Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/17535935-7967-35a4-a1a8-331ed65046f3.roa
File:                     17535935-7967-35a4-a1a8-331ed65046f3.roa (raw, json)
Hash identifier:          Kt+dMl6kXJzjPMa8+Q6LZjPgAG8xQV3dRZj8yEruiRk=
Subject key identifier:   3C:9B:75:B7:2E:71:53:8B:5F:E7:4B:9A:4F:11:47:39:B5:68:64:26
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339D2E39E0D296965E75380
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/17535935-7967-35a4-a1a8-331ed65046f3.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.50.48.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:d2:e3:9e:0d:29:69:65:e7:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=8aa74443-0945-400f-b1f5-7b6ac7a344c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ce:b0:48:b5:94:25:7e:73:88:93:ac:ab:71:
                    c6:77:35:13:0d:51:51:f6:07:2d:b6:22:b3:80:cf:
                    7a:2d:36:b9:cc:4f:d3:64:24:d6:dd:1f:9c:66:31:
                    ab:5c:1c:4d:27:84:93:39:bc:a9:ae:0b:a7:d5:53:
                    cd:79:44:31:f0:de:35:0e:ec:48:ce:9e:92:7e:6c:
                    e9:1a:19:8a:f2:2d:ce:7e:34:ee:9c:76:6f:0d:f4:
                    cc:4c:4d:74:48:73:74:69:d7:9b:ff:e2:31:5c:95:
                    0e:49:a5:83:6b:9e:b1:fe:e0:c2:ee:cd:2a:fb:13:
                    77:73:34:05:48:35:f0:e6:b8:87:4a:6f:01:fd:de:
                    32:0e:3b:45:8d:29:e0:50:e7:83:6f:7f:a3:10:98:
                    4b:c9:98:37:f3:3a:6c:d4:08:17:c0:4d:9e:6f:44:
                    0b:61:3b:b8:0a:2b:2a:d2:7a:2b:13:fc:a4:ac:1f:
                    88:1e:e9:fd:f2:a2:b4:07:98:1a:de:b9:83:99:3d:
                    85:fa:e7:13:ba:de:24:20:d8:9d:44:62:8a:07:74:
                    b5:ee:a7:4a:ed:d9:8a:e1:17:15:39:01:49:b4:ec:
                    f0:10:4b:cd:7a:b4:75:13:e2:ad:7b:00:da:ef:18:
                    58:a4:18:ea:bb:25:70:23:29:54:b1:99:4a:be:d3:
                    46:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:9B:75:B7:2E:71:53:8B:5F:E7:4B:9A:4F:11:47:39:B5:68:64:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/17535935-7967-35a4-a1a8-331ed65046f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.50.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:75:80:d1:54:af:ca:64:63:c1:71:cd:bb:51:c3:51:6f:2e:
         d7:a5:80:c8:45:a3:be:c6:43:97:4b:9e:11:0b:ae:93:90:ae:
         d8:48:27:7d:2b:b5:c6:e1:f6:2e:b9:c8:9e:f7:1f:0b:94:48:
         2c:10:d1:4e:cd:4f:1f:cf:e8:30:a7:7f:27:e1:1d:11:34:6d:
         b0:cf:af:d3:57:0f:c2:d7:77:ff:89:07:31:f5:89:e1:85:76:
         d7:cc:4f:09:f2:17:b6:88:7a:b7:84:90:0b:0f:14:27:7c:2a:
         76:df:b5:4f:b6:16:6c:af:00:6c:68:2f:31:0c:fc:3d:a5:6f:
         5a:c7:6c:2a:1d:57:2b:bf:46:fe:0a:e5:4f:a8:32:d3:40:72:
         5b:06:49:0a:c7:9f:b6:f0:e2:77:02:1c:78:f6:31:5c:4a:eb:
         33:a3:09:06:26:7b:73:87:0c:87:6c:fa:b5:01:8d:1f:bb:d3:
         5f:0d:36:88:0e:b3:93:82:91:07:8c:2d:20:fe:2f:b6:42:fa:
         fc:ae:67:7c:85:8f:0b:d9:b8:be:c0:18:c3:5c:40:ec:91:47:
         70:79:03:fb:16:5f:73:00:90:bc:3c:d0:fe:e3:0c:44:ca:28:
         42:d0:95:2e:56:b1:43:aa:d5:79:52:86:78:51:67:a1:23:9d:
         1b:01:0d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:39 2025 by rpki-client on console.sobornost.net