Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/96274b94-74ed-3d67-9ac2-ce24f87a9057.roa
File:                     96274b94-74ed-3d67-9ac2-ce24f87a9057.roa (raw, json)
Hash identifier:          4pjIdfz2L/geWyz/ePVek4PLXw1sz2igL3q1lN0+pvc=
Subject key identifier:   7F:42:A5:88:8C:86:41:D5:1E:99:65:A8:4D:2E:92:E1:21:36:80:D2
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339D1FD2FA5673A3285B780
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/96274b94-74ed-3d67-9ac2-ce24f87a9057.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.56.144.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:d1:fd:2f:a5:67:3a:32:85:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=b7f76f1c-9ae4-4efc-ad60-ed2914a48b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a9:52:4c:5a:a8:86:25:f4:02:4b:bc:e8:9e:
                    f7:e1:4c:12:26:b4:f5:67:af:cf:4b:4a:e7:43:da:
                    97:46:66:0c:b4:41:ee:e2:e6:44:97:56:de:3a:65:
                    b6:76:28:e4:37:b6:37:10:57:17:09:55:b8:fd:e3:
                    30:a8:db:df:1d:dd:10:53:38:bf:13:75:bf:a6:a0:
                    b5:17:f1:dc:37:71:5f:d3:0c:a2:e8:53:3f:15:52:
                    16:25:4c:51:54:a6:df:6d:d5:ff:b2:dc:3c:64:73:
                    d2:0b:2c:96:18:bb:7a:b9:c7:71:57:d0:d5:b7:0e:
                    03:45:77:7a:4f:21:b1:4a:e1:8c:f0:21:e6:13:29:
                    10:1f:af:43:b6:a4:be:99:2e:7f:1c:ef:7d:1d:05:
                    cf:b0:30:90:d0:30:ac:4e:4c:f5:f4:16:cc:e3:b1:
                    ca:ca:22:da:37:96:f4:ce:b5:8f:1a:b5:46:28:f1:
                    7d:9c:25:b7:99:77:e2:3a:f3:55:90:f4:80:8d:3f:
                    3d:c5:6d:cb:2c:dc:87:21:7c:7b:af:73:cf:d9:20:
                    1c:08:6f:89:32:df:25:05:71:c0:af:31:aa:7a:41:
                    72:77:c1:e2:dd:56:1c:20:82:55:5e:65:af:31:08:
                    76:e5:6d:84:fd:67:2c:12:d6:22:42:72:7a:ea:13:
                    f1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:42:A5:88:8C:86:41:D5:1E:99:65:A8:4D:2E:92:E1:21:36:80:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/96274b94-74ed-3d67-9ac2-ce24f87a9057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.56.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:84:7f:e0:dd:e1:f8:48:e0:87:41:18:05:0c:9e:fe:0b:1f:
         1e:18:39:8c:6e:a9:2c:22:fb:00:ca:92:f5:a7:90:c9:f7:26:
         0e:72:88:76:a7:94:11:28:09:67:35:9a:f7:62:53:17:6a:44:
         52:da:6b:8f:9a:3f:ee:b6:15:52:af:72:a7:eb:58:e8:06:d7:
         bc:0a:8e:75:e9:b5:a1:87:60:e2:ec:4d:84:28:9d:cf:a5:e3:
         19:c9:9b:58:47:f0:e9:10:eb:6b:31:34:06:5f:20:4c:a9:49:
         33:a2:41:24:71:cf:13:34:62:e4:c3:12:8a:47:8f:9f:4e:e4:
         c2:41:a7:57:1d:67:a1:5d:94:f0:dd:48:33:f0:29:13:d4:91:
         63:be:fd:55:d6:f5:94:d5:97:92:52:90:c7:bb:db:6f:bc:90:
         5a:a4:18:e9:61:9b:1a:ff:5d:35:ab:e3:43:18:91:fd:02:3f:
         32:90:d2:3a:86:fa:f9:32:e1:8d:5e:72:bb:e2:22:92:c6:d4:
         d5:d3:b3:27:10:76:31:dc:91:d8:43:05:98:a2:01:66:02:8c:
         ee:14:00:e8:0f:42:61:1b:9a:a1:3b:64:3b:51:9d:30:2e:5d:
         d0:a3:18:f8:5c:e0:be:62:eb:ab:5a:e6:d0:54:cc:c6:8a:6a:
         75:f4:74:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:39 2025 by rpki-client on console.sobornost.net