Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f52b06f5-3629-343c-bb95-0fe8bba70179.roa
File:                     f52b06f5-3629-343c-bb95-0fe8bba70179.roa (raw, json)
Hash identifier:          Jh6MobDs71N6Ku9HUAPq7x/QywtmgPkure7DBrhPV6I=
Subject key identifier:   F6:88:F0:3E:86:1A:E6:64:63:D1:00:EC:5D:2D:C7:D7:A4:E6:5F:25
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339DC88DE37F8737C4E2140
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f52b06f5-3629-343c-bb95-0fe8bba70179.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.36.176.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:dc:88:de:37:f8:73:7c:4e:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=d08fd670-e3b7-4e25-b968-5288bd5180e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c2:ff:1f:eb:9b:0d:26:d2:9e:63:16:35:8f:
                    a3:c6:07:93:bd:9e:5e:ad:10:db:86:34:4f:8c:bf:
                    4f:e2:ce:85:05:cd:0d:e3:56:99:fd:49:f1:52:a7:
                    d1:e1:cd:16:ae:46:98:53:46:d6:ae:6d:04:6a:ab:
                    9a:f6:73:86:fa:ae:e2:27:bc:34:2f:80:cb:d1:75:
                    78:40:d9:c4:96:b3:01:7e:d0:5f:d4:c4:90:a3:d4:
                    3a:b3:1d:86:56:17:9d:aa:2a:26:28:91:60:2f:4b:
                    1f:ff:ed:b2:98:1a:28:ba:b9:27:aa:07:00:20:c3:
                    32:61:a8:6e:53:04:8d:c5:67:03:20:34:11:18:93:
                    8b:75:38:2c:db:05:6b:a4:3f:85:b4:1b:64:90:d9:
                    60:9c:43:36:f7:00:ba:2e:83:e2:cf:bb:92:37:a5:
                    ed:85:41:65:3c:89:e9:49:f3:51:e9:e5:ee:1f:a0:
                    5f:f5:aa:96:ec:33:38:0f:ba:76:91:b0:d0:98:03:
                    a2:33:5b:d3:b5:0d:82:7e:71:61:2b:08:c9:82:d0:
                    7a:ef:62:c2:bd:87:38:07:83:98:20:2a:ac:1d:98:
                    33:8f:a2:3b:a3:a2:cb:0e:91:6f:1f:8c:f6:3a:32:
                    4a:7d:9e:30:2d:85:e3:da:bc:4c:d5:b2:7d:a2:f4:
                    e0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:88:F0:3E:86:1A:E6:64:63:D1:00:EC:5D:2D:C7:D7:A4:E6:5F:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f52b06f5-3629-343c-bb95-0fe8bba70179.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.36.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:12:4b:54:16:03:e7:75:57:95:9e:64:cd:9a:8e:bb:c0:d2:
         31:89:c3:6f:16:ca:28:4a:37:92:6e:d1:9e:75:48:4c:af:7d:
         0e:20:c5:c1:a7:18:84:d0:5c:d4:ab:99:15:31:98:a4:4d:5f:
         f2:79:60:1d:92:0a:79:42:ec:14:ca:b9:40:34:a7:8c:8f:c2:
         28:3e:6a:22:3b:95:0b:98:c2:58:de:6f:7f:f8:c6:86:1d:6b:
         3d:d4:fd:3b:c9:df:2b:0d:42:ec:0f:71:68:64:40:d4:17:dc:
         be:eb:ed:b8:47:a3:d5:61:b1:69:b5:89:79:c6:54:0e:6c:f9:
         59:9d:87:27:54:6e:2f:b7:f1:6b:d0:39:14:5e:3d:c3:af:5e:
         a4:c2:e0:a9:91:87:fe:bc:52:f0:cb:83:8b:ce:13:f8:10:68:
         03:6e:16:2c:b4:4a:c8:c8:13:75:f0:35:f4:02:f7:4d:71:bd:
         91:ad:f2:4b:99:6c:ac:3c:4e:ee:1c:06:55:43:b0:a4:a5:9c:
         0a:5c:26:a2:f1:1e:89:ce:f7:8e:1c:eb:94:6a:19:c2:36:66:
         90:79:aa:76:5e:c5:48:34:46:2d:80:b0:d1:45:f0:cc:4d:6a:
         dd:06:e3:fe:fa:42:0b:17:3b:60:a5:0f:c6:78:17:81:af:9c:
         6a:49:8f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:40 2025 by rpki-client on console.sobornost.net