Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/471c4aa6-9668-34ba-b0ec-cfcc84a63303.roa
File:                     471c4aa6-9668-34ba-b0ec-cfcc84a63303.roa (raw, json)
Hash identifier:          DOjxFl9evJnA4AV0xvAoJ3ZQ2TaYXkgh2nh9bHkZxnA=
Subject key identifier:   C5:B5:8E:7F:33:6E:EE:93:6B:E6:CA:E9:36:1C:AC:B9:1F:3F:7C:A5
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285848C58183BA9C5B0338F81C6CC0
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/471c4aa6-9668-34ba-b0ec-cfcc84a63303.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.23.30.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:83:ba:9c:5b:03:38:f8:1c:6c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=4dc1ba80-53da-4a6c-a9ee-4e53cdc68971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:58:4f:de:6f:15:e4:e8:0d:bd:05:b0:ed:d6:
                    00:5c:25:a4:42:da:79:8e:87:5c:43:d1:6b:df:68:
                    b7:aa:be:e1:e3:5a:78:c4:72:4b:10:ba:92:9c:57:
                    20:45:57:be:d4:56:1a:50:96:53:db:70:d4:de:2a:
                    95:d6:29:e0:98:56:33:fd:15:75:d3:f8:cf:ef:b7:
                    cf:ee:84:44:8a:af:06:82:88:35:85:d4:12:d3:d8:
                    55:6a:3d:b2:90:e9:1f:25:cc:d5:d4:83:a9:c0:fa:
                    af:5a:dd:10:39:fc:56:12:f6:d4:6b:34:c5:27:09:
                    52:a5:1c:11:aa:c3:59:91:d0:df:06:fa:a4:82:58:
                    6c:a6:ad:a1:f6:85:df:6c:ca:6c:a1:7c:48:a5:d3:
                    19:0c:33:58:c3:65:e7:89:d6:6f:b4:00:01:d2:1d:
                    fc:bd:bb:4f:39:be:66:7e:24:31:c0:c0:30:82:6e:
                    df:9e:38:5d:00:d8:88:d7:d5:fc:dd:c4:3d:e4:6f:
                    8e:e3:d7:c9:59:45:19:1e:f5:e9:aa:89:15:ff:14:
                    87:e6:9b:86:70:18:da:68:5a:24:bb:c9:45:b4:2b:
                    b5:5a:e3:4f:88:7c:f7:7b:94:7f:b0:9b:22:22:df:
                    e3:cc:ba:af:43:8d:e6:6e:93:90:8c:1e:d4:fb:03:
                    3b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B5:8E:7F:33:6E:EE:93:6B:E6:CA:E9:36:1C:AC:B9:1F:3F:7C:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/471c4aa6-9668-34ba-b0ec-cfcc84a63303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:01:c3:c4:36:66:6d:14:75:9f:47:af:19:0c:c6:0f:c0:10:
         32:2e:95:31:14:1f:8e:22:63:2b:9e:a4:6d:bf:3c:98:1d:36:
         df:be:f1:b9:df:84:4d:a6:bc:84:be:f6:a7:f2:0f:97:c1:8b:
         7b:02:a9:b0:25:b7:f6:73:d9:5b:f7:dd:85:8d:9f:aa:29:48:
         5e:c4:fb:de:c4:89:d1:7d:25:c0:7e:66:0e:f8:55:12:9e:f0:
         76:03:0e:ea:01:e4:d5:c6:7a:3b:db:5a:f0:2e:5e:18:e5:22:
         aa:f5:a7:46:02:88:89:78:15:58:7f:d2:97:95:6c:01:a6:c1:
         2c:41:0c:b9:60:b5:42:a2:ec:fa:5e:3b:ca:8d:da:ac:cb:14:
         57:6d:62:54:79:c5:51:47:a5:22:4b:bf:d5:4e:7a:a2:c4:5a:
         22:a3:e6:f1:66:08:71:f1:58:b6:f8:67:59:59:2e:ad:e4:d5:
         60:e3:08:6c:bb:40:a8:59:be:7b:be:f5:b6:55:a6:15:dd:24:
         3a:03:00:d5:76:3e:a0:cd:7b:9d:cb:df:9f:14:ee:47:6b:14:
         6f:27:79:80:f5:df:f2:a5:5f:a3:83:be:bf:23:bf:49:91:7d:
         c5:9f:4e:c0:9f:ef:88:19:b0:90:70:5f:95:93:a2:30:87:90:
         1b:8d:a6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:25 2025 by rpki-client