Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c2854c40-c6e9-3121-bb31-5b8d1ac7cdf8.roa
File:                     c2854c40-c6e9-3121-bb31-5b8d1ac7cdf8.roa (raw, json)
Hash identifier:          Nfwohp+WR46EK7X66akKgcLGUa4itkadnqOROdq4eSU=
Subject key identifier:   EB:0F:59:70:BC:ED:C8:57:0C:88:3D:06:E9:8C:EF:4B:5F:48:9E:3D
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339CDB2587F76007BFE185C
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c2854c40-c6e9-3121-bb31-5b8d1ac7cdf8.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.47.144.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:cd:b2:58:7f:76:00:7b:fe:18:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=ab5b9364-21a5-4508-b76b-f3db16123c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1f:54:69:df:42:a9:1d:e9:5b:da:88:5e:9a:
                    f8:1e:e0:d8:5f:31:c5:51:8d:d6:b3:3f:a9:62:a3:
                    a4:4c:18:b9:32:bf:bf:24:b2:25:b1:5c:1c:fc:71:
                    93:d6:c7:e8:31:68:d4:5a:b5:69:81:d4:e6:71:ee:
                    16:de:ad:82:86:ca:14:0c:c7:f8:32:07:ef:64:87:
                    06:ac:d6:7e:b0:10:a0:15:86:78:e9:3d:7c:d9:26:
                    7d:1f:bb:3c:22:48:9c:d3:3b:b4:12:dc:3d:a8:33:
                    be:1c:ca:6b:26:6c:c4:63:c3:06:64:cd:c0:72:16:
                    61:5d:09:c5:1b:6b:44:a0:a4:19:17:32:d4:cb:80:
                    68:7a:81:0a:36:5a:4c:c2:bb:2b:b4:6b:42:40:4e:
                    91:3a:2f:3f:6b:2a:37:4a:bb:98:01:72:71:26:7d:
                    84:19:37:6c:c1:01:e4:8f:3d:e7:22:71:ce:66:06:
                    f5:ba:9b:06:68:68:d0:d1:8d:7b:af:23:dc:e0:9a:
                    c5:a5:81:65:72:83:7c:ea:7d:02:82:96:40:69:27:
                    fb:d8:1d:24:ea:f7:3d:49:e7:49:44:4e:de:b7:75:
                    9c:26:1d:b9:3e:6e:e3:8a:1f:60:43:42:f5:0c:10:
                    c9:dc:b1:f6:5f:71:7e:a6:77:25:94:3c:b9:b2:9c:
                    dc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0F:59:70:BC:ED:C8:57:0C:88:3D:06:E9:8C:EF:4B:5F:48:9E:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c2854c40-c6e9-3121-bb31-5b8d1ac7cdf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.47.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:71:ed:8c:8f:94:e4:4f:38:b2:e6:4d:cd:67:1c:58:d1:98:
         f1:f1:5f:d6:f9:2d:94:bf:0b:72:3f:47:4b:cc:d9:7c:25:f1:
         cb:83:be:7e:01:10:b8:58:8b:5a:20:94:94:53:89:ed:0c:fc:
         f4:1b:f9:fa:d6:03:1f:3e:be:44:19:5f:1b:16:ae:63:7d:20:
         60:a6:d5:96:b1:83:85:5a:43:14:ef:5a:15:44:3e:a2:29:5b:
         66:8a:bb:64:87:6b:f3:c4:ac:2d:01:df:40:09:09:2d:d7:5b:
         0a:5e:cc:9e:01:2b:e5:99:06:ce:86:36:7d:b4:92:ab:bd:d4:
         44:6b:3b:3e:b4:d7:d6:be:4d:29:34:95:94:8c:8f:2b:de:1d:
         a5:83:ea:84:7b:cf:6b:fb:58:d8:36:10:5f:46:42:1c:74:65:
         3b:2b:1b:da:ec:fd:7f:04:ca:ff:bf:4e:86:44:91:5b:7b:47:
         46:b0:6c:4a:92:0f:51:72:b8:1f:66:d2:22:e7:f1:c0:c2:6a:
         ce:eb:14:29:b7:e4:0f:12:e3:ca:cc:9c:9a:65:f9:c3:2d:1c:
         39:6e:50:a8:ed:66:55:1b:90:01:58:1e:fd:bf:a8:09:eb:ab:
         4d:fb:26:25:8a:69:cf:99:98:6c:4d:6b:03:b4:ad:c5:f9:64:
         b6:ca:12:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:40 2025 by rpki-client on console.sobornost.net