Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ca528741-411e-30ff-b65e-de4383d377d6.roa
File:                     ca528741-411e-30ff-b65e-de4383d377d6.roa (raw, json)
Hash identifier:          PUu4e1o5gUbEUzmbSEFQ2uRrau9+QtVRTXiKw/D7il0=
Subject key identifier:   0D:79:D7:99:72:81:67:BA:A7:A2:6C:5B:0C:FB:5E:53:B5:FA:37:39
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285848C5818B5E81D6DCEA0A597880
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ca528741-411e-30ff-b65e-de4383d377d6.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.23.51.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:8b:5e:81:d6:dc:ea:0a:59:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=a3e6ad9e-32a6-4a9f-8a64-c730318b5fc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:be:65:da:10:6b:46:ea:2e:4f:d2:b9:79:2b:
                    83:60:53:48:53:f6:59:07:72:ff:75:35:6d:08:16:
                    9b:c1:92:91:e5:05:64:53:43:b6:1e:1c:f3:38:7c:
                    65:8b:01:66:bf:e7:09:d3:65:a1:97:49:e9:1c:dc:
                    f0:36:24:cb:70:c6:81:7a:97:80:23:1f:e0:90:86:
                    ce:87:a4:a6:be:09:ba:73:c2:1b:2c:e0:d4:df:c5:
                    03:36:5c:c7:91:51:0f:3d:2a:61:7c:a0:5c:3f:a4:
                    50:17:b5:7a:9a:dc:46:38:e8:ee:52:0b:e5:1a:10:
                    32:0f:b7:ca:ce:1c:47:d4:07:e7:e0:72:ef:f6:8f:
                    d3:3f:61:31:88:7b:77:42:ba:bb:99:15:0c:7b:00:
                    19:5f:f7:d0:30:ba:cc:76:b6:c4:f4:de:f4:26:6f:
                    48:77:3b:f1:36:e2:df:60:75:4d:a5:aa:d5:d3:1f:
                    d1:df:00:be:ee:c5:b8:a2:11:85:04:12:75:af:79:
                    e2:e0:08:43:2f:60:19:64:ea:f7:08:2e:ae:53:f0:
                    49:ca:0c:82:74:d7:d3:ea:a1:31:05:14:f2:39:f5:
                    54:6e:2b:52:bb:4a:12:a7:2a:01:69:68:52:9e:f6:
                    35:2e:41:e7:0f:a8:ed:7f:c5:e6:96:90:99:0b:17:
                    83:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:79:D7:99:72:81:67:BA:A7:A2:6C:5B:0C:FB:5E:53:B5:FA:37:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ca528741-411e-30ff-b65e-de4383d377d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:aa:14:73:3e:9f:8a:39:7e:c3:b4:79:60:d7:59:fa:f1:22:
         35:16:e9:b0:7b:b3:eb:34:a8:76:f2:18:61:c6:94:17:f5:45:
         e2:8b:19:38:70:e6:a9:c5:84:45:f4:6b:25:1c:4c:1a:87:59:
         56:ac:98:8f:74:de:42:19:4a:c3:42:2d:d3:ba:dc:a8:e0:5a:
         55:cb:f8:e3:d8:cd:fe:b6:07:01:47:fe:b1:1c:4d:75:38:ab:
         ff:bb:28:e5:7c:40:bc:b0:8f:3e:5a:56:6e:ff:6b:ab:19:7c:
         3b:8a:db:5d:cd:4e:69:a2:d2:37:03:25:27:e6:73:5f:48:0d:
         9b:be:78:49:07:6f:c2:46:5a:d8:5d:1d:7e:7b:6e:23:01:5a:
         8a:71:cd:94:88:2d:ba:05:82:d0:6c:8c:77:b0:25:11:b1:ce:
         d5:7b:24:ce:b4:70:e9:cb:fc:cd:76:1d:5e:b9:0a:3e:b7:76:
         91:87:bf:03:0c:99:ee:e4:92:32:77:17:14:a9:f3:47:44:d9:
         77:8b:47:9b:96:83:49:93:82:4e:c0:9b:50:97:8f:79:bf:f3:
         04:1a:d4:e1:b6:cf:07:ea:0e:2a:b6:36:ed:5a:46:ef:07:4c:
         d2:7c:fe:7c:e8:30:4b:71:7c:e1:ef:fa:76:f9:39:a1:9c:8e:
         0f:e0:59:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:18:28 2025 by rpki-client