Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dde6b076-9659-3a08-a6c2-2e3d87282841.roa
File:                     dde6b076-9659-3a08-a6c2-2e3d87282841.roa (raw, json)
Hash identifier:          t3lTqf4tP9Pf/HLZpfzMZqh/Bm7xgzjudxK7cMBMLks=
Subject key identifier:   57:6E:87:37:D4:34:C5:44:EC:C7:8D:2F:C8:D5:2F:7C:65:0B:6D:D3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DCB6B01A1E15C2FE4C0527280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dde6b076-9659-3a08-a6c2-2e3d87282841.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Thu 09 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        136.18.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cb:6b:01:a1:e1:5c:2f:e4:c0:52:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : Jun  9 04:00:00 2022 GMT
        Subject: CN=7bc7ecbc-ad3a-4956-a101-0859aab27ee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fb:4b:3d:99:ed:02:a8:2a:d1:49:7b:cb:90:
                    f9:4a:39:36:95:c9:b0:b3:6e:68:e4:ff:4c:86:29:
                    02:5f:c7:bc:a2:ee:bb:b1:c9:a8:9e:a5:c2:66:8d:
                    c1:1c:08:48:f9:9f:0d:9c:15:f5:32:cf:4d:22:ac:
                    46:c0:e4:38:ec:cf:32:af:3e:4d:d6:a1:76:8b:f8:
                    c7:b1:2b:62:95:68:00:3f:fb:03:c3:27:39:90:4b:
                    a3:c8:6a:b1:6a:14:13:4a:7b:d9:20:3f:c8:8f:01:
                    e7:0a:9e:5b:5a:21:59:c5:2a:b9:47:c2:d0:c6:0b:
                    f2:37:5b:bb:af:6d:2e:1f:9b:0c:d0:5f:ce:c7:a6:
                    ae:c0:68:12:74:12:2b:fe:e1:33:61:fb:86:06:6a:
                    36:e9:c5:79:a0:09:6b:59:39:2d:5b:87:9d:9a:fc:
                    c2:44:2e:eb:a2:87:7e:03:e1:fd:7e:81:f0:19:ed:
                    8b:e7:16:b2:77:13:b5:76:09:e1:d1:0b:f9:65:de:
                    8c:b0:f4:cd:fd:1b:5a:4e:5c:73:e2:d7:78:d7:6d:
                    78:75:2f:4a:df:a1:01:d1:de:a9:05:89:ca:e8:57:
                    3e:16:56:29:90:65:26:5b:c2:18:47:71:00:06:3f:
                    f1:aa:4f:a5:f5:57:8f:8f:73:ed:f3:01:00:41:62:
                    a3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6E:87:37:D4:34:C5:44:EC:C7:8D:2F:C8:D5:2F:7C:65:0B:6D:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dde6b076-9659-3a08-a6c2-2e3d87282841.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:18:ae:23:a2:ea:08:6a:19:95:57:4a:37:ac:b3:a8:e3:86:
         f4:58:a7:22:b1:31:6c:ef:e5:95:ca:db:71:4d:d0:69:5a:32:
         4c:f6:74:f9:7c:ee:35:c3:8a:09:fe:fa:ba:b3:ea:60:dc:16:
         6a:02:19:cc:6c:e1:99:23:a6:5d:13:d8:2f:69:cd:64:19:58:
         f7:60:dc:c4:b6:7e:6d:60:a6:eb:17:10:ca:cf:62:0c:8c:56:
         e6:ec:82:22:b5:bb:ee:bf:c5:8c:a3:ae:a6:0e:5a:08:5e:f1:
         3b:ad:0e:bf:86:ba:6b:c1:e1:06:4a:9a:bc:f2:00:e8:66:10:
         59:b7:a8:34:c6:78:4f:61:9e:eb:ef:de:44:14:f1:bb:6a:a3:
         a1:62:5c:94:11:f3:b5:c6:e6:d9:d5:7f:10:f5:6d:c2:5f:0f:
         8e:be:46:1e:f6:6b:e2:06:48:4e:ed:42:5b:b3:2e:09:42:13:
         f0:4c:0f:9a:0e:bc:6c:57:aa:a0:80:d1:e5:b9:5e:37:5f:9d:
         33:7f:8c:9c:8e:4f:8c:f8:6b:bb:92:22:34:cc:ef:1a:0b:d2:
         f4:6c:11:47:e6:91:9b:2a:2b:48:e6:65:f0:17:b5:09:71:0f:
         6d:c4:43:30:3f:59:36:c4:43:c8:2a:63:af:db:eb:ef:80:cb:
         67:72:ae:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:45 2025 by rpki-client