Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dd162963-40bb-3447-bf78-f7c3eb7992b7.roa
File:                     dd162963-40bb-3447-bf78-f7c3eb7992b7.roa (raw, json)
Hash identifier:          s253LuVXRzCPS3wPjKmydeCW3snIcY7S1XvkPwD/vuU=
Subject key identifier:   B9:73:48:9A:9F:BE:DF:4F:CA:17:C3:CA:E8:3B:66:8A:42:9D:8F:5C
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339D893B2203124A0576780
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dd162963-40bb-3447-bf78-f7c3eb7992b7.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.52.128.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:d8:93:b2:20:31:24:a0:57:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=c43a5c2a-22d6-4dca-987c-d502f77bbeeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6e:4b:c9:3a:1c:84:32:cd:30:35:1d:59:6a:
                    8b:42:bf:85:11:d7:33:4e:c8:56:25:f5:33:db:14:
                    99:ac:97:df:7a:08:ff:62:59:c2:d4:55:9a:7e:a7:
                    f8:10:ef:fd:c4:5b:96:10:98:51:ed:94:72:c3:00:
                    a7:92:b2:1f:56:6c:fa:64:fc:5d:ce:58:88:de:2c:
                    ba:53:40:3b:12:af:d3:5a:81:8d:77:6d:c2:a4:d5:
                    d2:37:4f:83:e4:50:0c:d4:a8:fd:dd:2e:af:c5:8a:
                    65:19:74:34:19:78:69:e1:b4:44:4d:71:9b:a9:c7:
                    14:67:a1:51:4e:27:b7:df:af:f9:3f:f2:79:cb:dd:
                    3d:b3:a6:aa:be:c0:80:8c:25:29:37:36:e9:23:ca:
                    1a:f5:f9:b8:e9:b3:89:fe:61:63:f5:38:ae:d0:0e:
                    91:5b:6a:ec:e7:67:a4:22:e4:3f:8a:7c:56:93:bd:
                    f2:55:4d:2c:bf:fd:d3:88:fc:b4:73:b1:4e:48:45:
                    82:c7:98:0e:4d:33:0b:1a:97:4c:17:cb:cb:35:1c:
                    95:36:f4:35:68:fd:89:28:d9:0a:f0:8d:b9:21:a2:
                    e0:44:a4:34:7e:1d:81:9d:59:bd:b8:b9:fa:04:21:
                    5c:43:0c:a3:0e:64:67:33:f2:ea:47:4e:be:cc:b5:
                    fd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:73:48:9A:9F:BE:DF:4F:CA:17:C3:CA:E8:3B:66:8A:42:9D:8F:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dd162963-40bb-3447-bf78-f7c3eb7992b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.52.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:29:26:6d:f0:d7:11:de:41:cb:af:6c:c3:d5:e9:03:ec:ca:
         1b:f4:89:f4:2a:33:47:6e:42:1d:ee:ea:80:9b:e3:c8:06:e6:
         16:63:e0:b0:32:80:e2:f3:98:fc:70:97:bc:ac:31:bf:b4:80:
         fd:fa:d1:9b:ed:d2:a6:cd:77:c8:10:6a:ae:76:1c:fa:4f:05:
         4d:f5:58:91:5a:0a:57:30:65:a5:6d:13:e8:05:b7:68:18:b4:
         8d:7e:c5:b1:b7:d4:f0:71:ac:4e:d3:bc:12:7f:7a:28:bb:fb:
         b5:30:7c:75:09:6a:dc:1c:ca:2b:ad:c1:bb:0b:53:0b:7b:89:
         cf:e9:86:78:23:dd:56:f8:a6:5c:8d:f4:1a:cb:e6:ed:9f:ea:
         27:99:d2:c7:c4:65:c3:54:bd:9a:27:3a:7e:d6:43:15:2b:82:
         f2:77:b7:01:03:18:2d:b0:cf:ee:25:97:89:69:84:00:40:4a:
         3b:eb:9e:62:3b:8f:ab:ca:b9:07:82:4a:7e:87:da:4e:47:a9:
         8e:b0:b1:c8:4d:1d:cb:3f:42:1b:08:19:c4:35:c8:8f:25:32:
         da:94:50:e0:9d:68:25:fb:1e:62:1c:85:52:da:79:34:cc:05:
         32:de:f8:f5:54:97:0a:0d:e0:b7:b0:5f:64:b3:f6:e7:5c:be:
         3d:04:4c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:40 2025 by rpki-client on console.sobornost.net