Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cd28e5b6-0d88-301c-9aff-f9ab7273a4f8.roa
File:                     cd28e5b6-0d88-301c-9aff-f9ab7273a4f8.roa (raw, json)
Hash identifier:          dGy7VKVruf4R4gjHGOENuv2LFmSNrwjXoyF9tHprcpw=
Subject key identifier:   A2:82:E9:FE:29:C5:6B:7A:81:01:20:68:E2:9F:FA:D8:64:8F:99:25
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C6B74647E2003AC8769FFEF00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cd28e5b6-0d88-301c-9aff-f9ab7273a4f8.roa
Signing time:             Wed 29 Dec 2021 05:00:00 +0000
ROA not before:           Wed 29 Dec 2021 05:00:00 +0000
ROA not after:            Wed 02 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        136.17.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6b:74:64:7e:20:03:ac:87:69:ff:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 29 05:00:00 2021 GMT
            Not After : Feb  2 05:00:00 2022 GMT
        Subject: CN=536ab8b0-0be3-4942-b350-15aacc134fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8e:94:b7:8a:97:aa:a0:ab:19:24:3c:08:09:
                    12:68:3d:30:34:00:4c:31:a2:21:a8:16:71:75:07:
                    40:99:5c:7a:82:fb:f4:a7:be:a2:2a:03:98:01:82:
                    34:38:70:54:b7:33:98:4e:c8:53:86:61:0c:39:2b:
                    c4:53:8a:ea:10:97:ba:92:ab:1a:4a:a2:87:c5:f7:
                    2b:4d:a8:4f:a6:40:ad:de:92:f1:05:a6:91:26:f7:
                    ee:71:c0:e8:2a:4a:45:3d:4a:b5:39:4a:70:23:17:
                    88:41:13:3a:66:b0:53:70:18:e4:57:f2:8e:43:1f:
                    0c:d2:2b:63:fb:aa:71:db:53:1c:18:18:f4:f4:5d:
                    b2:1a:96:60:f6:c3:b8:8b:4a:25:58:c8:fe:81:69:
                    0e:e6:ec:47:ec:71:fe:ed:34:42:84:e5:dc:43:51:
                    eb:c4:0b:d2:c8:64:a8:67:cc:0b:8c:79:64:d8:2c:
                    ba:3e:4b:6c:09:78:7a:5c:36:4b:d9:6a:96:24:4f:
                    db:40:51:65:44:24:c4:1c:c1:87:49:75:11:53:47:
                    79:45:52:42:e9:b0:aa:ae:22:90:36:0a:8d:2a:eb:
                    65:39:d1:25:39:ed:be:7c:c1:6e:0f:82:10:8d:55:
                    5f:96:6d:7a:72:4f:2c:ac:26:fb:62:dd:cf:1d:a8:
                    8f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:82:E9:FE:29:C5:6B:7A:81:01:20:68:E2:9F:FA:D8:64:8F:99:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cd28e5b6-0d88-301c-9aff-f9ab7273a4f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.17.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:11:f7:df:cf:12:f3:ba:f8:0f:99:c9:e2:c9:46:22:70:37:
         a3:51:c2:2e:22:e8:54:5a:2e:8f:40:54:a0:e2:ee:b6:11:73:
         99:1e:7f:b8:2e:aa:b8:26:2c:9c:7c:57:46:51:cd:44:c8:ed:
         d3:88:23:6f:1e:2d:3a:5f:99:81:76:30:28:64:24:8e:6e:4d:
         b3:d3:d1:ae:b9:14:35:14:79:17:64:59:98:3b:2f:5b:45:d3:
         12:c5:02:2d:ad:44:8d:dc:fd:e7:55:3c:b5:06:42:c9:00:b0:
         20:ca:56:01:15:d4:dd:85:79:7a:65:a9:e7:76:e7:ec:cb:45:
         3f:0c:2f:12:c7:68:ed:82:73:fb:40:dd:58:74:04:de:6c:80:
         a5:8b:a5:42:e6:b1:4f:ce:5d:17:36:96:7c:f2:bf:0e:0f:b3:
         7f:75:3e:ca:29:45:fa:b0:9f:da:ef:0d:59:e3:17:12:25:e6:
         3e:ef:4b:e7:47:00:11:4d:47:6f:de:a6:74:ce:84:03:c4:c0:
         43:87:ce:9d:eb:1d:62:cb:e2:56:d4:4c:e6:0b:46:74:02:f8:
         92:d3:6e:18:da:34:c4:08:4a:9b:ad:52:3d:e7:cc:e9:bd:d4:
         17:6c:c9:fd:de:62:ac:63:5e:b8:20:16:78:e9:2f:8c:65:1d:
         3c:6d:8f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:55:16 2025 by rpki-client