Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/5df31634-15a0-3543-8f3c-471a71906323.roa
File:                     5df31634-15a0-3543-8f3c-471a71906323.roa (raw, json)
Hash identifier:          UiLMqvw3MqP26tSGuMBgMdZbEyN2S3omBONfGamnO3s=
Subject key identifier:   25:68:42:49:A8:81:30:65:DA:B4:E3:2D:02:C7:F9:90:91:24:0D:7D
Certificate issuer:       /CN=4d8011fa-f1ae-46c6-9441-2f486e04a6de
Certificate serial:       010D0C9F43285845EF8934B6D744AEB8376848B0
Authority key identifier: E7:88:6B:00:74:2E:6C:7B:B0:09:45:69:DA:C5:32:96:33:5F:B3:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/5df31634-15a0-3543-8f3c-471a71906323.roa
Signing time:             Mon 20 May 2024 13:00:35 +0000
ROA not before:           Mon 20 May 2024 13:00:35 +0000
ROA not after:            Sun 18 Aug 2024 13:00:35 +0000
asID:                     22781
IP address blocks:        136.175.20.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ef:89:34:b6:d7:44:ae:b8:37:68:48:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d8011fa-f1ae-46c6-9441-2f486e04a6de
        Validity
            Not Before: May 20 13:00:35 2024 GMT
            Not After : Aug 18 13:00:35 2024 GMT
        Subject: CN=e3748d88-b97e-4f70-af05-58107f173534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:79:1b:05:b9:cf:41:02:dd:d9:21:32:bc:7c:
                    cd:76:da:d0:0c:cc:2c:60:2d:14:70:dc:bc:70:18:
                    e1:52:e4:1f:db:03:d9:0b:5a:ea:86:8f:9a:a5:ae:
                    4a:7a:53:43:ae:45:ba:6a:0f:8c:ee:f9:95:6b:32:
                    74:c6:8f:d0:bc:19:be:e4:91:12:47:0d:34:d7:50:
                    61:55:53:a5:8a:da:69:89:f9:79:da:00:96:f7:2b:
                    11:8f:1b:c9:fd:32:b9:cf:50:f8:e2:d8:91:9d:11:
                    42:5a:fb:e4:de:20:71:b0:ff:ce:45:79:cc:08:fa:
                    73:e9:07:fd:f6:6f:66:64:b3:67:dc:9b:fc:bf:75:
                    9b:63:0a:b9:e7:4f:b9:98:6e:06:de:6e:71:75:95:
                    b7:5a:c6:95:e1:56:03:cd:ab:98:c6:6b:93:52:5c:
                    5a:3a:c3:88:99:8c:0f:e7:4c:71:ae:be:39:94:5f:
                    2f:f6:1c:3c:44:03:c3:c1:b5:4a:dc:ed:5c:3d:e9:
                    61:67:23:f9:f9:2a:06:b0:b3:f7:70:75:f0:82:dd:
                    c8:4c:f1:3f:64:da:18:57:5b:15:89:11:50:42:e6:
                    31:af:da:5c:ad:3d:0c:4b:d9:2a:8d:58:ab:90:01:
                    87:b1:4c:52:38:14:93:01:63:df:66:80:f4:88:d4:
                    38:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:68:42:49:A8:81:30:65:DA:B4:E3:2D:02:C7:F9:90:91:24:0D:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/5df31634-15a0-3543-8f3c-471a71906323.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4d8011fa-f1ae-46c6-9441-2f486e04a6de.crl

            X509v3 Authority Key Identifier:
                keyid:E7:88:6B:00:74:2E:6C:7B:B0:09:45:69:DA:C5:32:96:33:5F:B3:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:58:cd:14:af:1b:92:4a:a4:b9:63:40:5f:f9:5d:92:19:c3:
         77:78:00:d1:a3:c7:70:98:27:74:c2:f3:30:8f:34:03:43:d2:
         13:ff:1d:9a:80:d9:27:22:6c:1e:09:c7:79:dd:e7:5c:84:78:
         7b:34:45:98:4c:4f:cb:1b:a1:d1:2d:96:c0:59:af:db:c1:4f:
         6d:19:fe:53:fa:04:46:cb:1d:93:4b:e5:96:c9:e0:da:33:e8:
         f7:03:f9:8a:ac:b7:7e:77:d3:1c:93:38:b9:41:15:5f:7c:4b:
         f9:39:d2:72:f4:ed:dc:bc:32:28:88:ba:1c:3c:ea:dd:0b:38:
         cb:cc:48:37:90:a5:35:61:77:02:a6:40:4c:69:94:5a:5b:42:
         99:dc:10:77:5c:1c:c7:a2:6c:9e:1e:4f:92:16:15:73:2c:5c:
         d3:0d:0d:10:4e:3c:ec:36:2e:a1:e1:f8:83:53:38:58:12:f9:
         14:2c:23:b4:fd:cb:e1:86:cb:ba:b6:e2:01:60:4f:ce:b8:a3:
         a7:50:63:ff:9a:c2:ac:64:1b:e5:cf:5e:bb:01:2f:b4:2b:71:
         91:1f:6e:0c:ed:09:31:35:8e:16:10:86:35:17:d0:53:8b:1b:
         1c:02:40:00:bd:f2:48:58:f8:51:55:7a:1f:9b:6d:39:e0:e0:
         61:4d:89:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 04:34:20 2024 by rpki-client on console.sobornost.net