Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c715a458-b42a-3dbf-b8d9-ddab2cf90a01.roa
File:                     c715a458-b42a-3dbf-b8d9-ddab2cf90a01.roa (raw, json)
Hash identifier:          d034X3S7mFZA4xPthQADNPFTJRie/c+YAeL95btGFvA=
Subject key identifier:   0C:1F:F1:93:95:0D:82:A4:E1:31:40:F1:BD:17:9F:A1:0F:7C:81:64
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339DCD6EF2778B719912440
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c715a458-b42a-3dbf-b8d9-ddab2cf90a01.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.34.176.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:dc:d6:ef:27:78:b7:19:91:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=6e134944-fb39-4a9a-a612-40a1674f0353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a4:80:d2:4b:bb:f3:44:47:86:5c:55:ad:86:
                    4c:1c:b3:c8:a2:3a:dd:2e:b6:24:89:38:78:57:79:
                    9a:c0:1f:8a:16:3d:72:4f:14:47:e1:00:5b:81:ee:
                    85:d8:b9:17:16:51:b2:cf:67:0b:df:4e:30:e3:7c:
                    b4:28:45:92:ca:4f:57:c6:56:0f:84:1a:39:28:69:
                    1b:4c:50:9f:fe:e9:1b:4f:09:c4:15:c7:3e:ec:f9:
                    a9:8e:51:80:97:57:2a:6c:4f:59:a5:d0:e1:84:a5:
                    d2:90:dc:3c:4e:24:28:7e:cb:66:1a:e9:60:9a:20:
                    8c:5b:7b:30:ba:2a:25:77:24:0b:b0:da:69:c4:5a:
                    db:a2:f3:96:fd:4b:be:03:ba:c6:ed:3d:88:c6:f7:
                    62:6f:b5:9f:81:aa:74:bd:4d:ab:5f:bb:46:11:14:
                    d9:64:9c:1e:f7:8c:9c:55:65:47:ad:b6:b0:26:5f:
                    ce:f3:cb:9b:74:e8:e5:34:ed:b0:57:af:39:4c:59:
                    df:5b:bb:f1:2b:46:95:1f:bc:59:93:5a:97:df:b6:
                    02:ce:80:25:ef:09:2e:6b:db:0d:c8:8c:a0:86:93:
                    5b:52:f0:46:82:02:bb:c2:49:ed:58:f7:0f:35:4c:
                    6c:42:81:91:44:64:92:00:7d:63:9c:3b:b0:69:2b:
                    ba:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1F:F1:93:95:0D:82:A4:E1:31:40:F1:BD:17:9F:A1:0F:7C:81:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c715a458-b42a-3dbf-b8d9-ddab2cf90a01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.34.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:25:c3:bc:cd:44:5b:8e:78:d1:36:de:af:53:67:93:0d:6c:
         3a:42:7e:35:fb:e9:7b:a9:72:da:94:15:69:65:c3:e4:9a:a3:
         38:61:1e:29:14:42:77:fa:7e:5c:4b:f4:31:a5:a8:87:3b:ee:
         e5:90:8c:89:40:7c:ce:0d:10:e8:33:9b:6f:6b:c7:22:58:eb:
         7d:5d:02:1f:47:09:a5:f2:bd:f7:5f:fe:04:15:13:fe:72:ba:
         c4:43:cc:6b:5f:a2:ec:8e:59:bf:eb:b2:53:bd:23:8c:08:6c:
         ab:fe:7f:33:5d:5f:a5:e7:6d:35:1b:0c:bd:59:bd:f4:aa:33:
         63:fd:a1:8c:d4:1e:9f:b2:b5:b8:f5:55:b0:df:19:83:4a:94:
         84:92:c9:d7:3f:4a:df:02:f3:ab:9b:56:91:3d:3b:49:b2:9f:
         70:87:e0:dc:5c:8e:c0:66:e7:79:11:96:16:6e:3b:89:cd:c1:
         10:94:79:b9:6b:03:df:ea:31:86:a1:dd:6f:72:69:e8:0b:e3:
         31:dd:96:78:16:43:a5:57:53:4d:13:6a:2d:9a:0d:06:a4:9b:
         b7:27:cd:13:69:3b:7a:f0:35:2d:68:a2:1e:05:a8:56:79:fe:
         72:56:48:68:21:2d:22:a3:9e:2f:09:e6:ad:5b:53:08:dd:f7:
         eb:99:a9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:40 2025 by rpki-client on console.sobornost.net