Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/333cc87a-ba19-3d00-9f69-3b74f528f8d8.roa
File:                     333cc87a-ba19-3d00-9f69-3b74f528f8d8.roa (raw, json)
Hash identifier:          BvARgPHDQzE5ugErhBkPcVCHBOh/E2XBS35RMhdRkxg=
Subject key identifier:   10:BE:BE:08:78:1E:CC:2F:FD:E9:02:36:0A:DE:A9:A7:9F:B1:54:94
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339DA32F21E5F377B8D4200
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/333cc87a-ba19-3d00-9f69-3b74f528f8d8.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.32.48.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:da:32:f2:1e:5f:37:7b:8d:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=4c2a7580-a244-4c78-ae7b-d00f3ae443f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fe:3a:a2:1f:ac:d7:40:50:1c:30:ef:54:d2:
                    f4:cb:d6:d4:4c:d2:90:2c:be:0c:63:32:a9:25:9d:
                    43:42:8c:57:51:c6:5e:e4:22:65:ff:47:e4:8a:08:
                    9c:22:c5:0b:da:4e:f4:7b:11:1f:f2:ad:0f:30:b2:
                    a5:53:ec:7e:8b:f2:d9:ff:83:87:bf:4a:ba:1c:8c:
                    00:37:f9:cc:d9:54:48:a2:6d:8d:23:d9:06:99:3f:
                    af:c9:6b:1a:56:2f:82:af:ab:e4:60:6d:fa:e5:86:
                    a3:8b:ff:ca:a3:22:eb:e2:17:cc:54:be:7d:da:ad:
                    ff:75:ff:a8:93:f9:d2:8b:7e:60:c0:be:ce:91:a0:
                    8d:f7:d9:82:54:ed:7a:c6:5e:84:e0:6c:b4:d1:b6:
                    e7:28:6c:15:e2:4e:29:af:6e:33:c2:23:f0:b0:0a:
                    59:54:ea:9c:1d:f1:71:1d:70:ca:c9:78:ca:e1:56:
                    2d:5e:d8:6a:5b:99:98:2a:e2:14:97:08:47:b7:8d:
                    46:68:81:ed:ea:3b:e9:7c:9f:84:db:98:b0:68:56:
                    09:6f:02:e7:22:5b:e3:17:c3:12:47:b8:a0:c2:c9:
                    3f:11:06:cc:c4:e0:fc:1d:ca:3f:0e:98:1c:2f:4f:
                    40:52:88:9e:a8:ad:03:cf:61:8f:d0:c2:49:f0:ae:
                    49:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BE:BE:08:78:1E:CC:2F:FD:E9:02:36:0A:DE:A9:A7:9F:B1:54:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/333cc87a-ba19-3d00-9f69-3b74f528f8d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.32.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:75:a0:17:bb:71:e8:55:07:87:14:ee:c5:1d:a9:74:66:74:
         15:ea:1c:b2:fb:1e:10:ea:3d:78:b7:ca:f3:55:d0:44:fd:58:
         ca:9e:19:76:02:62:2d:1d:8f:00:62:6e:dd:78:c2:cb:05:ee:
         2a:3d:1b:38:03:f6:70:b3:5f:98:f1:65:4c:bc:1c:a6:05:0e:
         7c:bf:b5:85:ff:9d:db:d7:69:01:f7:19:14:64:04:a0:0b:c4:
         f1:9b:2e:0a:09:b3:1f:e1:ad:cd:4c:b1:6e:f9:8b:f8:78:3e:
         de:f6:f5:39:16:06:d2:7c:ea:bb:50:cb:45:90:d3:63:65:76:
         db:01:b0:eb:4b:93:41:f5:07:cd:54:47:8c:c2:27:fe:c7:9b:
         ce:96:03:73:d5:11:74:c4:59:e0:5d:2e:dc:bd:54:d3:ca:34:
         f4:61:46:3e:2c:4e:33:20:2b:23:de:ee:9f:9b:43:ae:2f:b7:
         07:f6:d1:82:12:dd:18:a6:b3:5f:c0:b3:cd:6a:02:2c:e5:6a:
         01:3f:b4:1b:d2:28:76:ff:1f:57:84:a4:8e:e2:a9:6a:e9:45:
         05:ed:9d:c9:60:af:b1:94:7a:ba:79:6a:62:6f:52:6f:65:67:
         af:03:64:b2:a0:9c:92:4f:73:ff:c8:5e:e2:89:96:d9:25:0a:
         38:8b:2e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:39 2025 by rpki-client on console.sobornost.net