Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1e781fae-e632-3ad2-897b-adff15914591.roa
File:                     1e781fae-e632-3ad2-897b-adff15914591.roa (raw, json)
Hash identifier:          A6aeVg0oBBuxWJj4TwoFwqd6VgzoytR+m2isc69rYJ4=
Subject key identifier:   10:08:C0:22:C4:F7:4E:65:64:1B:04:8F:F7:B3:64:F2:B7:06:7F:93
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339D691CBC71290DC393880
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1e781fae-e632-3ad2-897b-adff15914591.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.57.240.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:d6:91:cb:c7:12:90:dc:39:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=8418635b-2277-446a-9759-0db0ce5f31d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b1:ab:1e:af:f8:29:a1:13:77:9b:21:73:7a:
                    b2:71:e3:c1:fd:62:03:c9:47:2f:5a:69:75:79:f3:
                    72:0b:93:a1:29:38:0d:17:4f:40:0d:18:cb:8a:53:
                    03:2b:fa:59:33:ea:95:71:bb:4b:32:0c:98:b7:11:
                    07:38:c8:50:e7:05:5c:3d:f3:5d:f1:1c:c1:4a:4f:
                    a7:20:46:df:db:ae:a2:5f:12:09:54:3c:c2:37:13:
                    67:8c:2f:99:c5:b7:99:2a:f0:38:2f:f8:23:c6:b4:
                    37:6f:ca:06:a3:ea:42:38:2f:6b:3f:0e:02:ad:42:
                    de:08:e8:50:8a:68:5c:4e:59:f9:b1:00:d5:c6:b7:
                    fd:77:a1:93:52:ce:37:77:d9:06:c4:1d:a8:42:9d:
                    5f:ef:04:49:91:49:fd:21:38:14:59:0a:a1:a7:ee:
                    c7:e4:e4:02:7d:0d:2e:f3:32:d2:59:0e:49:31:55:
                    2e:6b:17:d9:2c:4c:ea:a9:70:42:a5:d7:95:05:f4:
                    87:18:15:3b:4b:a7:14:a7:fd:ff:07:86:11:83:69:
                    0a:c9:83:81:ec:63:2b:74:c2:37:a1:75:28:cb:de:
                    41:31:eb:c1:cc:2e:a1:5a:c8:92:de:9c:7c:05:ad:
                    47:ef:c2:03:a8:51:4e:9a:32:e7:35:ce:5e:21:e5:
                    78:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:08:C0:22:C4:F7:4E:65:64:1B:04:8F:F7:B3:64:F2:B7:06:7F:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1e781fae-e632-3ad2-897b-adff15914591.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.57.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:92:04:f7:37:90:cf:30:df:f5:c1:a8:6f:a9:a3:4e:85:67:
         c4:de:a9:67:2f:08:ff:bf:d9:33:c7:21:f7:27:09:0e:a2:0b:
         e7:20:66:bd:1c:90:69:f9:1a:c9:4f:d4:4f:5c:6a:34:b5:a7:
         94:b7:6c:22:48:ce:af:bd:97:2f:bf:82:7b:e7:11:c8:5c:a0:
         e2:b1:2a:0c:69:39:e5:06:05:b6:8c:53:7b:02:ea:4f:15:44:
         5c:00:45:e6:ab:7c:af:95:cf:6a:a4:7a:04:b5:f3:6e:fc:8c:
         a0:c7:ac:82:43:11:2b:40:66:a9:3d:3a:02:cd:b3:2c:8f:e6:
         53:79:c2:9c:b2:8d:09:eb:7d:80:d8:bb:a4:8a:21:35:87:39:
         69:33:f0:c5:69:49:d0:3a:b7:8c:f4:a8:83:00:3d:38:6b:6b:
         08:f9:6d:c4:e9:36:48:55:80:1c:bb:25:8a:b7:f8:94:cb:8c:
         96:40:86:9f:9f:c3:bf:8c:7c:33:9f:15:53:8b:0d:88:a6:cc:
         f5:0e:02:20:4c:b2:4b:e5:e2:ae:89:b6:69:89:72:fd:ae:94:
         77:9f:fe:72:6c:ad:9b:40:b5:bb:57:64:c8:1c:e6:e4:2e:61:
         f6:c5:db:8a:8a:a3:60:da:b9:79:6c:d7:d1:f3:26:90:6a:10:
         c5:2f:79:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:39 2025 by rpki-client on console.sobornost.net