Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/48d86b8a-3a76-3f17-a6ee-2022c6a4eceb.roa
File:                     48d86b8a-3a76-3f17-a6ee-2022c6a4eceb.roa (raw, json)
Hash identifier:          JT/mApg5pJXJLrfODkSQTd1B0dPmYUatl2eHLBbiITA=
Subject key identifier:   40:F7:B9:8C:9A:D1:79:71:20:B1:1F:68:BD:0F:0E:A2:76:EE:DD:15
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285848C5817784DFF29CC73CB55900
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/48d86b8a-3a76-3f17-a6ee-2022c6a4eceb.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.23.13.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:77:84:df:f2:9c:c7:3c:b5:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=5e894ab3-c8af-49a5-840b-2374413a4656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a6:c4:25:f2:f9:0e:cf:b4:46:d0:d9:e9:6b:
                    34:16:4d:c9:6f:02:10:53:22:21:9f:19:fd:b6:b8:
                    49:82:b1:d8:5a:4c:9e:6a:26:c9:11:8c:72:6c:4c:
                    d8:49:af:e7:31:53:25:33:5c:3f:7e:00:05:94:25:
                    b7:3b:32:7c:15:6c:ca:05:8b:a7:ca:cd:5f:56:c3:
                    3c:d7:38:37:4a:13:7a:09:d9:c9:e1:65:d1:49:fb:
                    1c:65:50:25:9a:f5:70:8c:74:f1:7c:1d:6f:e4:25:
                    27:56:59:f9:67:58:b9:19:88:9d:de:5b:73:c7:d7:
                    40:09:d6:67:10:53:e2:7b:e5:66:e3:15:14:ba:9f:
                    ed:8c:27:0a:84:0b:0a:9f:86:52:68:be:08:a8:be:
                    c8:ab:8a:3e:cb:5a:7e:73:7e:f5:98:07:f3:32:99:
                    53:82:5e:ec:28:53:95:ab:49:5d:17:e6:c9:88:7f:
                    13:fc:26:be:67:4a:ae:15:12:c8:7d:6a:3f:94:fb:
                    52:f3:ee:5f:ef:a2:da:a3:c1:8a:f9:50:74:04:09:
                    13:89:94:7a:8a:1e:b9:e3:19:cf:a9:95:64:25:74:
                    9d:a9:4e:97:a6:f3:05:34:41:51:7d:a0:8e:b5:b2:
                    c5:60:4f:4c:9f:4b:e7:42:e8:c3:dc:66:b1:54:39:
                    f0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F7:B9:8C:9A:D1:79:71:20:B1:1F:68:BD:0F:0E:A2:76:EE:DD:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/48d86b8a-3a76-3f17-a6ee-2022c6a4eceb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:aa:5d:09:2f:14:53:b5:1e:b9:52:91:25:38:4c:2b:b1:e6:
         e4:b2:05:82:6a:37:fd:c1:a3:67:66:82:e2:ea:27:82:00:e1:
         97:95:06:04:25:04:11:8b:65:9f:3b:ec:db:7f:d1:e0:21:81:
         a4:cb:86:d0:a0:7d:2e:98:05:24:fe:96:0c:f2:a3:ef:49:77:
         be:75:49:8b:cc:a0:c8:ca:2d:2f:7f:96:3f:70:a2:21:fc:9d:
         88:6f:7b:6f:0d:10:3d:36:10:1f:c9:b5:07:65:0c:70:84:f2:
         fc:77:80:34:79:77:7a:7a:60:88:77:20:6a:da:a1:ee:49:a8:
         62:19:6b:0a:1d:ba:59:fd:fb:18:ec:16:99:10:7a:bb:76:67:
         c6:e6:a3:55:d1:5b:e7:be:60:97:78:4c:a9:cf:e7:de:8c:f5:
         9c:72:32:a0:17:10:69:c0:d8:3c:cb:4b:f6:2e:de:85:89:8d:
         ff:03:68:96:a5:e1:4e:e1:df:d1:b9:50:e1:0d:7c:c9:b0:65:
         40:c2:43:4d:21:e5:d3:ce:bf:dd:06:05:3b:8d:26:03:fb:1a:
         91:ca:bb:c6:fc:d4:9c:55:f1:0d:a2:12:2f:76:e4:22:25:85:
         e7:ca:a7:b0:76:3d:94:c5:ec:76:be:59:41:cb:1f:46:46:07:
         48:19:18:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:45:47 2025 by rpki-client