Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b28f5a57-c421-3cf0-9b2e-87e3c0ed446f.roa
File:                     b28f5a57-c421-3cf0-9b2e-87e3c0ed446f.roa (raw, json)
Hash identifier:          +KITfMrmOD7YP2GKNaJAVsz3yOC288UckoQVoHpiaQQ=
Subject key identifier:   32:B7:D0:93:CE:66:69:65:AD:C6:1A:24:C4:6F:28:AE:FD:B5:BD:49
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339C8C7A1528C174C85C200
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b28f5a57-c421-3cf0-9b2e-87e3c0ed446f.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.52.96.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:c8:c7:a1:52:8c:17:4c:85:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=eef4de48-b2c0-4106-b2c3-4de26e4e49c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:90:6a:ee:b3:57:7f:ea:16:67:6c:34:2c:6a:
                    97:26:8b:a7:48:de:1a:8f:63:15:a1:50:de:47:01:
                    aa:17:09:7d:c9:77:f4:ac:54:b4:a5:3e:e3:1d:9a:
                    5b:d0:53:fe:f7:1e:42:44:cb:f1:5b:45:60:14:13:
                    50:7f:f1:53:08:11:03:5d:87:81:7c:21:e5:fd:a1:
                    ca:6b:bf:21:a4:03:e6:d1:c6:c6:a0:33:b8:13:e2:
                    26:dc:c2:5e:93:2a:3f:8f:34:2e:25:ae:e7:df:99:
                    12:43:c3:d5:3e:c3:b1:b2:6b:66:a3:1d:f2:ac:0b:
                    09:75:50:0d:0f:f4:b5:e9:a4:7f:56:3e:d0:cd:b7:
                    d8:42:88:80:e9:c3:83:5c:a5:e1:e1:17:54:31:e1:
                    18:e6:db:f2:1a:c0:4e:1b:20:b2:4e:16:a6:0a:2b:
                    e1:1b:6a:e6:b8:8d:f5:b2:ac:a7:9a:b5:88:93:50:
                    dc:30:ff:fd:1e:7c:7f:99:bf:c2:e4:57:3f:af:f8:
                    3c:c1:9a:1f:d9:5f:6c:25:ef:27:26:c6:25:24:e2:
                    a1:39:35:7b:38:02:ab:31:6c:af:4b:9a:c7:c9:09:
                    ce:4e:8d:46:1c:51:b5:74:dc:b5:52:4e:65:98:6e:
                    81:c8:43:e6:a0:29:09:e8:8f:32:29:08:57:39:87:
                    61:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B7:D0:93:CE:66:69:65:AD:C6:1A:24:C4:6F:28:AE:FD:B5:BD:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b28f5a57-c421-3cf0-9b2e-87e3c0ed446f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.52.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:30:18:ec:5b:09:56:ed:d9:d1:99:a9:5d:04:85:d0:1e:aa:
         4e:60:8c:6a:7e:a9:27:f5:e3:29:93:28:a7:b4:03:fe:06:02:
         64:31:4e:af:4e:4f:5b:6e:8f:78:07:24:b4:8d:5e:fd:48:db:
         56:1e:5e:4a:dd:88:8b:fb:c8:b6:e3:4d:26:df:96:a1:16:bd:
         4c:de:43:c5:d1:a4:27:4f:de:94:67:34:b7:88:87:13:b0:1d:
         dd:86:f9:9d:b6:63:f2:06:3f:1f:9f:39:1d:03:ea:ff:a0:12:
         74:3a:ad:0f:86:83:6c:38:71:52:f1:13:cf:22:51:5f:29:82:
         b5:66:20:5e:bb:9d:3a:77:81:90:3a:ed:f1:6c:34:95:d7:41:
         45:76:28:f3:7e:df:71:6e:16:a0:d2:2f:ef:b4:29:e4:d3:69:
         91:d4:4c:9a:74:5d:0f:04:69:6c:25:03:77:93:52:51:94:a4:
         ac:ea:9e:07:21:22:c7:0f:78:33:81:19:89:4a:9e:8f:a9:6e:
         bc:4c:67:03:c0:f9:c3:7c:11:be:2d:8b:63:83:e2:ec:c7:37:
         3d:66:08:0c:1d:73:83:29:78:b0:3c:81:eb:7d:64:f7:04:f2:
         92:2a:a5:1d:90:0b:57:be:06:f3:a1:d9:cb:05:bc:51:25:9d:
         5b:74:fc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:39 2025 by rpki-client on console.sobornost.net