Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e89bd92d-415c-3406-8d98-e8479178e776.roa
File:                     e89bd92d-415c-3406-8d98-e8479178e776.roa (raw, json)
Hash identifier:          UquRi6n7DcJsgNuSiGG5WciX+VDJ0xrCHgUQmaw5d8M=
Subject key identifier:   48:37:6B:8D:BB:EA:32:C7:59:78:15:D2:F7:7F:E6:84:C6:73:AF:29
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E40D0D2BBD55660498CFBC880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e89bd92d-415c-3406-8d98-e8479178e776.roa
Signing time:             Wed 15 Jun 2022 12:00:00 +0000
ROA not before:           Wed 15 Jun 2022 12:00:00 +0000
ROA not after:            Thu 21 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        136.17.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:40:d0:d2:bb:d5:56:60:49:8c:fb:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 15 12:00:00 2022 GMT
            Not After : Jul 21 04:00:00 2022 GMT
        Subject: CN=b26621b5-ba42-46e9-b8ee-bca53990f469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1e:93:be:e0:3f:ef:f9:3b:f6:0e:f8:21:53:
                    49:47:e3:88:2a:aa:a5:c2:8c:36:ee:ad:e8:77:39:
                    42:34:5e:5c:d7:53:53:c1:cb:0a:74:2b:33:18:20:
                    a1:d1:cc:a2:ad:bf:b0:63:b2:58:f7:30:4b:ac:f0:
                    9b:18:82:62:c6:a2:47:89:93:74:6a:63:ec:5a:e0:
                    f7:29:61:c1:b8:10:d8:a5:d4:68:0f:aa:9b:ae:e3:
                    cd:4b:c4:a3:b4:b9:c8:1a:0f:21:28:8f:6f:2d:26:
                    df:f8:a6:e8:93:c4:1b:43:84:17:04:57:5b:73:ab:
                    74:9d:9f:f7:eb:a8:9b:a2:28:58:8f:7d:12:d5:cf:
                    b4:11:bc:9d:03:f3:50:df:63:10:eb:3a:a7:e1:33:
                    6b:d8:b5:f7:9d:5b:14:47:cf:02:f6:cb:d3:05:ac:
                    3e:6d:ce:bd:03:e0:f5:39:22:47:6f:21:40:9a:a1:
                    d4:2c:b2:bb:35:c9:0d:57:10:6a:98:88:4d:4c:73:
                    52:40:7e:25:96:f5:0e:e0:cf:12:b3:f7:7a:9a:d2:
                    cd:85:2b:7c:8d:2a:8e:e4:dd:65:a1:c2:4f:0c:91:
                    ec:ec:67:9c:2f:aa:66:6c:12:62:4b:86:bd:9f:42:
                    7c:ca:c8:40:21:ed:3b:9a:db:1d:7f:d5:81:53:c6:
                    a9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:37:6B:8D:BB:EA:32:C7:59:78:15:D2:F7:7F:E6:84:C6:73:AF:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e89bd92d-415c-3406-8d98-e8479178e776.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.17.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:82:3d:9a:3d:1d:3a:0f:f9:b2:ae:1c:0b:4d:72:0a:51:81:
         d7:ef:17:25:0d:28:e0:af:78:9c:b9:b0:65:04:e2:bc:78:77:
         38:b2:53:eb:0c:b2:23:b0:69:34:27:9d:06:3e:fa:06:3d:a7:
         a0:64:09:12:cc:2d:b9:2c:c7:a5:67:64:4f:b9:f1:cd:a0:63:
         31:b3:9c:36:a4:31:22:c4:13:fb:b4:63:d2:35:e1:d5:96:b6:
         90:10:0f:a1:02:d8:d5:a1:5c:50:7c:88:92:79:81:c7:8f:f6:
         26:24:6d:42:6f:ba:4a:8c:c8:7b:1d:07:6e:b6:95:8a:84:f1:
         a2:49:cd:c6:2b:02:52:e2:40:3d:4b:83:c9:16:d4:54:74:ee:
         9d:20:af:8a:15:76:72:85:58:f3:a0:4a:53:ea:e3:d2:72:a1:
         e8:f1:78:37:a2:15:12:de:c3:76:ac:52:d5:ad:e6:6d:b1:62:
         c2:36:88:12:9e:59:d5:dd:be:3d:98:6b:d5:54:94:f5:12:61:
         63:14:c9:c4:4a:4a:06:d5:bb:25:6a:e3:18:16:3e:88:4b:66:
         7c:c7:d3:be:b9:50:1e:7b:71:db:a8:06:ce:39:5b:48:e9:37:
         97:11:25:b8:4a:0f:30:f0:6b:48:24:a8:28:80:62:df:53:02:
         c0:df:91:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:01 2025 by rpki-client