Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf453466-0a8c-3b5a-a247-4ec5a95b1d53.roa
File:                     cf453466-0a8c-3b5a-a247-4ec5a95b1d53.roa (raw, json)
Hash identifier:          pjINPF1ZdjBShT0gh/BNiDy7HBnCvZHdFVoan1bhuUI=
Subject key identifier:   78:84:62:8D:4D:24:E7:26:59:13:69:E8:5D:C3:08:D4:7B:69:A0:2A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F5A2B998FAD7DD78CE5808700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf453466-0a8c-3b5a-a247-4ec5a95b1d53.roa
Signing time:             Fri 23 Sep 2022 12:00:00 +0000
ROA not before:           Fri 23 Sep 2022 12:00:00 +0000
ROA not after:            Sat 29 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        108.136.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:5a:2b:99:8f:ad:7d:d7:8c:e5:80:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 23 12:00:00 2022 GMT
            Not After : Oct 29 04:00:00 2022 GMT
        Subject: CN=95cb7fd8-48ea-4133-b3e6-e10af9eb12fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0b:4a:91:a8:85:19:99:55:4e:59:d3:14:9a:
                    db:68:d6:f4:9b:97:05:f1:48:7a:65:4a:68:85:84:
                    2d:01:3b:5a:7f:2c:eb:7a:5e:68:46:1b:61:35:14:
                    5f:72:03:84:88:6a:bf:b1:42:85:6f:60:d1:a7:61:
                    fd:d0:3a:39:62:e0:b7:7c:76:12:10:a1:1c:fe:5b:
                    c0:d8:4e:fb:e5:a1:5a:a2:83:41:4f:5a:e1:97:25:
                    f6:1b:c2:01:bd:76:13:19:b1:e9:73:4a:34:82:4f:
                    35:f0:00:6a:09:25:57:3c:ae:d6:00:fb:61:65:01:
                    6d:c5:48:b8:4c:55:24:de:6b:0d:b7:ee:48:a0:21:
                    46:c4:f9:59:55:14:2f:df:57:e8:b1:07:67:1e:23:
                    e9:a9:35:5e:cd:d3:b5:27:bc:6c:cb:a8:8d:a7:0b:
                    ee:11:8e:bc:4e:01:f0:0c:ed:33:91:9e:f9:88:28:
                    92:3b:6c:9b:4d:cf:26:0d:67:ed:6e:8b:2b:fd:9b:
                    14:5f:3f:64:85:88:f3:1c:97:b7:9c:f4:32:4a:0d:
                    f5:b6:4d:bb:c8:63:be:0e:dd:72:c3:2a:5c:43:d4:
                    59:a6:6e:8d:b1:2c:a4:f2:89:50:b6:c8:a3:2f:de:
                    5c:84:3f:95:d1:2c:d8:68:9f:95:e5:7c:fd:e3:01:
                    db:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:84:62:8D:4D:24:E7:26:59:13:69:E8:5D:C3:08:D4:7B:69:A0:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf453466-0a8c-3b5a-a247-4ec5a95b1d53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.136.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:89:52:95:ec:8f:83:db:cb:9d:1c:ef:cb:69:05:18:7b:83:
         b3:4b:2e:63:00:c6:9c:ee:63:e4:7f:bc:85:43:59:b5:b1:2b:
         97:b8:f9:57:19:cd:aa:d4:bb:fe:22:b6:4d:ca:99:22:a8:77:
         98:4f:fa:98:f7:6b:50:5b:46:6f:c8:31:04:14:34:ed:0d:a2:
         f3:97:c2:8b:78:60:6f:be:da:3e:4e:c3:d1:80:a5:4e:76:60:
         c1:ec:94:31:a3:15:ed:d0:14:29:5f:7a:7d:6f:9e:39:7e:e2:
         17:aa:d2:29:19:38:5b:e2:56:88:c3:10:ab:63:d0:f0:74:26:
         73:5c:d4:fc:5f:c7:25:a1:7d:52:c9:92:14:0e:ec:72:77:25:
         57:8d:6a:99:bf:79:d2:8a:2a:e8:93:70:58:5d:6b:9b:ba:54:
         ff:6a:bf:da:dc:36:ab:cf:55:51:06:93:7d:64:fd:b4:f5:c0:
         76:7d:b8:55:51:9a:ee:fa:7e:07:02:2d:03:d5:95:f5:ca:91:
         2e:b8:b1:7f:cb:9e:15:9f:da:59:d8:e0:af:89:41:e5:d8:37:
         c0:38:5b:2d:da:07:3a:a6:e1:dd:48:09:3c:5c:d0:d4:32:4f:
         2e:ea:60:75:3e:fe:80:6a:c7:19:29:f0:7c:61:0b:b6:2a:4f:
         7e:0b:c2:4b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD9aK5mPrX3XjOWAhwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDkyMzEyMDAwMFoXDTIyMTAyOTA0MDAwMFowLzEtMCsGA1UEAxMk
OTVjYjdmZDgtNDhlYS00MTMzLWIzZTYtZTEwYWY5ZWIxMmZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAtKkaiFGZlVTlnTFJrbaNb0m5cF8Uh6ZUpo
hYQtATtafyzrel5oRhthNRRfcgOEiGq/sUKFb2DRp2H90Do5YuC3fHYSEKEc/lvA
2E775aFaooNBT1rhlyX2G8IBvXYTGbHpc0o0gk818ABqCSVXPK7WAPthZQFtxUi4
TFUk3msNt+5IoCFGxPlZVRQv31fosQdnHiPpqTVezdO1J7xsy6iNpwvuEY68TgHw
DO0zkZ75iCiSO2ybTc8mDWftbosr/ZsUXz9khYjzHJe3nPQySg31tk27yGO+Dt1y
wypcQ9RZpm6NsSyk8olQtsijL95chD+V0SzYaJ+V5Xz94wHbKwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHiEYo1NJOcmWRNp6F3DCNR7aaAqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvY2Y0NTM0NjYtMGE4Yy0z
YjVhLWEyNDctNGVjNWE5NWIxZDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCbIgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAf4lSleyPg9vLnRzvy2kFGHuDs0suYwDGnO5j5H+8hUNZtbErl7j5VxnN
qtS7/iK2TcqZIqh3mE/6mPdrUFtGb8gxBBQ07Q2i85fCi3hgb77aPk7D0YClTnZg
weyUMaMV7dAUKV96fW+eOX7iF6rSKRk4W+JWiMMQq2PQ8HQmc1zU/F/HJaF9UsmS
FA7scnclV41qmb950ooq6JNwWF1rm7pU/2q/2tw2q89VUQaTfWT9tPXAdn24VVGa
7vp+BwItA9WV9cqRLrixf8ueFZ/aWdjgr4lB5dg3wDhbLdoHOqbh3UgJPFzQ1DJP
LupgdT7+gGrHGSnwfGELtipPfgvCSw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:11:51 2025 by rpki-client