Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/eb806ee2-a2a6-3496-9d22-6d8021915f52.roa
File:                     eb806ee2-a2a6-3496-9d22-6d8021915f52.roa (raw, json)
Hash identifier:          EaVJfKlLcAQ+pR554g2mC4fxbZLlNZF5fj9gDGLf/+M=
Subject key identifier:   56:73:F6:7A:6A:3C:01:0C:98:69:D8:65:C2:8C:6F:ED:C1:B4:1B:09
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339DD82C8FE66B6CFB54C00
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/eb806ee2-a2a6-3496-9d22-6d8021915f52.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.36.112.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:dd:82:c8:fe:66:b6:cf:b5:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=f5a76df9-7f87-464c-8e4e-8c3139b647ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b7:db:72:90:5a:0f:0d:6f:a2:83:71:1d:60:
                    09:38:05:36:1f:4f:73:d8:11:4c:43:44:b6:8f:d7:
                    e0:d3:e9:58:e9:52:1f:6a:84:10:6d:40:e5:02:ff:
                    19:13:69:6b:88:78:c1:67:72:0b:37:1a:3f:36:c9:
                    19:e4:84:e8:8e:a6:5a:9a:a5:2f:8d:98:e1:f5:66:
                    94:b5:7c:ee:e4:01:57:54:08:4d:4c:95:61:db:67:
                    00:9a:13:91:8c:dd:24:09:9c:a8:bb:7f:f9:90:8c:
                    85:dc:2b:b5:92:6d:bf:4e:22:f6:6a:3d:7c:5d:0f:
                    df:dc:ae:44:1f:3d:0f:58:b1:c7:5f:83:6c:50:e9:
                    5d:41:ac:f6:a0:96:94:44:71:da:e1:7b:a0:60:22:
                    2b:46:ae:a5:ad:74:08:5f:b9:82:d0:79:d7:da:a5:
                    26:7e:96:61:dd:55:e6:33:d1:af:c5:08:22:40:98:
                    80:e6:60:55:d8:87:4e:98:6a:22:12:72:fb:48:8f:
                    3e:0a:04:dc:b6:19:1e:05:7b:63:bb:0f:81:e7:71:
                    0a:44:d7:0a:5e:e7:71:f4:cb:ca:24:06:0f:ed:7e:
                    0c:fd:61:68:c0:0b:eb:07:1e:bf:37:0f:d5:ce:58:
                    cc:8f:f4:82:37:31:7f:4a:98:72:b4:e5:35:d7:4e:
                    b2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:73:F6:7A:6A:3C:01:0C:98:69:D8:65:C2:8C:6F:ED:C1:B4:1B:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/eb806ee2-a2a6-3496-9d22-6d8021915f52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.36.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:df:25:d6:46:b2:51:a1:46:07:99:39:3e:f4:ab:31:4e:20:
         0d:cc:1d:07:a6:0e:e0:46:c3:75:04:2a:5f:c3:f8:ae:5e:fe:
         ab:6b:cc:ba:82:89:88:88:92:ab:71:79:25:99:d5:da:a7:f6:
         33:19:1e:df:32:62:25:8e:19:4f:5e:e2:6a:07:db:a2:9f:30:
         f3:02:9f:f2:77:9d:37:83:6d:b9:03:72:bd:b3:b2:93:43:c1:
         eb:dc:52:a2:77:86:94:50:55:c3:b0:f4:27:ac:db:48:c1:67:
         de:a0:0e:5e:cc:83:66:af:fd:53:4e:f3:93:51:21:e8:98:e0:
         5e:f5:15:b1:8a:fe:9e:de:ff:f3:fe:b6:20:e7:b3:95:29:ea:
         11:2f:6d:a7:78:09:0f:52:b8:05:5a:51:40:fc:c9:17:5e:19:
         06:c2:fc:d5:4a:d6:bb:ac:03:2f:14:47:67:95:d4:2c:18:a2:
         c6:62:30:e9:a1:9a:9e:f7:3d:6d:66:02:a8:fe:8b:27:63:f5:
         bc:f6:34:d6:64:f1:30:43:02:8d:9b:ae:49:cb:a9:0b:f0:a0:
         e3:9f:28:91:3a:2b:3e:92:b8:da:f2:98:29:04:75:a6:17:ce:
         5d:8c:81:b0:c0:e2:7f:35:3e:e2:c8:80:05:70:55:84:34:9d:
         8f:18:23:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOd2CyP5mts+1TAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk
ZjVhNzZkZjktN2Y4Ny00NjRjLThlNGUtOGMzMTM5YjY0N2ZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7fbcpBaDw1vooNxHWAJOAU2H09z2BFMQ0S2
j9fg0+lY6VIfaoQQbUDlAv8ZE2lriHjBZ3ILNxo/NskZ5ITojqZamqUvjZjh9WaU
tXzu5AFXVAhNTJVh22cAmhORjN0kCZyou3/5kIyF3Cu1km2/TiL2aj18XQ/f3K5E
Hz0PWLHHX4NsUOldQaz2oJaURHHa4XugYCIrRq6lrXQIX7mC0HnX2qUmfpZh3VXm
M9GvxQgiQJiA5mBV2IdOmGoiEnL7SI8+CgTcthkeBXtjuw+B53EKRNcKXudx9MvK
JAYP7X4M/WFowAvrBx6/Nw/VzljMj/SCNzF/SphytOU1106yYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFZz9npqPAEMmGnYZcKMb+3BtBsJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZWI4MDZlZTItYTJhNi0z
NDk2LTlkMjItNmQ4MDIxOTE1ZjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCRwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFHfJdZGslGhRgeZOT70qzFOIA3MHQemDuBGw3UEKl/D+K5e/qtrzLqC
iYiIkqtxeSWZ1dqn9jMZHt8yYiWOGU9e4moH26KfMPMCn/J3nTeDbbkDcr2zspND
wevcUqJ3hpRQVcOw9Ces20jBZ96gDl7Mg2av/VNO85NRIeiY4F71FbGK/p7e//P+
tiDns5Up6hEvbad4CQ9SuAVaUUD8yRdeGQbC/NVK1rusAy8UR2eV1CwYosZiMOmh
mp73PW1mAqj+iydj9bz2NNZk8TBDAo2brknLqQvwoOOfKJE6Kz6SuNrymCkEdaYX
zl2MgbDA4n81PuLIgAVwVYQ0nY8YI7Q=
-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:40 2025 by rpki-client on console.sobornost.net