Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f31b5d36-c28d-3dce-87d7-30477f461c91.roa
File:                     f31b5d36-c28d-3dce-87d7-30477f461c91.roa (raw, json)
Hash identifier:          Cr+YnNKnEglXo2Tv1hR3RKX1UfshG43L9lNTkCeXBJ8=
Subject key identifier:   EF:3E:3F:DB:1D:91:42:88:68:A5:23:05:57:CD:E9:A9:2C:7C:DA:F0
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E19E04E9B6F16D5CC880C4700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f31b5d36-c28d-3dce-87d7-30477f461c91.roa
Signing time:             Wed 01 Jun 2022 12:00:00 +0000
ROA not before:           Wed 01 Jun 2022 12:00:00 +0000
ROA not after:            Thu 07 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        136.1.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:19:e0:4e:9b:6f:16:d5:cc:88:0c:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun  1 12:00:00 2022 GMT
            Not After : Jul  7 04:00:00 2022 GMT
        Subject: CN=c77ed430-3dff-4149-b2ab-2aba0fb08d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ea:3a:06:05:cb:8a:01:b6:b0:60:fe:56:e1:
                    2f:a7:64:81:58:60:50:cb:22:6a:71:62:a0:ac:ba:
                    80:42:48:9d:cb:bc:8e:16:17:92:d7:d9:90:59:56:
                    10:d5:14:3f:c2:f3:67:9f:23:b0:04:aa:a5:2b:c3:
                    b8:4b:49:61:16:a5:47:4d:68:8e:3c:40:fd:fb:cd:
                    73:11:ed:f6:5a:32:37:99:45:c5:06:cd:47:f8:6d:
                    f6:18:8b:94:e8:e4:0b:e2:59:60:a3:c2:26:d3:ac:
                    21:55:04:fd:27:1f:ed:54:6f:a7:5f:e0:38:f2:fc:
                    b2:9a:68:4c:31:2f:dc:31:e8:6f:6d:70:3a:0b:ca:
                    27:46:72:3c:e4:fd:49:a5:28:ab:ff:a0:76:96:89:
                    d2:58:01:19:d5:a3:20:1a:f7:af:c5:b8:15:c2:4f:
                    3c:e0:e2:7d:47:ff:8d:c6:94:73:83:0c:6c:fd:52:
                    cb:0d:9a:09:d3:01:e1:86:1b:bd:85:3d:1c:e1:4a:
                    10:12:d0:1d:9c:a9:c6:74:ba:ef:2c:ca:85:8a:aa:
                    fb:59:7a:e3:19:55:df:6d:bd:06:e8:df:c8:49:05:
                    eb:f7:ef:5d:55:48:17:aa:c6:5d:f8:17:d3:8a:20:
                    31:dd:48:f0:c2:80:df:39:b9:81:7f:51:6f:84:d4:
                    6d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:3E:3F:DB:1D:91:42:88:68:A5:23:05:57:CD:E9:A9:2C:7C:DA:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f31b5d36-c28d-3dce-87d7-30477f461c91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.1.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:06:f8:c7:15:66:ba:32:4b:88:ec:6c:3a:a1:30:1a:b5:e8:
         c1:49:60:98:d6:18:7d:35:bc:36:3f:17:a5:1b:59:bc:7b:df:
         ea:10:64:0c:c4:4c:bc:55:69:97:46:2b:59:95:1d:84:22:a8:
         be:53:80:9b:d8:d3:d5:55:04:f9:d0:2c:3b:08:3c:2f:44:80:
         77:c3:46:67:04:a7:60:cf:42:ab:5a:24:73:e4:88:93:b1:a9:
         3b:a1:ba:38:b7:31:61:5e:cf:93:d9:d8:28:67:49:08:31:47:
         23:c3:f4:8c:f8:9c:70:12:a7:86:20:f7:79:ea:31:fd:de:1d:
         e0:5d:82:f4:32:63:33:d2:9c:be:e6:5d:35:88:93:cf:91:7b:
         d2:f9:fe:8a:6b:21:99:33:bf:64:73:f5:f1:cf:e9:d8:49:1b:
         65:64:6d:23:48:94:93:45:19:49:90:c1:30:67:74:37:76:f9:
         aa:eb:e9:ae:a2:a8:ec:2b:34:78:90:07:76:5d:ea:50:5b:b1:
         35:8a:bd:ec:f9:98:1f:45:09:58:14:18:9a:60:f3:94:e2:39:
         c6:c6:07:65:89:5c:12:ad:e9:47:74:64:5f:59:17:e3:64:15:
         6f:ba:f9:31:5d:3d:b3:f3:e1:04:ee:e6:b3:9b:b3:8c:20:c8:
         47:fc:1a:9d
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD4Z4E6bbxbVzIgMRwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYwMTEyMDAwMFoXDTIyMDcwNzA0MDAwMFowLzEtMCsGA1UEAxMk
Yzc3ZWQ0MzAtM2RmZi00MTQ5LWIyYWItMmFiYTBmYjA4ZDY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+o6BgXLigG2sGD+VuEvp2SBWGBQyyJqcWKg
rLqAQkidy7yOFheS19mQWVYQ1RQ/wvNnnyOwBKqlK8O4S0lhFqVHTWiOPED9+81z
Ee32WjI3mUXFBs1H+G32GIuU6OQL4llgo8Im06whVQT9Jx/tVG+nX+A48vyymmhM
MS/cMehvbXA6C8onRnI85P1JpSir/6B2lonSWAEZ1aMgGvevxbgVwk884OJ9R/+N
xpRzgwxs/VLLDZoJ0wHhhhu9hT0c4UoQEtAdnKnGdLrvLMqFiqr7WXrjGVXfbb0G
6N/ISQXr9+9dVUgXqsZd+BfTiiAx3UjwwoDfObmBf1FvhNRtTQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFO8+P9sdkUKIaKUjBVfN6aksfNrwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZjMxYjVkMzYtYzI4ZC0z
ZGNlLTg3ZDctMzA0NzdmNDYxYzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiAEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEARAb4xxVmujJLiOxsOqEwGrXowUlgmNYYfTW8Nj8XpRtZvHvf6hBkDMRM
vFVpl0YrWZUdhCKovlOAm9jT1VUE+dAsOwg8L0SAd8NGZwSnYM9Cq1okc+SIk7Gp
O6G6OLcxYV7Pk9nYKGdJCDFHI8P0jPiccBKnhiD3eeox/d4d4F2C9DJjM9KcvuZd
NYiTz5F70vn+imshmTO/ZHP18c/p2EkbZWRtI0iUk0UZSZDBMGd0N3b5quvprqKo
7Cs0eJAHdl3qUFuxNYq97PmYH0UJWBQYmmDzlOI5xsYHZYlcEq3pR3RkX1kX42QV
b7r5MV09s/PhBO7ms5uzjCDIR/wanQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:15:16 2025 by rpki-client