Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1c3859cd-a379-3805-b0c7-cf92685a3438.roa
File:                     1c3859cd-a379-3805-b0c7-cf92685a3438.roa (raw, json)
Hash identifier:          Y1+m6ais0mrFToHcNKHnx8G48DR7yh/Zbvn7EkP4M7w=
Subject key identifier:   D8:D3:1B:4B:B5:8C:E2:7E:DE:CC:2C:98:B0:07:E5:0C:AA:20:0F:41
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339D2BFD81AEF82EFDDE280
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1c3859cd-a379-3805-b0c7-cf92685a3438.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.52.32.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:d2:bf:d8:1a:ef:82:ef:dd:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=dde499de-6275-4913-8bf1-25d0c266b6ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f0:2d:ff:5d:98:eb:c2:f9:c9:34:47:10:1e:
                    0d:68:89:4c:28:dd:ce:ac:10:f7:44:50:54:5b:7a:
                    01:1a:81:87:57:cc:16:15:3c:37:79:a2:ca:88:f5:
                    e8:ec:f6:7a:bd:44:e4:ad:21:6a:8e:72:03:f9:dc:
                    62:02:c5:3b:75:ae:d3:f3:09:c4:8d:8e:51:59:e5:
                    39:62:42:a6:39:a2:41:f8:85:2d:b2:69:b7:3a:68:
                    87:86:75:ee:c2:d4:df:94:6b:0c:12:73:11:bc:91:
                    a5:6a:3a:8c:81:8a:fa:b8:e2:86:46:8a:ba:f7:f2:
                    ac:6b:db:0d:32:91:05:68:7f:d7:bc:bf:31:0d:b2:
                    2d:da:9a:30:51:f9:31:8b:b5:07:cd:46:fe:45:2a:
                    dd:11:3b:87:a7:4e:86:dd:d0:b5:f6:88:5e:40:c3:
                    5d:25:84:9f:02:26:f2:42:83:a4:e0:2e:14:c8:cb:
                    b3:4a:f2:a8:16:c2:db:e1:ea:6f:b9:fb:27:50:c6:
                    1f:01:9a:3d:9f:25:08:2a:b9:5f:72:da:69:55:c1:
                    5d:81:b3:c4:3d:93:8b:bb:09:0e:c6:ad:0f:21:cc:
                    be:eb:79:58:7e:d9:b6:9f:29:15:6e:49:8a:48:ae:
                    ea:bb:fe:61:12:c9:bb:3f:d7:6f:74:f0:73:cd:a5:
                    1c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D3:1B:4B:B5:8C:E2:7E:DE:CC:2C:98:B0:07:E5:0C:AA:20:0F:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1c3859cd-a379-3805-b0c7-cf92685a3438.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.52.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:ca:8a:3d:ca:35:f3:3f:88:9a:8d:d6:31:d4:5d:c0:4b:63:
         a4:75:0b:67:42:b9:30:d9:44:93:cc:ef:11:0f:6b:f0:fd:5a:
         05:95:2d:48:b3:95:43:a0:2c:db:ef:8b:c8:49:0a:22:26:6c:
         25:c0:47:71:01:7d:5d:f7:52:20:34:36:93:75:c3:7e:cd:ac:
         22:8b:99:8c:f4:45:d1:83:77:01:37:48:2b:2f:91:b7:a8:29:
         eb:a7:6e:bb:a3:f7:c1:dc:f3:91:54:bf:02:a2:24:f0:9f:04:
         55:d2:4e:11:f4:3a:6f:1e:a9:52:5b:b0:5c:3f:a3:b9:f7:2e:
         20:90:29:07:fb:c8:f5:e1:73:21:67:9f:c7:6e:4c:04:b7:27:
         b4:f3:08:b7:c3:88:03:92:72:b8:e0:32:bd:df:9a:9a:3d:b9:
         7d:8a:3c:af:20:51:a5:c4:2e:e9:a4:b4:0d:29:00:42:f5:f6:
         cd:e1:78:20:ba:19:70:66:72:6f:bd:13:92:e9:0f:ac:17:1c:
         35:31:97:92:8a:c8:3b:a8:2e:3d:3e:38:2b:0f:41:bf:40:df:
         b4:7b:45:2d:c0:b7:af:a5:a4:79:b1:f4:4c:4d:38:2e:17:c8:
         8a:c9:fe:40:09:44:60:98:cb:45:eb:d3:dd:f2:7e:fc:74:e5:
         99:14:2f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:39 2025 by rpki-client on console.sobornost.net