Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/edd5d206-d727-3cd0-b81f-85681bee4b39.roa
File:                     edd5d206-d727-3cd0-b81f-85681bee4b39.roa (raw, json)
Hash identifier:          OQSYYWb1GizQa0yO7Ka0L/YTxbWqRvnj1e7tJ4aOejw=
Subject key identifier:   DB:77:EA:A3:AA:64:3B:C6:EA:46:79:2C:AD:2B:EF:96:2B:4F:55:C9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858403D769A8606FD8730BA696E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/edd5d206-d727-3cd0-b81f-85681bee4b39.roa
Signing time:             Wed 14 Dec 2022 12:00:00 +0000
ROA not before:           Wed 14 Dec 2022 12:00:00 +0000
ROA not after:            Thu 19 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        136.8.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3d:76:9a:86:06:fd:87:30:ba:69:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 14 12:00:00 2022 GMT
            Not After : Jan 19 05:00:00 2023 GMT
        Subject: CN=dd202c3b-2633-4b54-b911-1d66ad8a5508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0c:4a:18:9d:df:9e:90:c3:fa:41:4a:2d:ef:
                    f1:f2:69:20:82:04:74:bc:a6:e7:7c:85:27:cb:75:
                    1c:fb:40:bb:9a:19:e3:4d:11:61:42:4a:80:d7:7a:
                    61:31:c7:9b:7c:30:51:3e:58:23:37:78:0e:b1:4e:
                    a4:b5:6e:fb:e0:70:04:31:82:34:ce:fe:ae:a7:2d:
                    a9:94:3d:d4:09:57:f9:04:82:94:f3:d9:ec:12:99:
                    19:98:a9:db:4a:10:7f:96:5d:58:2a:d8:fb:61:6f:
                    20:8f:79:98:e8:a0:07:fb:3f:ac:e5:4e:13:b6:1d:
                    17:ef:37:9b:14:9e:f3:ed:95:f8:57:8f:e6:a4:b6:
                    bb:c0:93:6b:e1:f0:52:86:25:dc:a8:34:4e:9b:e8:
                    22:eb:51:b3:3e:94:7d:64:2b:27:f9:71:55:28:59:
                    8f:01:7b:97:86:70:d0:00:4b:fe:ce:d4:c9:12:08:
                    5a:48:92:c2:15:66:c2:48:70:49:70:06:66:b0:1b:
                    db:a4:3a:f2:bc:4b:1d:8e:05:3c:78:0c:1d:8f:ff:
                    a8:ac:48:24:73:8c:48:4e:5b:a5:3f:b6:db:bd:7a:
                    1b:18:18:da:e3:7e:a4:8e:3a:e1:73:f5:01:13:36:
                    57:7a:b0:8c:7c:55:dc:ac:b0:de:38:da:89:a3:69:
                    81:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:77:EA:A3:AA:64:3B:C6:EA:46:79:2C:AD:2B:EF:96:2B:4F:55:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/edd5d206-d727-3cd0-b81f-85681bee4b39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.8.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:eb:2d:21:f0:67:f7:b5:64:7b:3d:9c:a2:35:39:d8:3c:24:
         a3:d2:32:f5:e0:bf:68:29:64:3b:58:bc:10:2a:34:16:57:d3:
         6e:2c:d2:86:9d:ae:4c:74:16:ec:f0:82:88:dc:e6:09:23:51:
         44:b0:01:71:bc:30:7e:9e:0e:af:aa:ae:52:2a:6e:aa:a6:5e:
         26:5d:7f:6b:51:0d:b2:b2:b2:4f:0d:c9:db:06:85:e4:54:44:
         34:8f:d4:32:ef:91:d5:5f:d5:79:9e:83:f6:3b:06:40:82:4d:
         5e:5a:81:6f:d4:88:9a:25:e8:98:53:63:a3:ba:ab:69:08:85:
         7e:e9:da:63:d5:73:0c:73:a3:b7:00:10:1c:4b:70:7e:1e:e5:
         65:ce:5a:8e:40:e2:b8:c2:22:6e:d2:7e:f8:be:8f:c0:e4:51:
         7d:35:1e:84:52:61:05:8b:e2:b6:e5:d9:38:72:f5:9a:4d:c9:
         9d:07:c9:01:4f:ab:09:59:92:4f:b3:6d:27:ec:cb:e7:11:f5:
         c1:08:80:74:d1:1e:7c:ce:c8:d3:75:b4:e2:f8:e7:2b:33:3c:
         f6:32:51:9c:1a:72:7f:65:e1:64:08:4c:e7:2b:82:94:af:64:
         28:6f:64:93:96:b4:7c:12:ee:64:60:a1:da:ad:61:60:28:5d:
         e2:a4:fc:d7
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEA9dpqGBv2HMLppbgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxNDEyMDAwMFoXDTIzMDExOTA1MDAwMFowLzEtMCsGA1UEAxMk
ZGQyMDJjM2ItMjYzMy00YjU0LWI5MTEtMWQ2NmFkOGE1NTA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQxKGJ3fnpDD+kFKLe/x8mkgggR0vKbnfIUn
y3Uc+0C7mhnjTRFhQkqA13phMcebfDBRPlgjN3gOsU6ktW774HAEMYI0zv6upy2p
lD3UCVf5BIKU89nsEpkZmKnbShB/ll1YKtj7YW8gj3mY6KAH+z+s5U4Tth0X7zeb
FJ7z7ZX4V4/mpLa7wJNr4fBShiXcqDROm+gi61GzPpR9ZCsn+XFVKFmPAXuXhnDQ
AEv+ztTJEghaSJLCFWbCSHBJcAZmsBvbpDryvEsdjgU8eAwdj/+orEgkc4xITlul
P7bbvXobGBja436kjjrhc/UBEzZXerCMfFXcrLDeONqJo2mB0wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNt36qOqZDvG6kZ5LK0r75YrT1XJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZWRkNWQyMDYtZDcyNy0z
Y2QwLWI4MWYtODU2ODFiZWU0YjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiAgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAkOstIfBn97Vkez2cojU52Dwko9Iy9eC/aClkO1i8ECo0FlfTbizShp2u
THQW7PCCiNzmCSNRRLABcbwwfp4Or6quUipuqqZeJl1/a1ENsrKyTw3J2waF5FRE
NI/UMu+R1V/VeZ6D9jsGQIJNXlqBb9SImiXomFNjo7qraQiFfunaY9VzDHOjtwAQ
HEtwfh7lZc5ajkDiuMIibtJ++L6PwORRfTUehFJhBYvituXZOHL1mk3JnQfJAU+r
CVmST7NtJ+zL5xH1wQiAdNEefM7I03W04vjnKzM89jJRnBpyf2XhZAhM5yuClK9k
KG9kk5a0fBLuZGCh2q1hYChd4qT81w==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:18 2025 by rpki-client