Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c84b87d4-9133-3b0d-af4f-fb8ca2759f57.roa
File:                     c84b87d4-9133-3b0d-af4f-fb8ca2759f57.roa (raw, json)
Hash identifier:          XEgt5FqstNfQ0IHPh7p2BCYzXuDTB5SiR491N2eSNy4=
Subject key identifier:   08:28:74:4F:E6:82:65:F1:C0:F8:1B:10:A6:60:F1:E4:4F:1B:63:B5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D560C4505CEC4C2E077001DC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c84b87d4-9133-3b0d-af4f-fb8ca2759f57.roa
Signing time:             Wed 23 Mar 2022 04:00:00 +0000
ROA not before:           Wed 23 Mar 2022 04:00:00 +0000
ROA not after:            Wed 27 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        136.18.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:56:0c:45:05:ce:c4:c2:e0:77:00:1d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 23 04:00:00 2022 GMT
            Not After : Apr 27 04:00:00 2022 GMT
        Subject: CN=a4892f78-a839-4d6a-82b7-befc865edd4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:70:07:32:f0:2a:ed:8e:84:2f:b8:de:ea:64:
                    a9:81:56:22:15:d3:37:36:18:2d:c0:ec:c3:9a:c1:
                    01:5c:d7:6f:23:85:bf:f3:f5:b2:97:38:9f:ce:b6:
                    6d:a5:23:e5:8c:52:33:47:3d:6b:4d:a5:a6:7d:35:
                    07:82:2a:ca:b3:fa:99:91:11:db:83:42:10:b7:93:
                    d7:e1:a1:77:18:55:f3:6f:d3:a3:3b:cc:d0:12:98:
                    6d:1d:6f:f1:2f:8f:e0:f7:16:d7:8a:9b:52:41:82:
                    f5:a6:c0:16:c6:85:2d:bb:3d:62:11:13:a0:b9:2e:
                    33:ad:ca:6f:9a:8c:eb:a1:fc:9a:f4:01:c7:2f:c3:
                    01:cf:fd:cc:5c:76:c2:64:ca:80:e2:bb:73:a1:45:
                    59:ad:ed:2f:03:62:a5:a8:39:19:11:45:f7:cd:37:
                    5b:b3:8c:4a:2f:aa:5c:22:01:4a:d2:8d:5c:e5:55:
                    fb:76:fc:aa:a0:4c:66:c4:63:fc:47:9c:5f:20:7c:
                    98:0a:e6:2d:c1:c2:f3:df:20:f4:20:2f:58:f9:af:
                    6f:e3:5f:30:ce:e5:40:b2:73:9b:3b:d4:34:a6:6f:
                    fb:75:7f:8c:54:78:cd:8b:2b:70:ab:89:c0:36:9d:
                    10:b5:a4:6d:4a:ca:eb:35:83:70:cd:83:f6:c9:80:
                    d5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:28:74:4F:E6:82:65:F1:C0:F8:1B:10:A6:60:F1:E4:4F:1B:63:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c84b87d4-9133-3b0d-af4f-fb8ca2759f57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:e6:64:53:43:e7:58:6a:0e:03:2c:1f:67:fb:df:02:fd:aa:
         c6:f0:95:71:d7:07:94:be:10:d8:a6:2a:46:b1:bf:f4:fb:44:
         6b:bc:ff:bf:4f:7f:fb:00:9e:b0:ac:1e:f9:b1:ea:c0:d0:1f:
         f3:69:07:fe:30:6f:7b:96:13:40:d2:f4:12:24:10:53:bd:a9:
         cf:9d:ec:03:35:70:50:19:86:77:95:39:e8:02:da:a5:aa:af:
         42:8a:bb:81:20:82:a3:09:21:8a:dc:d7:a8:b1:18:8e:dd:9e:
         d0:ae:8b:25:34:75:5b:c1:67:76:48:d7:ca:c6:b8:51:cb:a5:
         15:68:1e:f5:7b:e2:b4:8d:16:1b:9b:0f:60:a8:3c:dd:09:1e:
         5a:c9:25:c4:f8:85:1e:d7:a8:bb:71:11:88:2c:29:f1:a9:1b:
         b1:17:00:b7:0f:48:33:28:85:14:0b:cf:d5:a7:99:53:22:3d:
         2d:b5:3b:f4:ac:a2:69:f0:f3:b0:1d:4a:e9:5d:a6:41:b2:78:
         ad:a5:b4:87:7d:0d:b7:19:df:f7:2c:f0:e1:26:90:25:35:b5:
         0f:a4:0a:eb:d7:03:e1:cf:45:c6:6f:4f:f4:5e:d6:1a:c6:fb:
         98:ba:0a:0a:1b:9d:1f:c0:1e:f2:ea:23:d1:bb:23:9a:a8:9f:
         7f:2a:6f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:08 2025 by rpki-client