Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ffc545e3-ce71-3181-9f58-8136ba71495c.roa
File:                     ffc545e3-ce71-3181-9f58-8136ba71495c.roa (raw, json)
Hash identifier:          WUHPkcuUfrymNgiufvPXBwIskE59XwOhwyKU8qFN/Q4=
Subject key identifier:   16:C1:AB:02:D4:26:21:EA:7D:7E:CF:BC:0C:98:47:B0:C6:BB:54:DB
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285848C58218ED6D563731A382ED40
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ffc545e3-ce71-3181-9f58-8136ba71495c.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.23.58.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:18:ed:6d:56:37:31:a3:82:ed:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=606763d7-b612-4335-98c0-475722e20657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e4:fd:49:4f:00:7f:84:7a:4c:33:c6:17:b7:
                    de:ee:67:b5:7c:f6:4c:04:84:63:d0:41:b7:3e:a2:
                    58:4f:c3:7f:41:88:0a:27:b2:55:ef:1b:5b:c0:78:
                    8b:12:33:f9:29:20:6a:40:8a:13:fe:91:90:6e:fa:
                    c5:82:9a:30:b8:07:22:ef:1e:c8:05:64:25:8a:c5:
                    ee:7d:75:33:34:17:a2:5c:a8:0f:cf:09:c4:e8:e2:
                    c4:dc:88:5d:65:9d:60:fe:ae:96:f4:86:e3:92:40:
                    ba:82:48:76:f4:d3:ea:24:27:f7:72:c9:1d:2a:8b:
                    c6:56:40:04:28:b2:34:59:74:00:29:98:d1:a6:2b:
                    a7:52:e2:2d:09:ac:ab:89:c5:ca:01:b4:8c:89:66:
                    7e:ed:8e:0d:4d:2d:96:0c:4a:84:82:2b:65:b9:1a:
                    dc:ca:4d:9d:f6:0d:20:70:6a:48:0f:cc:d0:12:17:
                    7e:cb:f8:5d:d6:ae:bc:e5:b0:c9:e7:65:19:b6:74:
                    db:55:3f:ac:7e:1a:b8:53:24:b4:ec:75:e9:dc:50:
                    7d:84:22:5a:0a:c5:b2:b1:40:b3:a4:41:39:13:65:
                    2d:6b:e2:be:50:6b:bd:80:8f:e1:6d:5c:18:da:b6:
                    9c:65:d6:6b:67:ab:af:e5:0a:1b:a8:a0:0d:f5:05:
                    9c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C1:AB:02:D4:26:21:EA:7D:7E:CF:BC:0C:98:47:B0:C6:BB:54:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ffc545e3-ce71-3181-9f58-8136ba71495c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:78:a3:1d:8f:58:ff:ce:83:f6:4f:d7:d8:53:87:09:89:a6:
         55:be:6c:5d:63:49:61:ef:b8:77:d0:33:94:89:57:31:a3:80:
         16:74:c1:3f:ef:6c:c6:c0:34:fa:2d:86:6c:51:a6:33:14:d4:
         61:8b:b6:4d:d9:58:18:9a:17:01:8d:e3:22:13:6a:f7:cf:38:
         61:7f:1e:6f:62:32:c1:7a:c4:f1:bc:c4:a8:74:4e:8d:30:0d:
         c6:ea:8c:8b:73:22:4d:50:bb:c4:6b:65:72:b1:25:97:85:56:
         ae:18:2d:db:08:0e:c4:b1:97:a6:4b:c2:7c:62:39:ce:fe:2d:
         e1:ef:67:3d:1f:ef:90:ed:9b:5a:b3:25:24:eb:84:64:c2:10:
         8b:5a:4e:b4:76:ca:27:0c:f2:59:d5:aa:c3:e9:94:21:63:1b:
         3e:7a:0c:4a:99:8a:09:cf:05:05:a6:d4:4b:f9:ae:72:1a:e2:
         61:ca:f3:91:e4:e6:85:7a:d3:40:3a:e3:b8:e6:77:c5:d3:c7:
         45:86:6d:22:90:34:e6:2d:44:46:bd:80:91:6d:dc:8b:61:b4:
         55:de:38:35:b5:63:33:42:a3:61:a4:8d:5b:c0:0f:f4:be:5e:
         8f:5b:8c:59:7d:ad:a1:28:bf:96:a7:d0:46:a7:f2:2c:9a:c7:
         13:da:60:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:21 2025 by rpki-client