Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dedef0bd-5c83-372a-ad66-dafa639b51e4.roa
File:                     dedef0bd-5c83-372a-ad66-dafa639b51e4.roa (raw, json)
Hash identifier:          Q6OlHyTAgt1mIrPKwIzI8X8xkjI3imvcdFQRULdQt4Q=
Subject key identifier:   5A:93:FE:53:2F:BA:98:43:A4:59:AC:15:D6:99:78:5D:5E:B3:70:27
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EB5FB0923505C11FF67040300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dedef0bd-5c83-372a-ad66-dafa639b51e4.roa
Signing time:             Wed 27 Jul 2022 12:00:00 +0000
ROA not before:           Wed 27 Jul 2022 12:00:00 +0000
ROA not after:            Thu 01 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        136.18.20.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b5:fb:09:23:50:5c:11:ff:67:04:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 27 12:00:00 2022 GMT
            Not After : Sep  1 04:00:00 2022 GMT
        Subject: CN=a2c750fd-7033-4af8-ab44-543d4e47ee38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c5:64:d2:46:47:d3:25:ee:c0:40:22:2a:48:
                    19:2f:6d:d3:47:6c:1d:aa:69:c1:3c:cc:86:fe:fd:
                    f4:ed:3a:c7:88:8e:2d:30:d3:6d:28:23:40:3a:c7:
                    5b:d6:f6:73:d0:e2:9a:a9:35:50:d3:58:96:ec:90:
                    36:f7:b3:e8:2d:34:c7:07:1c:b4:f0:04:51:1c:5c:
                    3d:98:74:e2:aa:23:c9:85:f2:a3:a4:c1:8b:e6:6f:
                    26:1e:f7:8f:cd:d4:5b:6d:75:f3:f1:47:38:75:7c:
                    b2:b1:91:2a:f1:f0:09:6b:d1:24:16:95:c0:56:a1:
                    0b:41:39:f2:06:1b:23:75:4f:a6:4a:24:53:ac:6b:
                    ff:e8:ee:5b:a4:80:12:e4:94:23:f5:30:2c:93:58:
                    86:f2:c1:98:48:a6:e3:c8:25:f0:d0:24:3a:eb:f6:
                    86:cf:38:18:e5:1d:02:70:c3:25:52:6b:71:69:bb:
                    6f:84:54:9b:47:59:bf:15:18:e6:b7:1e:d8:76:d4:
                    53:ff:6e:f2:43:ec:7a:53:50:6b:66:e8:a9:4b:3e:
                    07:a5:e1:ca:7b:6a:c1:da:c2:11:76:05:39:1e:83:
                    5c:c5:f9:99:4b:37:25:68:50:02:2d:bb:46:a7:21:
                    08:56:10:af:c4:03:a7:9d:13:4a:67:93:4d:93:3f:
                    98:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:93:FE:53:2F:BA:98:43:A4:59:AC:15:D6:99:78:5D:5E:B3:70:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dedef0bd-5c83-372a-ad66-dafa639b51e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:20:39:95:6b:53:6d:92:60:80:e0:72:4b:65:72:05:44:95:
         d4:67:e6:68:73:24:d2:a8:9c:dc:26:3a:3f:96:3e:73:b2:68:
         8a:6b:84:17:f7:b5:82:8e:7b:78:f5:ae:43:0d:72:bb:3e:c9:
         bc:52:26:07:b3:1e:dc:5b:e4:02:01:7b:08:89:9a:0e:dd:39:
         36:ed:2e:a9:18:ba:95:86:27:6b:af:73:b8:fe:ac:d6:c0:8f:
         99:36:38:28:be:ec:f1:39:b6:08:f9:58:e3:57:65:c2:b6:a7:
         11:ff:2c:1d:4d:ac:c2:f4:d5:25:3c:58:89:12:f2:20:ae:60:
         4f:e3:2e:00:85:28:18:8d:88:45:66:18:2e:ae:80:6e:41:5e:
         0d:9d:24:18:7b:61:b5:0a:cd:2c:f6:4e:3d:ae:81:b8:4a:b7:
         3b:d6:12:36:2b:e8:74:e6:b3:82:9c:1c:2f:b9:d2:be:35:69:
         ce:1a:93:b2:65:15:ad:e0:52:88:bc:db:31:ca:ef:e7:e9:9d:
         4d:cc:95:ec:af:5b:1a:4b:56:10:ae:57:65:5d:2a:08:52:05:
         4a:03:7b:dd:cf:f6:48:30:10:4b:60:3b:bc:97:ca:07:b6:1d:
         74:8e:f3:0e:2e:81:a2:9d:0c:cd:e1:5d:c0:83:85:27:90:93:
         aa:72:97:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:38:58 2025 by rpki-client