Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1ff05e1f-0778-375d-b536-2aac7ca85ac1.roa
File:                     1ff05e1f-0778-375d-b536-2aac7ca85ac1.roa (raw, json)
Hash identifier:          8yYl5apgoy+9yTcWL73HBYzumHn9eWVqQB/ZhORAZPk=
Subject key identifier:   74:24:C2:8D:2C:98:44:11:11:72:01:9F:3F:A0:77:9D:A5:4B:75:9E
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339D61CAC5619DFCE1AD940
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1ff05e1f-0778-375d-b536-2aac7ca85ac1.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.38.80.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:d6:1c:ac:56:19:df:ce:1a:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=34d38140-53ee-46c0-a609-de86c7f99a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3b:5b:e3:8f:0c:43:3e:9a:54:13:f8:cb:df:
                    2a:98:b7:b8:96:29:2d:3e:91:5d:d7:4f:db:dd:d9:
                    15:55:b9:05:76:94:6a:38:19:cf:d6:33:60:bc:a0:
                    82:cd:06:36:2a:4b:eb:24:3f:1e:0b:c4:55:4b:70:
                    78:24:65:91:a8:e0:73:31:ec:19:d4:b3:4c:e7:e7:
                    dd:f3:50:fe:e1:c3:cb:9c:0f:53:28:cf:0f:b5:74:
                    66:5e:23:c2:f2:3d:b3:6a:05:74:c5:80:04:13:11:
                    bc:57:c6:25:67:4f:2e:89:bc:a7:2a:e0:13:ed:54:
                    7e:46:1a:76:06:ba:c0:15:96:01:ae:64:18:7a:f0:
                    57:e4:78:8d:fc:b9:30:b6:62:27:9d:30:bf:3f:0f:
                    50:75:6f:37:ef:02:7f:82:7a:72:32:bc:e1:18:2a:
                    a8:fb:17:b2:dc:72:64:d7:47:5c:be:23:5d:c0:ef:
                    ae:0e:12:89:a2:89:16:94:d8:9e:2b:3c:60:f2:0f:
                    fb:ec:a3:03:84:84:ed:74:b4:f3:2a:8b:8e:41:95:
                    26:c1:77:02:b2:b1:95:f4:0a:14:14:05:60:ab:f5:
                    bc:e2:d3:d1:55:3d:bd:c0:1c:7a:50:a3:ff:e9:5d:
                    2d:8c:da:c5:4c:1d:50:d0:a1:7a:36:bc:36:37:56:
                    86:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:24:C2:8D:2C:98:44:11:11:72:01:9F:3F:A0:77:9D:A5:4B:75:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1ff05e1f-0778-375d-b536-2aac7ca85ac1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.38.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:63:6c:b3:3d:00:99:aa:73:13:ff:c7:75:f7:81:8c:ab:76:
         a5:73:5d:23:27:41:03:d7:c4:86:3b:28:fc:44:3a:1e:f1:cc:
         b1:6b:92:49:a4:d2:d8:f0:dd:31:ed:f7:f0:58:96:c4:26:56:
         6a:ec:ef:50:ac:e1:c7:8b:15:37:7b:f4:97:5f:f6:b2:b7:ff:
         ba:eb:10:0b:c9:11:28:b9:c9:ae:81:77:0b:19:9e:3c:26:82:
         bf:f1:8c:8b:dc:95:61:b5:20:74:10:11:a7:f3:b8:ad:7a:07:
         99:3d:81:5c:37:76:9e:9e:06:3b:c1:28:a4:f4:37:a9:95:0f:
         ab:bb:30:f3:b1:b6:5f:09:ad:53:02:39:73:6a:2e:e1:ee:51:
         2e:33:f9:70:51:c0:cc:1c:ba:6d:ba:9b:99:7b:84:f3:7e:ef:
         0a:8c:7a:22:49:24:5c:1e:b2:b2:66:5b:0a:a6:35:8d:f4:a4:
         5d:f2:42:df:00:0d:1e:76:3c:c8:8f:44:70:9c:02:1d:a9:6b:
         f0:1e:d8:8a:62:b4:66:cf:9e:dd:f1:8a:7f:d7:1c:41:ee:9f:
         7a:ea:6d:a1:ed:f2:16:69:4e:80:be:cc:ed:64:e2:69:56:e3:
         14:58:9b:86:39:e3:99:c6:5f:e4:50:e1:e6:ee:21:3c:9d:c3:
         d2:21:3a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:39 2025 by rpki-client on console.sobornost.net