Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f5240dbf-e67a-3452-a378-c17350bcab35.roa
File:                     f5240dbf-e67a-3452-a378-c17350bcab35.roa (raw, json)
Hash identifier:          XvAPTuXMU4p90JplfmLM9UDbFkBA0FbcJvSqhyEuoho=
Subject key identifier:   7B:BB:F9:83:F8:32:14:B9:B2:81:51:75:9D:09:CD:F7:C1:9F:65:18
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339C8083C66A712DB8CD6C0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f5240dbf-e67a-3452-a378-c17350bcab35.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.35.176.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:c8:08:3c:66:a7:12:db:8c:d6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=837aa106-54b9-406d-95bb-0501f06c565e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:94:a5:e5:54:d7:46:3f:9e:88:2e:83:75:9e:
                    5c:ee:18:b3:ca:30:bb:c0:7d:02:5c:be:a4:f6:aa:
                    ea:72:0c:5a:86:db:e3:c7:b5:75:75:ba:7c:1a:fa:
                    24:69:c5:8b:38:5a:ff:b0:64:1a:f8:79:d3:c7:27:
                    bc:8c:aa:6d:6f:55:16:e7:08:ad:0a:1c:57:78:4d:
                    25:d6:f4:ef:7e:d1:54:71:be:86:da:86:f2:5e:87:
                    d9:30:89:ef:2c:71:cb:3d:54:5e:17:62:b5:21:3f:
                    a4:c5:3d:f4:80:d2:8f:9f:97:ea:57:8c:b5:da:00:
                    70:fb:25:69:f8:aa:79:3b:cd:22:30:79:b0:65:70:
                    a2:e7:27:86:69:ae:57:73:1f:d3:7d:da:2b:c5:5d:
                    10:55:0d:d3:78:d5:e0:4e:5d:65:2c:fd:f4:63:6f:
                    6b:13:3c:93:ea:de:90:94:a3:3c:6d:18:79:de:1d:
                    08:c2:e6:cb:04:fa:90:7b:f6:fb:39:f5:21:29:f3:
                    20:8a:4b:47:21:17:8d:98:5c:34:a3:8c:37:13:11:
                    14:97:df:ec:6c:a4:26:78:e2:32:1e:47:ef:86:88:
                    ac:95:a3:c7:64:e3:d2:b2:ae:5e:66:2c:a3:c7:6a:
                    f1:01:d5:ea:0b:d5:d8:6b:89:f2:dc:57:27:a5:a2:
                    e3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BB:F9:83:F8:32:14:B9:B2:81:51:75:9D:09:CD:F7:C1:9F:65:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f5240dbf-e67a-3452-a378-c17350bcab35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.35.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:28:a2:45:91:7c:4d:2d:c5:29:61:25:f7:9b:b0:3c:67:ea:
         5e:3a:b8:b5:44:8b:58:5d:ed:66:7b:86:2f:f0:97:fe:25:c9:
         f4:f1:eb:36:b7:5e:d7:f1:8d:5a:fe:13:2b:6e:4c:2e:46:6b:
         2d:81:e4:19:d7:df:8d:0f:70:da:b7:57:0f:e3:6e:0d:b3:35:
         64:de:5c:4b:c9:dc:b0:6b:65:57:dc:1f:a4:7c:85:6a:ff:82:
         17:14:dc:9f:70:1d:3e:0f:30:bf:f2:24:e3:a5:67:b8:32:ce:
         76:ed:a5:05:ed:6a:3c:34:40:41:06:fd:dd:0f:cd:dd:b7:f9:
         d0:ca:d7:3a:47:46:f4:b7:27:ab:af:45:88:30:af:f5:85:8b:
         64:4a:b7:78:db:15:8a:04:ea:f8:d5:8c:1b:59:bf:9d:01:3f:
         ee:e7:ef:09:7b:4b:1a:f7:3c:8b:c1:4f:e7:0e:db:aa:7b:80:
         07:1a:e8:cf:bb:f7:70:08:b6:63:6c:3e:80:d9:c1:00:ba:06:
         70:9e:26:95:b6:c7:38:19:5d:01:37:d5:aa:f6:50:73:f4:67:
         fa:a6:67:14:ae:21:4c:a2:1b:aa:40:0c:5d:c7:d5:99:2e:6c:
         10:07:86:7b:20:16:41:17:79:0f:ad:02:98:c0:77:89:c2:05:
         b8:07:03:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:40 2025 by rpki-client on console.sobornost.net