Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9310a4a6-96e3-39c0-aea8-fa4dc42d8f41.roa
File:                     9310a4a6-96e3-39c0-aea8-fa4dc42d8f41.roa (raw, json)
Hash identifier:          a22zr4rUGc+fAfp6XWOvldEfyP9W+QbZGioFYhIXeCs=
Subject key identifier:   D1:11:00:79:24:CF:2D:D8:2D:5E:59:4E:D5:7F:CF:77:16:5A:0A:E2
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339D9C81E04083E0450A8E0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9310a4a6-96e3-39c0-aea8-fa4dc42d8f41.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.37.64.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:d9:c8:1e:04:08:3e:04:50:a8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=607d68f8-d0e6-4930-ae51-4501f59f46a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:29:c6:c0:d1:2a:80:88:af:ba:e2:f8:7c:23:
                    a6:8c:f6:a9:6d:b4:a5:a0:11:3b:1a:d9:3e:b6:ab:
                    3a:6c:0f:5b:e9:2e:b3:f3:30:95:9b:b9:d7:b0:01:
                    7d:30:0e:87:eb:b1:c4:03:9c:29:25:68:a9:32:8a:
                    5b:b0:e2:e6:96:d5:f3:ad:52:0f:06:11:97:34:d6:
                    77:6f:39:70:2b:37:1a:c5:21:d8:f4:0f:0e:fa:15:
                    a5:d2:44:f5:ef:7d:ce:cc:0a:d2:d9:e0:0f:1d:93:
                    10:9d:03:61:25:de:52:44:ba:c8:78:eb:03:5c:07:
                    f1:b8:dc:89:87:46:87:68:5e:59:10:e0:7e:d4:0e:
                    a7:63:d9:84:7d:da:fc:ba:26:aa:04:36:2f:6c:a1:
                    07:7d:63:81:a8:b7:9b:f6:24:b4:09:0f:c8:48:be:
                    6e:36:37:63:32:0d:30:05:b4:f0:34:87:58:c6:e7:
                    2e:e8:59:d9:be:74:1b:3d:c3:4e:83:34:05:52:9e:
                    22:6c:ef:92:70:f7:93:23:10:48:43:27:19:b0:68:
                    3a:8e:f5:48:85:10:23:8e:8e:38:6f:7a:d7:53:f5:
                    73:60:9c:11:14:ed:eb:94:a0:8f:3f:c0:5c:00:fd:
                    c2:65:de:6c:9c:87:cf:cd:09:f9:ea:0e:ac:d6:00:
                    8d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:11:00:79:24:CF:2D:D8:2D:5E:59:4E:D5:7F:CF:77:16:5A:0A:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9310a4a6-96e3-39c0-aea8-fa4dc42d8f41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.37.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:ae:fa:d0:a1:e4:8f:8a:e7:3f:98:40:be:90:f1:f5:dd:28:
         0c:da:e0:5a:02:b3:ff:9a:16:a3:b3:c1:5a:f8:87:c0:b8:8c:
         43:ad:fe:ca:a5:8b:59:31:9c:34:ad:94:20:b2:81:42:44:10:
         d1:e4:e1:3a:d2:71:f0:de:83:fa:99:96:c6:d6:a5:5a:c5:6f:
         93:ef:8d:c7:4a:7e:68:89:cb:ce:ef:71:6f:a7:28:0a:d7:d6:
         c7:f4:9b:e5:e9:bf:29:d4:5c:bb:8b:38:36:4c:b2:17:5f:6a:
         77:95:1e:8c:38:a4:7a:e7:b2:eb:d9:6c:d2:73:2e:d1:80:9e:
         ac:9d:da:fe:a1:1f:52:02:d2:4d:89:f2:ce:e5:81:82:c5:25:
         96:88:c4:d6:0a:99:59:6f:30:f1:b1:54:81:a8:07:16:ac:b3:
         51:13:29:84:59:1a:22:03:80:88:9a:a3:8d:ba:69:c4:ab:bc:
         f3:26:88:99:39:58:35:63:14:db:cc:a8:e7:53:71:b2:10:0c:
         d1:c9:24:c8:ae:d3:3d:c7:2f:22:d6:e0:4e:9d:cd:d2:bf:fb:
         e6:58:66:36:02:9d:42:8a:22:61:91:a3:19:db:48:3d:f7:b8:
         37:f6:28:ce:ea:54:d2:49:0c:a1:f3:16:30:5a:f0:a1:9c:f6:
         c6:e7:8a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:39 2025 by rpki-client on console.sobornost.net