Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6ee88bb1-8ea1-38be-b960-6c6b6e9a602a.roa
File:                     6ee88bb1-8ea1-38be-b960-6c6b6e9a602a.roa (raw, json)
Hash identifier:          d10DDnqbFyYI9CWLkhoPqP/Ar0fROH3V0agloGdD14w=
Subject key identifier:   E3:53:0C:45:6C:44:0D:FB:98:D4:2D:9F:F3:08:03:D1:14:0A:E4:72
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339D9AA53E9814B96662740
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6ee88bb1-8ea1-38be-b960-6c6b6e9a602a.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.47.0.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:d9:aa:53:e9:81:4b:96:66:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=ce4ceab5-5d59-4897-83fb-ed9835fd7ef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ce:32:ac:c3:7a:ae:56:b3:71:71:6a:c0:d7:
                    5b:4e:78:4b:72:b1:98:a5:a0:db:6c:25:cb:0a:83:
                    42:12:91:9c:c7:f5:a2:19:2a:16:61:a9:38:f7:39:
                    72:5c:2b:f7:f4:99:84:e1:73:fb:4a:82:69:9a:f5:
                    f7:5b:61:96:f4:25:db:16:99:49:79:4b:06:01:98:
                    fb:0f:5e:d2:78:a4:fb:b0:04:8a:0c:56:29:b4:37:
                    87:19:87:9d:df:9e:c4:33:5b:fb:a7:de:8c:9f:84:
                    71:ab:7f:17:61:52:cc:d8:fa:f1:92:d8:3e:6e:d5:
                    24:7a:e8:19:c8:60:cf:5e:cd:db:04:68:c5:1b:94:
                    99:47:ea:8e:9f:e1:8b:f3:c4:cf:73:d5:80:43:64:
                    ed:8e:ad:5b:f3:fa:39:e4:9b:5b:9f:8c:f4:0a:cc:
                    95:23:bf:d5:8c:09:15:53:a3:71:bb:54:b7:ec:d2:
                    24:2f:c7:78:02:e5:a1:7d:48:57:ed:74:c3:ef:a0:
                    dc:0f:d9:ce:22:87:46:c0:26:ed:80:3e:cc:38:e6:
                    60:9c:9b:1a:47:66:ef:70:eb:e0:2e:64:81:b0:3a:
                    41:8b:50:a5:78:ee:05:ff:97:dd:93:85:0b:99:bf:
                    75:f5:08:c4:69:71:38:50:37:1b:fd:26:91:1e:1c:
                    58:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:53:0C:45:6C:44:0D:FB:98:D4:2D:9F:F3:08:03:D1:14:0A:E4:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6ee88bb1-8ea1-38be-b960-6c6b6e9a602a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.47.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:f1:63:86:30:9d:ac:a7:9b:35:4b:7d:cb:60:75:a8:76:21:
         ff:88:83:cd:af:7f:5b:71:7d:40:44:cb:77:71:fc:92:04:a5:
         f9:5d:fa:94:33:c2:50:23:f5:ef:2e:89:52:06:ca:a6:34:23:
         23:42:27:43:23:92:0b:fa:65:21:78:33:52:33:31:74:73:7b:
         e8:b5:d6:c7:fb:52:77:66:b8:ef:73:f3:a9:54:57:ee:d8:6f:
         4a:2c:9e:f0:bd:28:d2:fb:bf:40:fc:47:63:14:aa:fd:79:ee:
         fc:30:93:9b:7c:d2:8f:01:c6:89:d4:dc:0b:08:57:c8:a1:54:
         de:83:25:9a:5b:0e:54:3b:b3:6b:79:6e:73:10:a2:25:f5:34:
         07:5c:53:6a:46:fe:c6:ad:d9:d0:da:3a:3f:d4:8a:60:9f:4c:
         e9:3f:6a:96:6d:60:55:76:80:b0:73:be:3e:bb:31:6a:d9:45:
         68:c3:ba:c0:51:b8:12:bf:b1:b1:70:b0:33:82:38:2e:a6:ae:
         3c:5e:b7:f0:d9:76:df:0f:00:b8:07:ff:40:24:6d:93:b9:8f:
         5f:ad:9e:2a:09:32:af:0b:b3:62:b4:91:a2:70:b8:dc:a5:7d:
         97:4d:92:32:6d:85:11:eb:73:59:6b:69:c8:57:68:9e:f0:f8:
         3a:66:91:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:39 2025 by rpki-client on console.sobornost.net