Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/46157f04-4a74-316e-9b4b-69116d2a521c.roa
File:                     46157f04-4a74-316e-9b4b-69116d2a521c.roa (raw, json)
Hash identifier:          WH7x5o0alKgCo7sUP5VfCHJQTXc9Ol+b6ZQoRsEuns4=
Subject key identifier:   EA:14:90:E6:08:53:DC:52:F7:85:F3:8A:41:58:88:8B:AE:DD:C9:1C
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285848C58224423E214F3835D12780
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/46157f04-4a74-316e-9b4b-69116d2a521c.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.23.36.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:24:42:3e:21:4f:38:35:d1:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=dedfa5ef-ea22-4ceb-b30b-33e7952dc760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8e:16:56:94:f7:2c:38:09:33:38:ab:04:99:
                    29:34:e7:a6:1e:9c:5a:28:bb:ed:6c:ad:f5:e7:43:
                    30:b0:a9:d5:ad:a9:a1:2e:97:32:dc:a1:01:1e:08:
                    23:02:07:bf:01:ab:c4:2d:66:58:3a:4c:c4:9a:34:
                    90:63:7a:11:8f:2c:63:35:12:fc:8a:09:6c:35:ab:
                    84:d8:c2:e5:0c:53:41:cc:61:2e:0a:c4:82:77:b7:
                    0f:fb:46:b1:2b:5d:7d:14:b6:5a:80:d3:f5:bc:46:
                    03:ac:b4:0f:20:96:61:9b:90:b0:62:ef:b4:4c:91:
                    9f:91:f7:41:be:79:1e:a5:36:67:59:46:0c:88:6f:
                    06:28:94:a7:20:8c:61:3b:7b:2d:6a:3d:d1:89:79:
                    17:20:38:da:bf:2a:89:5c:25:97:c0:45:b7:81:1f:
                    c2:9b:f6:eb:67:9f:76:d3:10:56:d7:1a:d2:59:82:
                    8f:c7:0b:fd:54:1b:30:33:ad:34:5c:87:d7:18:96:
                    e6:17:ac:03:44:df:99:33:e0:61:0e:cf:e7:3e:27:
                    47:f4:d4:84:8e:ba:6e:53:7d:3b:df:43:38:76:a0:
                    94:2f:22:97:7b:c6:f3:39:2f:b6:91:4e:2a:ab:52:
                    9d:b2:3d:9e:eb:4d:e4:13:b3:1c:4e:bb:bc:ff:41:
                    7c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:14:90:E6:08:53:DC:52:F7:85:F3:8A:41:58:88:8B:AE:DD:C9:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/46157f04-4a74-316e-9b4b-69116d2a521c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:b1:eb:8b:c9:cb:64:e0:52:55:f5:c4:66:f5:b4:70:a9:fb:
         62:c2:22:7c:ba:b1:4e:d3:99:c1:b0:ce:e5:db:b2:e5:b3:bb:
         57:a6:c3:a9:15:58:7d:bf:ab:de:a0:d9:2b:6c:c1:60:ae:61:
         e8:23:cb:b8:c6:f2:d7:76:e6:17:cd:90:10:a4:63:fa:8d:e3:
         e3:f2:46:1c:2f:63:5d:c4:74:b0:c6:88:d7:63:31:7b:0e:c2:
         9d:d2:ab:cc:95:24:ab:73:b7:51:ba:de:3a:b5:76:30:73:3a:
         57:87:ed:56:f9:07:6b:11:73:af:2e:95:2d:ab:74:ef:08:3d:
         c5:d4:14:1f:a4:a5:6c:2f:ba:db:53:e6:91:75:6f:db:3a:c9:
         12:e1:30:ea:d6:bd:d8:c2:7d:0d:85:84:90:8b:da:ae:f2:4e:
         63:eb:1c:08:f9:dd:da:e9:ca:5c:7e:bd:8a:a6:c4:d5:3f:66:
         2d:22:2a:c5:80:18:52:f3:7c:a9:d1:52:b6:c0:d2:72:89:eb:
         de:fa:ff:92:c4:11:aa:c5:b2:ec:86:68:9a:58:19:b7:be:8a:
         ae:0f:c5:e8:bc:57:72:b0:fb:ba:a2:cf:ed:8d:f9:64:53:b5:
         8b:65:32:42:8d:d1:cb:cc:64:ee:74:67:dc:8e:25:34:3e:57:
         cd:8d:f5:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgiRCPiFPODXRJ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj
NTg1MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZGVkZmE1ZWYtZWEyMi00Y2ViLWIzMGItMzNlNzk1MmRjNzYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI4WVpT3LDgJMzirBJkpNOemHpxaKLvtbK31
50MwsKnVramhLpcy3KEBHggjAge/AavELWZYOkzEmjSQY3oRjyxjNRL8iglsNauE
2MLlDFNBzGEuCsSCd7cP+0axK119FLZagNP1vEYDrLQPIJZhm5CwYu+0TJGfkfdB
vnkepTZnWUYMiG8GKJSnIIxhO3staj3RiXkXIDjavyqJXCWXwEW3gR/Cm/brZ592
0xBW1xrSWYKPxwv9VBswM600XIfXGJbmF6wDRN+ZM+BhDs/nPidH9NSEjrpuU307
30M4dqCULyKXe8bzOS+2kU4qq1Kdsj2e603kE7McTru8/0F8SwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOoUkOYIU9xS94XzikFYiIuu3ckcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky
N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvNDYxNTdmMDQtNGE3NC0z
MTZlLTliNGItNjkxMTZkMmE1MjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx
YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi
YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy
OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBckMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACSx64vJy2TgUlX1xGb1tHCp+2LCIny6sU7TmcGwzuXbsuWzu1emw6kV
WH2/q96g2StswWCuYegjy7jG8td25hfNkBCkY/qN4+PyRhwvY13EdLDGiNdjMXsO
wp3Sq8yVJKtzt1G63jq1djBzOleH7Vb5B2sRc68ulS2rdO8IPcXUFB+kpWwvuttT
5pF1b9s6yRLhMOrWvdjCfQ2FhJCL2q7yTmPrHAj53drpylx+vYqmxNU/Zi0iKsWA
GFLzfKnRUrbA0nKJ6976/5LEEarFsuyGaJpYGbe+iq4Pxei8V3Kw+7qiz+2N+WRT
tYtlMkKN0cvMZO50Z9yOJTQ+V82N9ek=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:23 2025 by rpki-client