00:02:
                    2c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:BD:D5:50:4D:B0:E9:FD:84:6D:8B:E9:49:D6:0A:C9:99:62:8D:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b77de2c9-39b9-3893-b756-935fbdb152c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.2.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:bf:d5:9a:32:2c:08:6a:f4:c1:cf:d4:0c:84:c6:8d:3d:1a:
         a5:4d:53:72:75:6a:41:02:85:dd:08:ae:b8:9a:7f:b1:24:16:
         b7:05:ea:41:a0:7c:48:59:8f:33:bf:5c:10:c1:5c:29:a4:cc:
         28:c5:d1:27:0d:72:94:cc:a3:19:df:14:d3:58:5e:11:7c:95:
         ea:85:92:9f:8f:41:9f:65:22:ae:30:4f:a9:92:e1:1f:bf:7a:
         38:ce:32:5f:16:17:3b:ae:7f:0d:92:e4:c3:6c:32:7b:56:5b:
         0b:3c:58:de:51:0a:46:83:8e:91:c8:e1:b4:c0:41:1d:e7:91:
         0b:9b:d9:23:42:62:28:35:4a:9a:98:d5:a0:cc:7d:d1:a3:68:
         b1:1e:44:7d:9c:b2:e0:48:d8:ec:11:d3:5b:ae:b8:7b:65:37:
         c2:44:2e:f9:cd:67:b2:ae:19:32:65:92:27:55:86:a0:68:82:
         a8:19:99:79:cb:bc:59:8a:db:59:15:5b:06:9f:29:b2:ba:b5:
         e6:63:9d:39:ad:48:21:2c:4e:ff:21:65:04:48:fa:23:d1:d9:
         dc:81:ad:76:c4:9a:0c:29:b2:c6:3e:02:e6:a0:bf:41:56:e4:
         36:b3:56:62:b5:74:32:fb:a2:45:2f:9e:a3:58:da:09:ce:86:
         d5:c6:83:07
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDzgxC1YgD9WIqkDPYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDIwOTA1MDAwMFoXDTIyMDMxNjA0MDAwMFowLzEtMCsGA1UEAxMk
NGM3YmJkNDctYjZhNy00ZWI2LWI1NzQtNjVlOTZhZjcwYzAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Kh/cor5Sc+ecoApmHkyD8HU9E8iavvnKuqE
fk2vEbu4Ym9tuC/lFcbOGfXTOlKyg27MGFavrorLSL1P8oOqJnvCADJ5FDc5qnL0
ibxLL4pU5x+mbxOV7TYeUsESVbDJq9YtOcHaaJLI85PKJMS2yn0GM8VN/y0yLzlC
Q3g2En6qHN80jn9s6d4C9w0scJs1GhSKTa8LFEx59i99tBhM0bjkC/7tvB3X1ffa
3OsPGzgTMO0QyPLJEURgx2bAeDFfedvQorI2XkfoZ20VdQaeNh6p8bHLvYgl5DGF
grzR6Ar/p8VwHnJ4Y1nSRcpEop/cR3QAhcAsBhezrQPRAAIs4QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAK91VBNsOn9hG2L6UnWCsmZYo0DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYjc3ZGUyYzktMzliOS0z
ODkzLWI3NTYtOTM1ZmJkYjE1MmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiAIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAmr/VmjIsCGr0wc/UDITGjT0apU1TcnVqQQKF3QiuuJp/sSQWtwXqQaB8
SFmPM79cEMFcKaTMKMXRJw1ylMyjGd8U01heEXyV6oWSn49Bn2UirjBPqZLhH796
OM4yXxYXO65/DZLkw2wye1ZbCzxY3lEKRoOOkcjhtMBBHeeRC5vZI0JiKDVKmpjV
oMx90aNosR5EfZyy4EjY7BHTW664e2U3wkQu+c1nsq4ZMmWSJ1WGoGiCqBmZecu8
WYrbWRVbBp8psrq15mOdOa1IISxO/yFlBEj6I9HZ3IGtdsSaDCmyxj4C5qC/QVbk
NrNWYrV0MvuiRS+eo1jaCc6G1caDBw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:19 2025 by rpki-client