Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/1d551313-586d-314b-a892-2b1319137fc1.roa
File:                     1d551313-586d-314b-a892-2b1319137fc1.roa (raw, json)
Hash identifier:          ynvTazA3lmmQPdqDGma/XLMM6NR3SdovE52BRv/VvpE=
Subject key identifier:   3B:B6:52:F2:C1:23:E5:D7:8C:1C:1C:1C:06:0A:8C:7B:9F:C9:28:AF
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F432858494E2EAA5E2EFB1ACC8EBAE7C0
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/1d551313-586d-314b-a892-2b1319137fc1.roa
Signing time:             Tue 25 Mar 2025 13:00:51 +0000
ROA not before:           Tue 25 Mar 2025 13:00:51 +0000
ROA not after:            Mon 23 Jun 2025 13:00:51 +0000
asID:                     396253
IP address blocks:        136.228.226.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4e:2e:aa:5e:2e:fb:1a:cc:8e:ba:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Mar 25 13:00:51 2025 GMT
            Not After : Jun 23 13:00:51 2025 GMT
        Subject: CN=e0f87169-e04f-46b3-866a-e0c3cb9247f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f7:a8:4d:a7:d6:fc:1a:e6:b8:bc:a8:80:80:
                    13:12:1d:8e:bf:f1:38:e8:04:65:ec:e8:fd:ca:dd:
                    e0:73:9a:38:1f:8a:d3:ea:05:db:86:f4:ad:2e:d1:
                    31:c7:c9:34:4a:5c:c4:92:95:2e:c5:52:b5:4f:47:
                    fb:7e:1d:aa:44:d4:43:b8:4a:13:49:a6:1e:4e:84:
                    00:dd:33:ad:c4:a6:a5:bd:5e:18:b2:45:c7:1e:62:
                    dc:85:88:0a:c8:3f:74:83:19:b2:bf:05:c5:19:2c:
                    13:a6:88:50:e4:73:8d:55:0e:2a:69:f3:e4:5a:61:
                    66:5f:5a:43:6c:4c:f7:29:6b:3e:f2:4b:ca:48:40:
                    36:00:72:54:ee:d8:1b:61:69:d9:57:e4:0e:c1:28:
                    0a:35:a1:91:fb:09:e7:8c:c6:98:41:32:56:11:73:
                    f6:84:34:39:ae:03:36:86:23:fb:bb:fd:0f:ff:25:
                    5a:58:f7:b9:c0:41:47:74:f0:ca:02:e0:03:d0:7d:
                    78:05:50:53:09:5c:fd:85:b3:81:c2:43:15:7a:5f:
                    c1:5f:5f:d5:48:23:bf:d5:8b:55:5c:16:96:8a:cd:
                    22:64:1f:13:09:0c:f9:17:d9:21:e5:89:a4:ad:d3:
                    bc:d2:b2:b1:76:4e:70:8e:38:6e:2e:51:9d:95:46:
                    6e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B6:52:F2:C1:23:E5:D7:8C:1C:1C:1C:06:0A:8C:7B:9F:C9:28:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/1d551313-586d-314b-a892-2b1319137fc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:77:5c:50:6e:a8:33:43:fb:f6:23:2e:95:8c:53:c3:8a:81:
         18:60:f8:d2:d1:09:d0:a7:87:ca:e6:a1:af:aa:83:f0:48:4b:
         93:19:2c:6d:4a:cf:ca:85:03:35:c8:08:2d:0e:64:5b:a5:05:
         87:d7:8f:1a:bd:80:a6:25:53:6e:be:f4:0d:8a:0d:61:e2:54:
         6c:01:69:ca:34:3a:14:e3:2a:49:8c:4d:56:e1:5c:da:73:47:
         3b:9d:1d:0f:df:d2:12:e2:82:ba:68:27:9b:8b:64:71:ee:30:
         40:6d:bc:a0:c2:d5:fc:09:8d:45:9f:28:92:fc:f1:78:13:78:
         33:bf:66:5c:5b:81:f6:d3:8c:57:da:c1:6b:25:e1:60:0e:0e:
         3b:50:e7:2b:f7:09:64:25:70:c6:f8:68:c8:de:66:74:d7:6f:
         c1:de:ab:c1:84:6c:8a:46:85:ee:2e:d7:45:46:5b:77:33:3f:
         f6:14:fb:ba:ac:aa:d8:6d:37:21:aa:37:43:81:af:64:49:80:
         97:9b:8e:5a:d4:10:3a:48:00:76:46:63:11:bf:2c:fd:f8:c8:
         b3:fc:3b:7c:fa:b1:cc:b8:5d:5e:32:9c:46:6f:65:38:9f:43:
         a7:23:f2:6a:9d:02:e2:d5:61:e2:f8:b6:7b:06:76:38:82:8c:
         21:74:69:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:25:17 2025 by rpki-client