Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c022eb17-d643-308b-9335-7378072b4dcf.roa
File:                     c022eb17-d643-308b-9335-7378072b4dcf.roa (raw, json)
Hash identifier:          YlwmpeEe7fquF2JrdX2rVYkD3BxyWlChtnjubl+xUZQ=
Subject key identifier:   FD:09:BD:BA:3D:0B:3B:D4:FC:C7:87:27:75:1F:FA:4C:7F:1D:43:0A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DF28F66EFDF030733D0219100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c022eb17-d643-308b-9335-7378072b4dcf.roa
Signing time:             Wed 18 May 2022 12:00:00 +0000
ROA not before:           Wed 18 May 2022 12:00:00 +0000
ROA not after:            Thu 23 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        136.2.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f2:8f:66:ef:df:03:07:33:d0:21:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 18 12:00:00 2022 GMT
            Not After : Jun 23 04:00:00 2022 GMT
        Subject: CN=1a0811ed-5977-421b-a085-caccc62fc017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6c:af:29:a4:c8:1c:24:75:78:d3:e1:75:c9:
                    79:ac:50:08:57:34:99:21:5d:1b:e8:e5:53:16:a4:
                    b5:73:62:45:19:51:95:66:fe:4f:4a:63:d1:23:01:
                    06:fe:11:17:99:d6:e2:4a:42:6c:e6:23:22:29:62:
                    e3:99:40:56:d1:a4:18:95:9f:50:44:bc:37:15:5b:
                    67:11:e5:c8:ad:e3:e7:94:ad:06:59:e6:85:40:55:
                    ab:ad:a2:e9:c3:5b:78:9f:b1:39:45:82:97:9d:c0:
                    33:a1:94:39:86:54:eb:31:dc:7e:a7:66:68:2d:e3:
                    72:cc:9b:14:0a:df:a3:a5:76:a5:a7:ca:7d:eb:98:
                    ce:0c:aa:db:9a:9d:b5:92:ca:d1:83:5f:1d:87:38:
                    b8:a9:38:20:9d:e7:01:d3:88:3e:3c:23:0e:fb:d5:
                    b5:1b:e9:b6:95:f2:42:10:0c:19:34:4c:3d:04:08:
                    a8:22:8c:1d:39:2d:ba:f7:9c:85:25:9b:2a:1f:ae:
                    3a:c7:38:cc:ab:c0:31:ea:99:bf:a3:ef:3a:dd:a1:
                    74:e4:5f:10:53:c4:bf:ce:2e:ef:04:ba:ec:f6:d6:
                    40:a1:b2:0c:e7:57:be:36:e3:e5:5e:af:50:3f:cd:
                    9e:53:7f:70:83:63:20:d7:cf:df:ab:3e:eb:a2:79:
                    9a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:09:BD:BA:3D:0B:3B:D4:FC:C7:87:27:75:1F:FA:4C:7F:1D:43:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c022eb17-d643-308b-9335-7378072b4dcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.2.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:c7:c5:25:b8:66:16:dc:1a:2f:10:6d:fa:05:66:86:4c:61:
         c0:2d:22:79:c0:9d:e6:a0:f0:bd:fa:5a:8a:2a:24:42:cf:bd:
         5d:05:a7:fb:09:4b:0a:3d:46:99:09:b4:06:95:e6:a9:69:4e:
         51:59:7a:9a:4f:37:f7:5a:ba:51:d4:24:55:78:8d:bb:da:17:
         fc:cc:ed:d0:d2:16:db:bd:2d:03:81:ab:18:38:9d:3b:02:99:
         c7:2f:d0:80:3a:95:06:52:51:9a:5d:db:21:60:2e:3a:b4:9c:
         4a:1f:33:32:7b:15:8a:1f:5d:6c:dc:14:e4:a7:a1:e0:32:dd:
         e4:e8:b9:b6:49:be:85:b4:8e:22:02:ab:ae:18:49:be:4b:2a:
         41:1c:e8:2f:f2:9e:ab:b5:f0:f0:b0:ca:74:21:30:c1:44:7f:
         e3:ce:32:c5:62:73:88:8d:1c:4b:82:76:62:70:a2:35:84:1a:
         e7:ae:b9:28:bb:98:95:98:ea:c9:8c:fb:6a:54:4f:e7:5b:8e:
         52:0e:1f:de:33:e6:e1:91:ba:f1:98:a8:ea:5e:78:c1:ae:52:
         98:89:d1:bd:35:ad:e2:9c:9e:b5:03:ee:ce:70:57:1b:c0:ce:
         5e:77:ef:b2:d9:08:1a:31:41:e4:34:67:79:ae:82:12:21:a0:
         b9:37:87:9e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3yj2bv3wMHM9AhkQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDUxODEyMDAwMFoXDTIyMDYyMzA0MDAwMFowLzEtMCsGA1UEAxMk
MWEwODExZWQtNTk3Ny00MjFiLWEwODUtY2FjY2M2MmZjMDE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmyvKaTIHCR1eNPhdcl5rFAIVzSZIV0b6OVT
FqS1c2JFGVGVZv5PSmPRIwEG/hEXmdbiSkJs5iMiKWLjmUBW0aQYlZ9QRLw3FVtn
EeXIrePnlK0GWeaFQFWrraLpw1t4n7E5RYKXncAzoZQ5hlTrMdx+p2ZoLeNyzJsU
Ct+jpXalp8p965jODKrbmp21ksrRg18dhzi4qTggnecB04g+PCMO+9W1G+m2lfJC
EAwZNEw9BAioIowdOS2695yFJZsqH646xzjMq8Ax6pm/o+863aF05F8QU8S/zi7v
BLrs9tZAobIM51e+NuPlXq9QP82eU39wg2Mg18/fqz7ronmaywIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFP0Jvbo9CzvU/MeHJ3Uf+kx/HUMKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYzAyMmViMTctZDY0My0z
MDhiLTkzMzUtNzM3ODA3MmI0ZGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiAIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAsMfFJbhmFtwaLxBt+gVmhkxhwC0iecCd5qDwvfpaiiokQs+9XQWn+wlL
Cj1GmQm0BpXmqWlOUVl6mk8391q6UdQkVXiNu9oX/Mzt0NIW270tA4GrGDidOwKZ
xy/QgDqVBlJRml3bIWAuOrScSh8zMnsVih9dbNwU5Keh4DLd5Oi5tkm+hbSOIgKr
rhhJvksqQRzoL/Keq7Xw8LDKdCEwwUR/484yxWJziI0cS4J2YnCiNYQa5665KLuY
lZjqyYz7alRP51uOUg4f3jPm4ZG68Zio6l54wa5SmInRvTWt4pyetQPuznBXG8DO
XnfvstkIGjFB5DRnea6CEiGguTeHng==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:14 2025 by rpki-client