Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/85351780-5ad9-39ef-8588-013e2d6f1fcf.roa
File:                     85351780-5ad9-39ef-8588-013e2d6f1fcf.roa (raw, json)
Hash identifier:          mqLEPW6xc+J9snQjIOat7v6K2+Pt3KlxwEQP7iW/JGs=
Subject key identifier:   E9:05:C1:64:D2:21:E0:1B:21:5F:7B:6C:B0:99:7A:5F:7B:43:59:9C
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F432858495EEEE68BF02FAE3EEAF9B880
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/85351780-5ad9-39ef-8588-013e2d6f1fcf.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     396253
IP address blocks:        136.228.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:e6:8b:f0:2f:ae:3e:ea:f9:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=7e17e0e6-cd65-4f7d-b224-0fc620f74620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d6:91:95:87:25:3f:8d:ed:fc:a0:83:6a:a3:
                    c3:c1:41:21:ca:f5:2d:43:15:72:1c:d4:23:0a:20:
                    be:f7:9f:6a:2c:f8:0b:c1:b8:3e:6f:5d:ff:75:18:
                    22:5b:a7:08:f7:19:12:cc:65:fd:db:55:1d:fa:aa:
                    9b:2d:85:93:3e:3f:f3:54:7d:d1:95:e7:ae:71:a5:
                    5a:3a:df:57:25:2d:17:96:1f:14:74:70:f4:c2:60:
                    88:21:9c:c5:22:ad:47:2a:3a:1d:f0:75:ba:44:55:
                    49:ee:ad:d2:47:7d:72:80:6c:7d:09:c2:df:8b:b1:
                    c1:0c:fd:1b:62:31:6d:31:f6:68:03:a5:d7:cc:44:
                    2c:0d:7a:c3:22:ae:54:5f:68:74:01:5b:0b:a6:cc:
                    1f:35:d8:59:52:54:21:f7:a6:00:ff:2f:0f:da:3a:
                    9c:7f:f8:4b:6e:9c:2d:ad:5e:6e:a5:6d:22:1a:8c:
                    1f:96:ad:34:e6:c9:1f:7a:1f:c7:bf:69:ac:9a:ef:
                    62:c9:a2:7f:05:e2:aa:cd:5c:60:9b:f6:b9:46:6e:
                    17:09:a4:a4:86:de:5e:6b:f2:26:de:e7:0b:0b:3c:
                    fc:b1:de:4a:cd:a4:3f:77:b1:fa:54:7a:ea:34:8f:
                    1b:49:ab:7c:da:9c:f5:c5:21:67:a0:4a:c7:4a:5c:
                    94:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:05:C1:64:D2:21:E0:1B:21:5F:7B:6C:B0:99:7A:5F:7B:43:59:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/85351780-5ad9-39ef-8588-013e2d6f1fcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:9e:69:a8:e4:08:27:65:a0:d6:76:36:25:a3:ea:33:92:55:
         d1:91:db:fe:d7:59:4c:7e:42:c5:84:84:43:ee:f3:ab:33:f9:
         8c:ba:1e:a5:55:10:76:b4:38:94:34:be:ba:ec:3f:d3:b9:05:
         93:e3:25:08:ae:e4:84:1d:83:25:3c:10:23:ee:8b:ff:d0:d1:
         1d:41:e5:49:96:13:a6:a7:7b:ed:6a:b4:3e:ed:e8:0a:a1:a0:
         eb:2e:e4:89:d3:4c:6c:f8:4b:95:57:84:72:7a:1c:92:47:1c:
         8a:9e:06:85:ba:46:67:53:be:0a:14:a1:72:f8:f7:f1:e3:8a:
         9a:c0:49:04:68:c7:95:a4:70:80:97:85:c1:79:04:f4:c3:3b:
         60:57:ef:d4:37:3c:1d:4e:6c:44:2a:cb:cd:57:13:ea:8c:36:
         f3:57:7d:e4:84:06:06:e4:33:ca:43:b6:b7:ef:c2:f8:16:a0:
         a6:0a:80:12:5d:79:84:03:6e:5a:fd:1a:1a:55:ed:1f:94:0e:
         e0:05:35:e0:be:53:0e:93:43:23:fa:6e:78:00:1b:e9:42:0a:
         62:b2:6c:98:55:13:f7:f6:62:44:80:48:4c:3c:33:65:47:10:
         52:48:71:1e:f1:20:67:10:f3:be:86:7e:be:35:d1:4e:fd:0c:
         02:53:20:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:12 2025 by rpki-client on console.sobornost.net