Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/27ff5311-a915-3e09-a9ae-83b8a539bb0b.roa
File:                     27ff5311-a915-3e09-a9ae-83b8a539bb0b.roa (raw, json)
Hash identifier:          zW4eyoFTlhxfYPYTxY9WAW700fM3cPldUcXjsN+kXnU=
Subject key identifier:   DA:F6:F3:99:30:86:A2:F6:0F:46:4F:8C:BA:7C:58:FE:E0:8E:04:47
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339DB1C93A30F42DC644E00
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/27ff5311-a915-3e09-a9ae-83b8a539bb0b.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.38.0.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:db:1c:93:a3:0f:42:dc:64:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=006ae219-59a4-4ad3-b168-87041c448019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:93:6f:13:ce:22:a1:41:9f:24:55:5a:5f:f4:
                    6b:d6:bd:36:8c:21:81:3c:8b:c8:ec:79:1f:8d:b8:
                    bf:a7:0c:6c:58:d5:18:9a:78:e7:2c:14:e2:15:e5:
                    a8:cb:71:9e:5a:44:51:25:8d:c9:ae:40:fc:18:9c:
                    9d:18:5d:4d:8d:70:4d:0e:8a:05:bf:1c:10:4e:2d:
                    90:43:1d:85:f3:2b:f7:98:1a:89:d0:de:49:9a:88:
                    8c:43:49:f5:e0:0b:dc:b4:85:7f:f9:ff:ff:5c:e0:
                    d5:87:be:e8:43:02:b7:e5:7c:db:e7:f3:be:6f:e3:
                    04:d0:2c:c2:79:ea:5d:dd:cd:d9:53:16:9f:30:02:
                    9f:60:42:b2:ec:9d:2d:7e:57:d2:ea:07:38:ab:f0:
                    f2:10:c6:23:76:4a:17:01:3b:b4:5d:75:15:ad:f6:
                    15:52:ae:8a:c2:29:ec:ad:ee:2e:d9:dc:d8:d7:85:
                    b5:ea:71:8d:be:6e:4e:fa:ed:5e:99:78:5f:97:01:
                    2f:66:e4:6a:b4:3c:ee:4d:f1:7d:52:93:69:66:22:
                    5b:ef:2f:57:d0:d0:b2:44:e5:bc:ec:c6:76:30:60:
                    54:4d:99:7c:33:1c:45:97:d1:b3:76:88:ac:4e:99:
                    7f:e5:83:27:c5:ff:04:82:aa:1c:4d:df:84:48:00:
                    0a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F6:F3:99:30:86:A2:F6:0F:46:4F:8C:BA:7C:58:FE:E0:8E:04:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/27ff5311-a915-3e09-a9ae-83b8a539bb0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.38.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:0f:bc:56:5e:12:f8:20:95:aa:7f:97:bc:22:1b:92:34:2f:
         8d:1c:b8:e1:9d:68:af:ab:35:a0:9b:73:12:6c:5e:9b:37:91:
         56:dd:6b:70:4d:dd:81:bc:e8:7a:f0:e9:fd:15:85:64:38:0c:
         f9:84:b4:22:10:17:a4:96:37:1b:8d:30:b6:b3:8c:00:0b:5f:
         d4:e2:6c:ef:63:fa:75:0d:87:a8:c3:89:6b:8f:ca:db:1c:7e:
         41:d1:92:da:f6:9c:77:c9:56:2e:5c:f9:cb:38:a1:be:23:2b:
         e3:2d:9e:d3:23:50:02:f8:70:f7:8b:e0:ef:46:0b:b7:7b:de:
         0c:5e:3e:73:8a:32:32:9a:1c:03:b5:5c:0b:7d:ce:26:42:d9:
         b3:8d:c6:7a:ae:d7:be:0d:66:da:2e:b1:25:a4:29:73:8a:7c:
         ba:c0:9a:f8:64:30:a1:17:21:a0:86:10:0c:c6:4d:f2:70:27:
         38:68:0b:6e:32:cb:ef:e7:b8:0e:84:22:b5:de:85:47:42:ba:
         91:b4:21:ae:4f:31:82:b2:78:a0:aa:88:b6:a7:4a:d8:d6:f4:
         15:a7:1f:a6:f2:d0:f6:0b:85:c0:4a:87:91:16:dc:2c:ed:94:
         e2:a4:c8:5c:41:f3:8a:f0:41:e2:f0:b9:2c:96:d3:4b:7e:3c:
         9c:d0:11:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:39 2025 by rpki-client on console.sobornost.net