Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7a38d14f-c093-3a7f-a163-468173dec5cf.roa
File:                     7a38d14f-c093-3a7f-a163-468173dec5cf.roa (raw, json)
Hash identifier:          FvTdzZb2+YtPZWOrL70ESVKTbm/8fnF9AD0e+IHQjm4=
Subject key identifier:   0F:42:CA:1A:6B:E4:B9:88:DB:A4:5F:D1:F8:8C:A0:F9:F3:C2:14:C6
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339D8D88E8F8A5DAD125C00
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7a38d14f-c093-3a7f-a163-468173dec5cf.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.35.112.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:d8:d8:8e:8f:8a:5d:ad:12:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=5a8bd47e-b84c-4c19-a8e0-dee05768906c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:24:7d:e6:37:f9:d6:d5:7d:96:d2:8b:b9:5f:
                    c8:81:37:6f:ee:0e:f6:3c:0d:d2:4d:12:e4:17:78:
                    6d:d0:74:80:70:8f:c2:e7:e6:c7:4a:3a:05:31:12:
                    3d:a9:7c:3d:ce:20:d9:bb:9d:0d:7c:a3:de:0b:5e:
                    d7:a8:5a:1f:a1:ef:90:fb:ee:15:19:a3:98:ab:8d:
                    77:57:41:70:7e:15:3f:2e:5b:10:c4:e7:39:90:fe:
                    65:66:8f:06:87:96:2a:ca:83:11:45:33:d3:7d:47:
                    53:b3:26:20:b9:a1:54:16:a7:b6:b3:05:0b:48:7f:
                    6a:6b:c8:3a:96:a8:10:9a:b5:78:b8:2f:76:43:53:
                    62:33:d5:c0:97:1d:8b:bf:a0:15:43:cd:78:24:84:
                    87:1a:9a:16:db:42:d6:bc:26:3c:89:d7:c1:c9:23:
                    b8:f1:78:f8:40:42:33:55:dc:4a:93:c4:1c:ca:d8:
                    60:2e:c4:a3:c9:4d:54:65:52:a7:4e:fe:1c:0c:55:
                    98:36:bc:02:5b:00:6a:3e:70:6e:f2:b1:ce:54:e8:
                    c4:0f:26:dc:83:81:86:e0:66:6f:3f:a1:4a:d5:17:
                    43:c2:f6:fb:f7:28:25:4a:cb:4c:74:b8:f6:f5:e9:
                    6c:ef:28:41:a6:e9:99:85:19:ba:16:ce:f2:18:a6:
                    83:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:42:CA:1A:6B:E4:B9:88:DB:A4:5F:D1:F8:8C:A0:F9:F3:C2:14:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7a38d14f-c093-3a7f-a163-468173dec5cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.35.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:ad:68:f1:80:c2:0e:4e:8e:f0:ee:e6:c0:17:23:b9:3e:1c:
         30:74:a4:fd:5a:d9:1a:91:4f:d3:8d:12:05:68:07:15:1e:90:
         bc:12:42:32:10:01:97:89:cf:d5:b5:e8:0e:29:cb:cc:a6:80:
         95:c1:67:56:42:94:cc:4e:aa:9f:a5:87:79:29:46:dd:f8:a9:
         b3:d2:78:7b:eb:eb:00:f2:f8:6e:ed:94:75:b3:25:44:05:da:
         ba:11:43:81:eb:30:0b:cd:89:55:b5:c2:22:fc:03:e9:19:52:
         6d:da:10:2b:6c:a4:a4:22:64:d2:ff:3f:c4:02:6e:82:dc:77:
         44:00:a8:62:da:6f:f4:c6:42:36:08:9b:55:43:b8:14:6e:83:
         4f:3a:a8:9b:8b:42:7e:b4:c3:59:61:ce:97:4c:07:7b:ae:20:
         d4:4d:3b:98:7a:63:de:6c:f2:47:5e:2c:df:bc:03:5f:d5:c8:
         28:86:a7:79:00:df:44:39:39:6e:cf:13:05:0f:18:4c:6b:28:
         a8:66:2f:7a:60:7e:ef:5c:2b:70:c4:51:d7:2d:9d:03:6a:4b:
         ed:6d:c2:65:25:a6:9f:ad:bb:00:ea:27:02:5b:ee:21:d5:3f:
         b3:8f:37:91:03:96:41:1c:35:e2:94:1a:11:d9:a8:24:cb:5a:
         06:aa:2b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:39 2025 by rpki-client on console.sobornost.net