Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/786eccd0-bc5c-35c4-a929-23f5dc724ddb.roa
File:                     786eccd0-bc5c-35c4-a929-23f5dc724ddb.roa (raw, json)
Hash identifier:          GZOaedPc6lHKAQrTLnmveekj5jUKLB1MeN5zO2tn1Ck=
Subject key identifier:   40:AB:1B:39:30:EB:81:8F:7E:82:2B:7C:FF:91:FC:8B:DF:65:37:D9
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339DDC1A4C68B7EA9F2B940
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/786eccd0-bc5c-35c4-a929-23f5dc724ddb.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.37.16.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:dd:c1:a4:c6:8b:7e:a9:f2:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=3ffe8eb7-7f95-4cb7-9655-b5a81a8085fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:50:9e:e4:78:60:05:27:8e:fd:a5:5f:3e:4f:
                    ba:ba:97:0b:cd:fa:18:24:d7:ee:99:d0:98:8c:95:
                    24:f1:13:e1:d3:e9:4f:28:96:64:a5:b0:81:67:04:
                    4f:54:14:9f:82:20:24:04:03:69:a9:36:7c:94:ea:
                    f8:8b:89:aa:77:70:ae:bb:23:3b:11:c3:a4:2b:da:
                    3f:c6:0e:44:b5:30:d7:89:c9:2a:6c:58:27:bd:ef:
                    d3:e8:39:5d:8c:6e:e2:b5:af:c6:74:68:b1:6e:0f:
                    dc:9d:6f:f2:e5:8e:8b:14:ec:05:c7:69:55:e3:8d:
                    74:de:9b:5c:f9:a9:cc:62:d5:2e:48:e6:0f:d5:91:
                    56:39:5a:a2:88:3b:5e:ef:35:79:d4:9d:ed:10:e8:
                    f5:b7:86:b2:b8:e6:eb:9d:e7:0c:b2:65:f0:43:c2:
                    0c:58:62:51:ad:e0:0f:58:15:c7:bd:76:be:b7:83:
                    fe:71:0f:5c:18:19:16:04:5b:bd:6a:b3:a8:5f:89:
                    23:79:e6:44:ae:8d:b5:6f:0c:e8:2d:d8:b2:ca:70:
                    60:f0:93:55:0f:99:59:c0:3e:58:14:73:18:7b:bf:
                    67:f8:2b:74:86:b7:7d:91:6b:09:0a:7a:1b:ba:0a:
                    1e:ee:1b:ee:00:4f:b3:45:d4:bc:9c:b6:10:bd:8d:
                    8b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:AB:1B:39:30:EB:81:8F:7E:82:2B:7C:FF:91:FC:8B:DF:65:37:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/786eccd0-bc5c-35c4-a929-23f5dc724ddb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.37.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:e5:c3:0b:d6:dd:97:8e:fa:02:ff:fc:d0:18:ac:be:26:0a:
         4a:06:c9:4c:77:3c:0f:0a:e8:82:bb:12:e8:50:36:4d:27:67:
         ae:5e:fe:fa:3b:86:08:5e:29:5d:fb:49:d6:20:ce:a7:d4:d8:
         ca:cf:95:f4:bb:f6:16:65:6f:d4:17:e6:02:cf:e5:b5:a2:ea:
         45:2f:34:e4:06:d0:28:b9:27:ba:21:2f:e3:43:f2:8b:29:03:
         83:b8:fa:77:ee:61:e3:33:8c:b6:ef:c9:97:32:ed:4e:17:2b:
         bf:f8:dd:a8:a3:fb:41:f9:2d:c3:00:b8:e2:2c:d6:7c:3b:f6:
         b8:e8:13:96:36:2d:2d:3a:d1:01:fd:b7:a0:cb:34:0c:73:56:
         f7:03:d6:fe:a6:b4:e3:5d:a8:ee:81:dc:cb:16:bb:9f:10:e8:
         c2:a4:25:eb:e3:a1:d7:46:d2:f3:c3:81:dd:0e:4e:9b:79:a0:
         d8:62:29:d7:e3:65:2a:bf:93:07:46:e5:fc:78:0b:c5:5a:31:
         75:2a:8d:f9:ef:42:bb:d0:5d:4c:67:70:9b:00:19:ac:6f:45:
         a2:17:ed:14:8e:c4:29:bc:84:25:c8:e1:b7:ee:b7:f6:53:c0:
         af:f7:17:35:e5:f2:04:f7:90:00:2d:2b:94:df:41:f1:e7:0c:
         b6:cb:f0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:39 2025 by rpki-client on console.sobornost.net