Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fd045378-d613-386a-b756-e3c38ecba1fa.roa
File:                     fd045378-d613-386a-b756-e3c38ecba1fa.roa (raw, json)
Hash identifier:          M4pT1AmHdcX2mxRcPPhgtXPTkO/kXPNZ0/1pCOMVMxM=
Subject key identifier:   53:65:94:E5:07:74:35:A9:B3:EC:5A:6D:7D:73:15:4C:BC:3B:26:69
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840175704BD397C4C3094AC2F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fd045378-d613-386a-b756-e3c38ecba1fa.roa
Signing time:             Wed 30 Nov 2022 12:00:00 +0000
ROA not before:           Wed 30 Nov 2022 12:00:00 +0000
ROA not after:            Thu 05 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        136.10.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:17:57:04:bd:39:7c:4c:30:94:ac:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 30 12:00:00 2022 GMT
            Not After : Jan  5 05:00:00 2023 GMT
        Subject: CN=1e67f3b7-2df7-4f08-a341-34288262e7a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:41:aa:43:ed:e5:f6:95:fc:ad:9c:fe:a4:6f:
                    db:c8:d9:83:87:94:b5:a9:00:78:6f:86:c7:d1:3a:
                    21:d8:47:d8:0b:71:18:66:76:39:dc:3d:5b:98:30:
                    c5:73:26:c8:ae:59:6a:a5:48:46:12:59:52:45:30:
                    02:16:a8:42:04:c3:2d:83:1b:e1:ec:6c:a1:9d:a4:
                    a5:cd:12:fe:95:d6:b4:88:d1:8d:98:0d:71:2b:9a:
                    1e:d5:97:bf:75:24:fb:65:ce:3a:1e:8e:b6:24:d2:
                    9e:28:d3:88:50:14:21:ad:33:e3:f8:19:e2:80:01:
                    fb:e3:da:09:f8:06:d7:e1:cf:b5:2b:0d:e5:1d:e6:
                    03:b7:9f:3c:19:d5:13:1d:9f:c3:7a:51:e6:89:24:
                    46:91:40:a7:57:8a:c4:04:65:cc:af:0c:84:b1:98:
                    f2:26:57:17:65:f4:6c:da:45:e1:90:31:fb:a4:f3:
                    cd:e9:f9:5c:3c:85:9c:83:8f:09:49:2c:bd:27:01:
                    25:29:bd:f5:92:25:68:eb:d1:8f:fd:97:d2:94:36:
                    16:15:df:fe:27:b3:35:0e:e2:ac:41:65:d2:49:fb:
                    8c:bc:c0:55:d5:80:04:d1:b4:d4:ff:47:98:75:e9:
                    fb:d1:95:36:45:1f:05:a0:14:d4:59:af:43:e2:d0:
                    4b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:65:94:E5:07:74:35:A9:B3:EC:5A:6D:7D:73:15:4C:BC:3B:26:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fd045378-d613-386a-b756-e3c38ecba1fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.10.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:09:8d:e7:f2:50:6a:4e:7f:25:74:20:35:60:43:7e:28:f9:
         f5:5e:64:7d:b9:4c:0f:0e:0f:89:03:60:f7:81:06:61:44:88:
         7f:d1:45:a5:16:e7:88:b0:47:08:14:1e:7e:a9:a2:c6:82:f8:
         01:79:55:29:10:09:df:58:81:37:cb:34:8b:c9:81:57:c1:4b:
         97:d4:40:e5:be:1a:15:2f:13:21:fc:5e:80:67:bd:bd:26:5d:
         5c:e6:83:fb:fc:69:2c:02:7a:3f:8b:cd:30:7f:7d:81:fc:f4:
         84:6e:cb:1a:f0:72:16:54:87:9b:62:23:9d:35:16:de:6d:b7:
         43:e0:c2:58:15:11:c6:bf:a3:9c:c7:58:2e:b4:0e:16:36:df:
         ce:95:69:3a:3a:5c:b8:48:db:e5:96:38:dc:65:eb:f3:63:60:
         47:60:4d:5e:a4:0b:43:b4:32:d3:bb:da:57:28:f9:41:9d:04:
         04:2a:1b:a8:c9:37:2c:08:0f:59:d2:e1:36:d0:46:25:a7:1a:
         89:2e:7b:08:57:3c:34:d6:b2:95:df:0f:be:88:9e:bc:29:07:
         e6:27:96:1f:b5:07:7a:48:fd:59:a3:af:04:80:06:da:dd:66:
         e7:73:83:9f:7c:3b:01:a9:89:c3:21:66:af:8f:e6:3f:cb:d5:
         e7:90:43:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:26:05 2025 by rpki-client