Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2379076d-de21-3b5d-b7e6-dea44020b91c.roa
File:                     2379076d-de21-3b5d-b7e6-dea44020b91c.roa (raw, json)
Hash identifier:          lOz1x4GBoZ4V5Rss9v5fhB2fn/y+1p/xA0B/dVACu0I=
Subject key identifier:   A5:6A:A6:C1:A0:68:CE:55:AC:2E:02:26:CB:7F:BF:5B:83:8D:A1:37
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584917DC3CA406DC6EDE554FB380
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2379076d-de21-3b5d-b7e6-dea44020b91c.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     396362
IP address blocks:        136.0.101.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:3c:a4:06:dc:6e:de:55:4f:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=a149ed2c-0c22-4141-9a48-9e3462abc921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:12:e0:02:34:cb:c0:d9:0c:2d:40:1b:e1:79:
                    24:98:27:98:53:d0:de:9e:06:52:b1:79:85:5b:ea:
                    27:a2:d5:07:e2:8d:86:a8:84:27:91:60:60:3e:63:
                    1b:16:29:7a:43:1e:0c:f9:ce:de:3d:76:25:c2:62:
                    7d:49:5e:27:6c:d2:92:a6:ca:0f:cc:b1:22:9f:10:
                    91:ee:32:96:4b:e2:29:12:f5:9a:d7:ae:cd:ea:d8:
                    5c:59:58:75:cf:4d:ba:78:1c:17:2f:de:27:cb:61:
                    43:8e:8c:1b:0b:4d:d2:ff:eb:22:46:1e:26:69:59:
                    f4:0a:a2:d1:ca:63:8f:6a:c9:1d:c9:39:41:c0:ee:
                    45:d7:94:83:1b:70:2a:12:d9:9f:de:34:b7:b1:77:
                    73:aa:e0:72:f5:6c:2a:43:22:7a:dc:70:be:12:c8:
                    eb:7b:7b:15:91:57:c9:aa:b0:eb:c2:9a:4b:d0:df:
                    08:2b:a4:b7:ad:a6:4f:7d:ac:ac:32:25:d7:c6:9f:
                    c2:6a:bf:fb:80:aa:76:c6:89:83:71:a4:9a:66:50:
                    1a:66:4f:f5:cf:35:a4:f4:dc:72:6e:6b:4e:4c:ae:
                    82:dc:39:09:a4:e4:56:69:c1:d3:ba:af:13:78:ad:
                    2e:5f:7c:21:48:3b:68:d8:1a:2b:5c:ac:83:a8:7e:
                    8a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6A:A6:C1:A0:68:CE:55:AC:2E:02:26:CB:7F:BF:5B:83:8D:A1:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2379076d-de21-3b5d-b7e6-dea44020b91c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:0a:82:d5:c8:bb:c2:af:20:ff:ca:23:51:81:ee:4e:0d:5a:
         3f:e6:da:14:36:08:e2:3c:a3:a4:b3:e9:f1:65:4e:42:68:6d:
         f1:9c:af:b1:b8:bb:76:54:df:b6:c8:ef:41:23:82:1b:13:df:
         95:62:f9:78:7e:a1:29:a6:e4:30:7b:f8:4f:b6:2b:85:a4:c2:
         f2:49:5b:72:c6:96:b4:03:f7:46:4b:ce:72:75:85:ff:f6:74:
         22:3c:d9:67:b5:80:66:ff:8a:7e:cb:d1:b5:fc:2b:13:5d:0a:
         fd:6a:80:44:c0:34:8b:9a:84:34:b4:a7:4e:95:97:04:51:ce:
         ae:fb:04:2d:da:9d:80:8f:fb:1e:a7:06:30:a2:8c:67:67:94:
         2d:bd:27:cf:c2:a4:0f:18:7b:00:ac:2d:e7:32:56:13:cf:8e:
         a0:33:10:e8:5a:65:71:41:35:2e:eb:66:5c:b0:ad:64:43:62:
         5d:3b:45:97:02:b4:75:3a:04:45:b9:a7:e5:8b:2a:6f:4c:2a:
         86:76:92:31:6c:1b:a3:45:13:f3:14:69:fe:bd:63:91:4c:07:
         12:6d:78:42:b2:e1:7b:06:9e:81:5f:04:8c:2d:2f:71:dd:b0:
         c6:c2:72:b8:23:08:ee:fc:19:c4:4a:a7:4e:15:d9:9f:6f:e6:
         67:6d:78:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:39:26 2025 by rpki-client