Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d6c9790d-bd4b-32c3-a8a7-8526c66fe08a.roa
File:                     d6c9790d-bd4b-32c3-a8a7-8526c66fe08a.roa (raw, json)
Hash identifier:          W/+uXLr7qKqt2Atgcx5HDCzGGFuU/yppotD5ue0FO3U=
Subject key identifier:   51:6A:AE:17:22:9B:B8:53:DC:9F:93:A3:AC:EE:35:82:6E:A4:46:1E
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339D2724C3639161DD9F540
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d6c9790d-bd4b-32c3-a8a7-8526c66fe08a.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.49.144.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:d2:72:4c:36:39:16:1d:d9:f5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=9d40e654-924d-4905-afbb-cf814444e1fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1f:a3:e2:96:61:51:4d:47:1e:0c:a5:bb:f4:
                    b2:14:67:b0:c2:42:c5:fb:5e:74:31:ba:2e:bf:ac:
                    ee:68:c5:82:9e:e5:c3:74:1c:c7:06:d7:a7:97:8b:
                    3e:fb:15:df:85:fa:16:ba:e1:a4:c5:f9:bb:ab:43:
                    bf:16:f4:ac:06:ac:d9:f5:6c:12:6b:cb:35:82:6e:
                    e5:13:9f:1e:96:ec:25:55:1b:d3:16:fe:a7:00:ea:
                    dd:90:fd:dc:87:d3:5f:bd:05:93:f0:aa:00:49:54:
                    d6:8d:22:e4:ec:f1:72:5b:2c:ab:57:ae:9f:9e:85:
                    02:71:8a:e4:90:be:91:9c:f0:cb:5c:19:38:0e:18:
                    d3:9b:1c:43:1d:0f:1c:35:3d:f0:3a:60:55:7e:78:
                    07:27:b9:46:7b:bc:d3:5c:01:a0:e4:e9:81:8e:95:
                    14:73:d2:5a:53:93:4c:51:be:da:c1:0d:19:20:6d:
                    c2:e3:e7:07:7c:26:08:23:60:8d:8b:d0:ca:dc:61:
                    4e:38:f8:c4:d0:a9:e0:77:e2:2b:79:d8:fc:2a:99:
                    77:0d:49:6c:9e:c0:b4:df:78:2b:5a:6d:c5:c1:0b:
                    a9:25:0d:ce:1d:96:df:4a:93:7a:8b:b1:ba:75:a7:
                    d6:78:ec:15:ea:ad:68:64:22:ad:ff:96:c7:9a:71:
                    bb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6A:AE:17:22:9B:B8:53:DC:9F:93:A3:AC:EE:35:82:6E:A4:46:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d6c9790d-bd4b-32c3-a8a7-8526c66fe08a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.49.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:78:16:17:1c:71:30:a2:ee:b3:a5:0d:28:06:3d:85:2d:c6:
         64:0c:5c:ef:34:d1:3b:e0:dc:46:50:f7:ea:8f:43:a0:4b:6c:
         44:b2:0c:5e:8d:ef:7c:25:4f:83:0a:4b:ad:79:b1:52:e1:86:
         82:a6:fb:c5:5c:c9:22:81:2e:3d:e5:2e:2c:00:42:26:82:d7:
         88:55:ff:6c:86:ae:2a:6c:8a:06:da:bf:7b:22:08:c4:63:1c:
         2d:7e:96:7f:87:ff:6b:3a:d1:a7:00:2e:a5:7f:4f:d1:d1:02:
         ff:79:b7:a9:4a:15:c2:a3:e6:e7:b3:02:6a:be:4b:67:fb:2d:
         71:bc:4f:0e:f0:3b:0f:ea:d5:c3:4c:0e:27:b4:d4:d9:39:b2:
         ef:b0:79:ce:5b:43:7f:7a:2d:82:f2:dc:a0:3c:18:0d:b8:73:
         dd:05:cc:41:56:2a:d1:89:74:65:5e:a3:56:93:e8:80:32:ff:
         02:6d:d6:b5:37:80:31:e5:0b:f4:b1:a8:6e:a6:7a:2c:75:cb:
         76:88:11:d8:24:cc:35:e0:1b:8a:39:e1:b2:99:42:68:47:86:
         63:b5:ad:05:aa:47:21:2a:39:58:ec:42:d0:f2:30:ad:22:fa:
         3a:d4:bc:99:1d:6a:e6:e1:29:49:0a:77:4a:63:80:a5:7e:83:
         83:f9:ee:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:40 2025 by rpki-client on console.sobornost.net