Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f6c36770-9f5b-3867-aa78-167ebeb9f629.roa
File:                     f6c36770-9f5b-3867-aa78-167ebeb9f629.roa (raw, json)
Hash identifier:          sbVDEaDftRKqoJw/eoMTJtd03PZPYuPRLYZSSvdkO8I=
Subject key identifier:   5E:8B:E8:4B:A2:B6:CC:5E:92:C6:10:A9:0A:A0:15:E2:BB:39:6E:55
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FC84C82483712B6C7E86DEFC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f6c36770-9f5b-3867-aa78-167ebeb9f629.roa
Signing time:             Wed 02 Nov 2022 12:00:00 +0000
ROA not before:           Wed 02 Nov 2022 12:00:00 +0000
ROA not after:            Thu 08 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        136.18.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c8:4c:82:48:37:12:b6:c7:e8:6d:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  2 12:00:00 2022 GMT
            Not After : Dec  8 05:00:00 2022 GMT
        Subject: CN=9d93b291-1a68-40a2-8b7c-c3f9c6fd9f5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:be:55:c7:ee:21:f8:4c:a2:9d:89:13:51:0d:
                    a7:7c:94:ee:47:d0:f6:53:90:0b:6f:78:a8:19:2d:
                    12:cf:4f:e0:1d:71:a1:e3:91:23:71:1c:11:75:f9:
                    c7:31:96:94:7f:2b:09:92:a3:86:6a:57:e9:64:94:
                    02:1f:78:55:aa:a6:dd:4a:e0:d6:a8:e9:32:4e:99:
                    1f:62:57:4f:14:4b:77:3a:ea:8d:bf:bd:fa:49:81:
                    8d:ab:76:03:64:42:88:64:3c:95:76:35:5a:4b:65:
                    3a:de:61:8b:3a:68:de:65:d3:43:de:51:4e:c3:ed:
                    cc:35:ea:f7:7b:ba:8e:f3:91:60:77:e5:f4:d0:42:
                    f4:f3:f6:c3:49:28:56:3c:40:57:22:3f:ae:11:ab:
                    3f:fb:73:b6:62:fd:19:c4:46:69:51:4d:37:54:23:
                    34:4c:76:2c:aa:26:94:0c:38:2d:af:86:c6:58:e6:
                    87:f5:09:4a:67:55:e1:86:ec:4f:a6:49:9a:38:d8:
                    20:64:6c:87:63:b4:c5:69:2b:d8:9f:09:1f:32:d9:
                    e7:01:60:11:d4:e5:bf:e6:87:40:25:7f:ef:9e:25:
                    47:33:d4:60:71:8a:bc:f4:6a:0f:b4:1a:25:10:8c:
                    06:ec:15:d2:59:1c:4e:c2:e3:2f:02:28:b9:f2:7c:
                    8a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8B:E8:4B:A2:B6:CC:5E:92:C6:10:A9:0A:A0:15:E2:BB:39:6E:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f6c36770-9f5b-3867-aa78-167ebeb9f629.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:c1:0f:ab:70:51:c1:fd:46:e0:c8:37:79:77:58:83:55:90:
         f3:57:30:e1:e9:5b:07:33:69:90:41:b6:20:44:ee:28:e5:28:
         4f:8b:99:93:7f:da:72:78:39:a0:b8:e3:3a:43:cc:b7:a4:3b:
         6a:10:e3:3a:f0:c3:e0:04:15:49:db:6c:8c:9d:12:b2:db:13:
         ab:93:05:80:53:b7:d9:14:7e:05:5e:fc:a9:db:7b:bf:bf:2c:
         97:47:07:16:eb:4e:4f:67:89:9e:99:dd:ad:28:23:5c:9e:bc:
         8e:9e:50:70:1e:d8:f7:a6:f8:2f:89:76:99:86:d3:7f:fc:e8:
         8b:7d:b1:3f:5a:c4:d7:9e:35:f8:bc:a0:b6:66:6c:40:69:a9:
         2a:02:be:f3:6c:b6:ff:d9:38:c8:55:c6:cf:90:02:f5:47:a5:
         7d:9e:5b:6f:82:df:fd:a1:56:e5:e7:dc:23:bf:73:77:b8:90:
         6c:90:70:b1:79:01:a7:d4:38:f8:10:f6:00:47:76:6e:f6:53:
         3f:2f:d0:7a:75:ec:cc:ae:6a:bb:b8:51:07:3b:7a:e4:b6:46:
         ff:20:f8:b7:aa:b0:40:8d:84:61:2a:0d:44:0b:14:3e:33:5b:
         08:bd:b8:02:e3:b4:3d:70:9e:46:ec:36:97:d7:e5:f5:8a:d3:
         b3:8e:9a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:39 2025 by rpki-client