Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d1fd424c-3d32-34ab-bd84-026df019f349.roa
File:                     d1fd424c-3d32-34ab-bd84-026df019f349.roa (raw, json)
Hash identifier:          jd3sRGxgzcPkk7hCoYktVMspc3864tINSDmSnXvsBYQ=
Subject key identifier:   77:BC:9F:AA:BC:F1:DA:F7:A9:3D:26:45:34:B3:FE:1B:C4:14:F1:5F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CE0B55BC32E8141437FE06BC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d1fd424c-3d32-34ab-bd84-026df019f349.roa
Signing time:             Wed 09 Feb 2022 05:00:00 +0000
ROA not before:           Wed 09 Feb 2022 05:00:00 +0000
ROA not after:            Wed 16 Mar 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        136.18.24.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e0:b5:5b:c3:2e:81:41:43:7f:e0:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  9 05:00:00 2022 GMT
            Not After : Mar 16 04:00:00 2022 GMT
        Subject: CN=ac60ea60-2802-462c-956e-c766c70942d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4e:13:fb:e7:5c:aa:11:ec:d8:12:83:ef:01:
                    80:13:b5:18:b1:ad:f2:6c:1f:20:c0:99:84:81:af:
                    0d:0c:57:db:c5:7c:4a:ce:4e:3e:9d:c1:3e:24:1d:
                    da:b5:3e:82:55:e9:2f:5d:13:ab:bd:90:19:0e:09:
                    bc:d2:25:1d:15:74:1c:2d:bb:5d:17:a6:d2:e4:30:
                    bb:f9:6f:3c:62:4a:21:93:66:20:e7:59:17:5f:dc:
                    8d:a4:59:4a:00:b1:ba:6e:c4:df:dc:ae:4d:46:2a:
                    44:e0:ea:4e:f8:a3:da:70:5f:51:73:f8:e8:b9:73:
                    58:82:1d:36:5c:dd:38:4e:fb:09:94:40:f2:db:8c:
                    b9:6b:b7:07:02:f4:ad:64:b4:d9:8c:1e:52:6a:88:
                    41:40:44:29:55:b6:88:13:ba:b7:5d:44:f7:7b:30:
                    63:33:d8:1f:64:74:35:1b:89:7d:56:90:04:12:d5:
                    8c:a1:11:b9:e5:71:c6:30:f8:be:3c:e5:aa:ba:02:
                    88:a3:75:fd:38:d3:0f:26:b8:12:ce:d0:1b:97:a7:
                    1a:94:d2:2a:9b:ff:8a:da:0e:79:dc:b2:85:2f:04:
                    23:27:ab:2d:75:f0:f2:5e:b1:ea:f0:68:7c:0b:b7:
                    e1:00:99:cd:5b:f0:e6:1c:2f:1d:70:f5:ec:cc:93:
                    e4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:BC:9F:AA:BC:F1:DA:F7:A9:3D:26:45:34:B3:FE:1B:C4:14:F1:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d1fd424c-3d32-34ab-bd84-026df019f349.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:94:1f:07:03:74:0d:db:3e:26:94:a3:81:54:b6:d1:f8:95:
         c8:71:56:96:8b:81:29:4e:77:3c:59:d4:99:19:44:d3:23:13:
         e5:7a:83:ca:34:8c:fe:dd:bf:ab:b6:4d:e4:71:a8:65:7f:00:
         00:eb:51:6d:d4:c4:9d:fe:86:e6:f0:8a:ee:a4:e6:dc:f7:7e:
         25:7a:45:70:20:30:cd:ee:2e:d4:80:a5:a9:ed:26:51:a3:af:
         95:1a:d6:be:31:c5:be:a5:df:8f:32:0f:5a:bc:03:00:5e:ca:
         4f:ca:39:82:6e:0a:ee:f9:17:e6:84:3a:cc:8b:29:93:fd:8c:
         e9:5d:16:42:d5:81:12:71:45:96:ee:a1:44:46:08:98:b5:b9:
         82:58:47:d6:ce:c6:d9:e5:ef:7c:2e:60:d6:d1:90:f5:88:c8:
         d9:9f:67:92:fe:58:f9:44:d1:bc:cd:51:74:b7:d9:06:28:22:
         47:da:fe:8c:36:04:bd:a9:63:aa:61:58:8b:95:db:ee:c2:2e:
         a1:4c:0f:98:0a:45:15:7c:27:55:b9:13:10:35:56:e2:76:1c:
         f7:65:e9:3b:f3:f1:c8:77:55:7f:fd:f3:17:9f:fc:8c:e6:a1:
         e1:99:38:7c:47:65:85:f5:26:af:d9:44:ca:65:62:ec:c1:31:
         b8:15:76:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:07:31 2025 by rpki-client