Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/072c3318-f424-3218-b587-7fa656d7bc1d.roa
File:                     072c3318-f424-3218-b587-7fa656d7bc1d.roa (raw, json)
Hash identifier:          msK38hg/+3K6rv6THxggJL+n+/H5iZin0NJfu+8MH8M=
Subject key identifier:   63:7B:DC:7C:98:66:A4:49:99:BB:A9:95:3A:7E:D9:46:7A:47:49:3D
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F43285848A13612208BC96EA5AC11E780
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/072c3318-f424-3218-b587-7fa656d7bc1d.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        136.226.220.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:12:20:8b:c9:6e:a5:ac:11:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=1d4d9ba0-7b6f-49b9-998c-1c1a6c321153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a0:d0:da:de:c2:c8:72:5f:67:16:67:d5:45:
                    b2:52:e6:74:5e:e0:67:9b:e8:bb:02:5f:2f:5b:af:
                    0a:db:ef:62:bd:e6:d6:80:f1:3a:80:bb:30:59:5a:
                    f8:79:8f:2d:3b:d7:2a:f7:62:fd:1c:06:70:37:e0:
                    ab:10:e3:6c:62:40:5b:16:81:27:91:fe:1b:55:fd:
                    29:7a:4e:2d:cf:00:c6:6f:31:7c:f9:8e:db:59:2e:
                    45:3e:2c:dd:d2:87:90:ab:cf:0f:cd:8e:02:f2:c1:
                    dc:26:d3:0f:f3:f5:7e:70:cf:62:c3:71:c1:17:00:
                    c5:83:4c:76:b2:be:72:64:a8:63:cb:7f:e1:4f:42:
                    fd:bf:f8:96:02:66:be:3b:1a:01:92:22:2f:ca:f0:
                    de:24:96:4a:a2:19:5c:90:1f:ce:53:0e:1b:3b:66:
                    ce:76:b9:42:1f:67:00:78:c3:e0:d1:dc:6b:bd:91:
                    4f:7e:cf:d5:2f:0d:7e:ec:91:33:47:e8:5b:6d:db:
                    b2:c1:ba:46:20:ea:0e:e5:2d:d7:4e:e7:71:cd:fa:
                    5b:9f:9d:ef:98:92:9c:1c:f2:1d:57:17:53:03:82:
                    7b:d5:35:9b:8c:7e:89:21:d6:f1:0a:1e:fe:7a:6a:
                    5f:cc:e5:39:76:22:e5:8a:18:c3:29:ad:be:15:3d:
                    20:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:7B:DC:7C:98:66:A4:49:99:BB:A9:95:3A:7E:D9:46:7A:47:49:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/072c3318-f424-3218-b587-7fa656d7bc1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:4f:e6:b8:75:d0:a9:a7:e6:02:eb:53:8b:48:8a:e6:56:3f:
         18:eb:3e:28:cf:e8:13:28:ce:c7:ad:d4:8a:7f:93:3b:1c:3e:
         38:29:81:d3:15:0c:e4:3f:79:88:1d:62:3b:ea:e2:8b:d1:8a:
         78:ef:17:f5:f8:2f:b6:41:58:aa:ac:26:0f:32:57:30:34:7b:
         c5:5e:22:d5:82:98:08:6b:a7:27:81:8c:9c:ff:2f:ba:9b:a2:
         e2:e7:e5:2b:60:88:b1:46:67:bc:89:49:e9:80:6a:10:33:28:
         bb:b1:9b:36:42:c0:91:6a:91:32:ea:5e:3b:39:db:ed:c4:7e:
         a5:40:9d:b2:bb:31:6e:50:69:51:f1:29:a4:8c:b0:33:0e:ce:
         df:2c:28:f7:f7:b1:b3:e1:46:96:05:c7:38:57:36:b2:60:a9:
         04:ed:13:54:b5:09:4e:c5:e8:e7:35:34:00:54:43:5a:11:c5:
         29:90:10:9b:7d:c8:1d:7b:1f:da:83:50:e6:0d:d1:4d:3d:09:
         03:af:44:d4:70:b5:b2:30:54:a9:f8:2a:bd:d7:ac:5b:59:a8:
         49:82:7b:31:b8:96:5b:73:d3:f8:fb:3a:c5:3b:ed:b6:c3:ef:
         df:83:ba:c7:86:59:73:1c:98:3e:8c:dd:e7:43:35:11:9e:a0:
         37:7c:93:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:40 2025 by rpki-client