Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d2f12902-fe70-389d-ab44-0722a47d21f8.roa
File:                     d2f12902-fe70-389d-ab44-0722a47d21f8.roa (raw, json)
Hash identifier:          tAMYzlcP+k8axy7tWG/fM/v0Qo9dpZNyC8av5Goyjus=
Subject key identifier:   A3:E1:ED:08:76:78:61:E3:1F:7D:DC:03:CC:5C:FB:DF:DC:BC:F7:47
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339D5ED84072CFEFF92A800
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d2f12902-fe70-389d-ab44-0722a47d21f8.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.49.0.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:d5:ed:84:07:2c:fe:ff:92:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=fb98cd3c-9f8d-4df3-8689-143b76aed7e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:38:61:5c:80:0a:08:93:70:b1:03:a1:19:27:
                    e2:c4:80:04:b4:28:0c:17:38:d8:4f:2c:d1:03:1c:
                    37:82:93:0a:f4:de:13:dc:5c:78:f1:fb:d2:a3:22:
                    3c:1d:bd:af:10:da:58:5a:01:9f:3f:a9:e2:dd:0d:
                    e8:e4:d4:1a:9e:bc:fe:2b:3d:7b:9d:3d:41:d5:bb:
                    c1:f2:3a:3d:3b:07:6b:4d:a0:d2:9f:22:df:44:3d:
                    f6:4b:b7:21:e5:88:6f:e5:1c:21:48:64:c7:42:f3:
                    c3:ef:92:3c:44:86:a9:19:3c:ff:be:3e:6c:65:ce:
                    d2:dc:4c:95:c5:ac:72:be:03:26:fa:5e:39:3c:79:
                    a0:d1:b1:ce:b1:33:19:41:23:57:be:9a:37:bc:49:
                    48:e1:85:29:8e:c9:01:02:b8:80:b7:d8:ba:49:45:
                    03:75:c2:41:99:2d:6d:9a:10:15:e3:94:07:e4:94:
                    96:30:ea:96:7f:8a:51:f4:cf:aa:e5:5a:48:e5:7e:
                    21:7e:54:f4:70:f8:52:9a:06:1e:d7:46:89:5d:04:
                    ea:da:e1:c1:f2:b8:ff:52:c8:d7:99:f6:e9:80:31:
                    80:84:07:6f:48:04:49:57:18:6c:38:15:26:c1:60:
                    a2:4d:30:66:45:32:ea:92:c3:c4:94:be:5b:89:e3:
                    77:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E1:ED:08:76:78:61:E3:1F:7D:DC:03:CC:5C:FB:DF:DC:BC:F7:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d2f12902-fe70-389d-ab44-0722a47d21f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.49.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:34:f6:f5:d9:01:a5:4d:1a:26:55:19:34:05:61:d8:c0:2a:
         38:ff:98:25:22:27:1b:1b:e8:56:81:29:d9:14:39:f6:a9:bb:
         ba:d9:7c:b9:f1:70:67:d7:f8:ec:5b:97:63:2f:e9:b4:6b:79:
         ec:99:62:e5:f3:78:d2:3f:80:16:0f:92:97:69:3a:7b:f2:85:
         fd:8a:2e:74:73:17:3e:65:ea:e8:d1:20:0d:3d:a2:89:f2:46:
         dd:1f:f7:34:d5:71:23:1a:f4:aa:0a:29:6e:52:19:55:5a:7c:
         15:b0:80:a0:92:b1:0d:54:e8:54:31:f8:d5:31:f6:31:17:2b:
         9f:1f:bb:56:61:47:b6:4a:94:a2:99:8d:f9:ec:79:e9:06:3f:
         e1:e9:8b:5d:d7:68:3c:c8:8b:a3:7b:a8:88:44:22:0c:62:72:
         f8:fd:db:3f:a5:ea:a3:97:16:e2:6f:4e:a4:1b:fc:c3:57:10:
         2d:91:8e:1c:c5:20:57:4d:fa:54:cd:c2:ea:6f:7d:80:c8:0b:
         d9:07:05:50:d5:03:d0:9d:55:47:13:ab:82:dd:27:e4:56:0e:
         14:33:03:4a:30:c2:10:4b:c6:4f:f5:65:cf:7a:48:f0:6b:48:
         c0:90:c8:ae:2e:00:7d:e6:37:7c:2c:5d:5d:e1:47:38:6c:65:
         35:44:52:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:40 2025 by rpki-client on console.sobornost.net