Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fefc6d54-4d05-395c-9f44-0069db0b43b4.roa
File:                     fefc6d54-4d05-395c-9f44-0069db0b43b4.roa (raw, json)
Hash identifier:          qIahsjtq1bc7U+vBVwG3YEah49SSyyI3fHzdNWv4pPM=
Subject key identifier:   9E:22:A2:DF:E1:28:D7:AA:CB:6B:D8:9D:60:9B:8E:73:8C:18:71:8D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E19E0450F1BAC2390655DAC00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fefc6d54-4d05-395c-9f44-0069db0b43b4.roa
Signing time:             Wed 01 Jun 2022 12:00:00 +0000
ROA not before:           Wed 01 Jun 2022 12:00:00 +0000
ROA not after:            Thu 07 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        136.1.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:19:e0:45:0f:1b:ac:23:90:65:5d:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun  1 12:00:00 2022 GMT
            Not After : Jul  7 04:00:00 2022 GMT
        Subject: CN=0c95133e-e23c-43b2-bb9b-29907e543dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fb:48:fd:7b:d8:53:02:be:6f:00:f3:8e:2e:
                    31:d5:20:54:89:3b:67:a3:5f:14:2b:f9:bb:53:52:
                    96:cd:05:d6:d6:d3:90:8a:ee:62:2f:b6:a4:a0:2b:
                    89:a0:9b:60:33:c8:55:a2:89:27:c8:b3:b5:7d:f9:
                    74:a3:ba:03:e0:96:ce:7f:b6:fe:12:56:54:33:9b:
                    41:92:40:c5:e0:23:71:5f:87:60:8f:f7:5c:60:2a:
                    cd:2e:2e:ce:d3:bf:61:00:d2:c1:72:29:74:cd:a7:
                    bd:00:51:af:83:1c:4a:55:44:93:47:ba:fb:a6:25:
                    16:30:9e:07:1d:4e:40:62:2f:2e:e3:e0:67:fe:c6:
                    00:0c:bf:d2:99:54:0e:65:6f:80:43:24:ac:4a:9d:
                    25:2b:cd:13:e2:54:8a:72:69:75:ce:72:09:93:db:
                    c7:f4:73:f3:4b:71:7b:8f:d1:ae:bf:40:bf:28:06:
                    eb:bd:46:68:f7:d0:a1:bf:95:93:76:bb:5f:e7:78:
                    20:9e:3b:45:9f:d9:9b:c4:11:0b:1a:34:60:ed:34:
                    3a:f0:34:76:89:4e:ed:73:e7:a0:14:bf:84:c6:29:
                    b6:2e:22:95:c9:92:11:ec:0d:7f:c1:26:01:3d:d0:
                    18:50:a5:aa:13:30:c4:ee:ea:5c:a4:3e:ce:01:3a:
                    b1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:22:A2:DF:E1:28:D7:AA:CB:6B:D8:9D:60:9B:8E:73:8C:18:71:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fefc6d54-4d05-395c-9f44-0069db0b43b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.1.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:83:95:47:8b:60:6b:ba:5a:ab:08:eb:0d:3c:a3:c0:c6:ab:
         29:e9:31:61:54:61:a3:1a:1d:47:e4:55:a8:fb:65:30:d8:fe:
         fc:c8:a4:4c:c9:c8:c1:8e:f8:58:77:d4:f5:97:b4:c6:b7:28:
         f3:de:3d:29:22:8c:73:f1:72:79:c7:28:79:fe:50:63:cf:b8:
         34:b8:0d:cb:9c:69:35:ea:c3:18:d7:75:73:ab:fd:3e:0b:99:
         10:2b:0e:d6:47:0e:d1:8a:57:5c:bb:3c:4d:11:45:7d:55:6d:
         d6:11:6a:30:ce:86:13:74:e0:47:6a:c6:a1:cd:b5:68:68:af:
         ef:49:e5:17:03:58:76:07:fe:f0:fa:8a:42:a2:88:b0:79:14:
         9d:b2:af:3d:57:82:66:9c:00:60:0c:00:45:67:a4:e9:5c:ff:
         67:38:9a:64:69:db:fe:fe:3b:f6:a9:53:ab:96:4c:80:4a:11:
         d2:c4:92:4f:aa:50:34:3e:85:7e:0e:85:2d:a9:e9:0b:d9:4d:
         fb:9f:5d:96:27:dd:fb:31:2a:18:55:73:0b:5a:85:52:ad:e6:
         44:80:7e:04:61:da:c7:aa:34:6f:c8:ea:7f:40:8b:38:0e:38:
         be:37:3d:95:52:01:8a:12:91:43:e3:df:e6:5a:10:5e:c8:de:
         c6:01:72:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:45 2025 by rpki-client