Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/b8039962-e79f-3a86-9a0c-45ec34a08256.roa
File:                     b8039962-e79f-3a86-9a0c-45ec34a08256.roa (raw, json)
Hash identifier:          3YLQvh606IR8tX0O/+wgUekK/Bb1oZk+rzugJs4qaZs=
Subject key identifier:   B3:41:25:C2:CB:43:AA:DB:11:0D:93:C3:39:09:DB:62:5D:9E:1E:CE
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285848C58215D70BB6654365219980
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/b8039962-e79f-3a86-9a0c-45ec34a08256.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.23.48.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:15:d7:0b:b6:65:43:65:21:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=1657b102-300a-4ee6-9be9-a31564bb3de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:de:69:50:2d:f6:c7:c6:9f:d2:3e:2c:d4:c4:
                    7b:ff:17:99:37:a1:6f:63:86:90:e4:87:4d:e2:e2:
                    68:39:bd:c0:de:11:d1:79:90:6b:0a:99:5c:af:a6:
                    78:03:1d:5c:be:a8:b7:3e:22:c1:b6:84:cd:d5:de:
                    90:aa:ef:61:ee:44:b9:31:8b:82:78:13:77:93:bc:
                    b4:74:5f:e5:a7:c7:51:f0:b2:2b:60:a6:ad:ac:83:
                    63:a2:78:12:1a:24:8c:66:cc:b9:3c:08:d1:0b:89:
                    01:c6:48:51:dc:2a:76:99:19:a5:b7:a4:19:ab:dd:
                    3e:ad:03:19:fb:24:ce:eb:24:c7:1f:f9:3a:ab:c2:
                    c6:95:80:75:bd:0d:f2:6b:8d:f7:a5:4a:9b:25:5f:
                    55:fe:8f:5e:2e:f9:0f:7b:85:df:74:74:24:c1:09:
                    37:9c:12:a4:17:f6:68:c5:b2:7a:8a:f4:87:a4:7c:
                    dc:3c:ef:d5:0e:b4:d6:07:63:a2:9a:c6:a2:e7:8a:
                    b1:88:b7:d3:65:6a:0f:85:0b:c8:38:a0:79:29:f8:
                    ac:31:5e:c1:8a:f4:19:34:42:f4:ca:af:11:5d:f7:
                    eb:99:a9:43:d7:fa:2f:c3:9a:e6:95:ef:a1:12:2c:
                    59:47:f7:cb:7c:1e:c8:88:ce:9f:27:35:b0:a1:5e:
                    e0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:41:25:C2:CB:43:AA:DB:11:0D:93:C3:39:09:DB:62:5D:9E:1E:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/b8039962-e79f-3a86-9a0c-45ec34a08256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:17:52:06:06:e2:ed:04:67:27:fa:ee:af:96:ea:cd:66:0d:
         b1:c7:02:f1:ec:cd:04:57:0a:e1:60:2d:2b:e0:c6:a1:00:1f:
         d1:95:c2:ba:e6:56:5b:84:31:ed:e9:45:ea:45:94:f6:de:2e:
         f1:46:ab:f2:ba:8e:d2:55:44:ed:26:64:d8:09:6f:1a:73:36:
         62:1f:29:6a:a9:02:23:62:3e:c1:3d:48:9d:46:b5:30:9d:30:
         e0:ba:83:94:a4:3e:94:6f:0a:30:f8:df:86:7e:0f:03:4a:b4:
         38:a5:b6:3b:84:90:28:73:00:9f:01:22:27:0f:2f:fd:72:18:
         c6:3f:80:ed:61:89:ef:44:99:8a:13:f4:40:0b:37:c5:41:89:
         8e:6a:d2:fe:72:16:74:ab:bd:1b:cf:b4:d1:d0:2f:f5:88:59:
         e2:6a:72:55:ea:e3:e9:8e:3d:13:98:30:4f:93:d1:95:db:9b:
         f6:ec:bd:42:9e:26:4c:1d:cf:4a:e9:17:68:32:e7:68:7d:1a:
         1e:35:7a:9a:63:8c:86:7b:b5:dd:2e:88:f5:e6:eb:ce:26:eb:
         0e:6b:66:b8:71:b1:2b:72:6b:3e:9b:6a:9e:bd:20:56:b2:31:
         13:d4:31:52:be:d2:9e:b8:b8:cd:a5:c5:84:a1:32:e8:6c:33:
         29:67:94:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:34:25 2025 by rpki-client