Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/28e91201-8ec4-3965-a7ba-e5e4a38a0bee.roa
File:                     28e91201-8ec4-3965-a7ba-e5e4a38a0bee.roa (raw, json)
Hash identifier:          V3vu+3bUTc5FaOM5lkEZ3ctlIixYEyZPqD+ZzXxMQzg=
Subject key identifier:   FC:8B:87:E7:95:83:40:5E:09:78:EF:CE:BF:CA:C3:79:CE:3A:13:31
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584886B0728C470061274F0980C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/28e91201-8ec4-3965-a7ba-e5e4a38a0bee.roa
Signing time:             Mon 13 Jan 2025 02:00:40 +0000
ROA not before:           Mon 13 Jan 2025 02:00:40 +0000
ROA not after:            Sun 13 Apr 2025 01:00:40 +0000
asID:                     401152
IP address blocks:        136.0.31.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:86:b0:72:8c:47:00:61:27:4f:09:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 13 02:00:40 2025 GMT
            Not After : Apr 13 01:00:40 2025 GMT
        Subject: CN=538be514-575c-457a-94d3-cde451b8e057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ed:d7:5a:e2:6e:bb:0d:e6:30:e6:a5:89:98:
                    e8:d4:90:60:53:64:43:92:02:cf:ae:2a:6e:77:a8:
                    be:0a:78:e0:bb:c3:b0:a6:17:e3:36:07:c0:fc:4c:
                    d8:41:65:5a:70:dc:cf:30:69:01:71:e2:6a:34:0b:
                    6d:2b:91:f2:66:e2:5b:e4:06:81:ea:8a:06:56:18:
                    96:e8:fe:3b:01:13:c0:40:79:4d:96:c8:1a:55:b0:
                    67:eb:1d:39:f0:34:bc:c2:27:29:d2:31:99:48:e1:
                    89:a4:c7:76:1c:e2:69:f4:57:80:24:f4:1b:ee:e3:
                    25:9d:67:cd:23:53:7a:5a:b4:ec:96:e7:2e:c8:26:
                    b3:0c:e8:90:79:a5:d6:ff:b6:62:11:87:3b:d9:7a:
                    99:ce:11:d8:e5:fc:e9:dc:85:c5:68:2d:18:57:ab:
                    c9:23:35:55:b4:66:c2:64:fa:85:ff:40:7f:1d:6a:
                    83:69:1c:44:c7:d7:7f:d6:cc:f0:fc:1f:9a:ca:eb:
                    fd:fe:a7:31:2b:d8:24:49:6c:87:f0:1d:3d:52:fe:
                    ab:9c:49:70:17:d0:16:61:5e:24:f9:fd:0a:c6:e8:
                    bb:32:ba:14:2b:62:24:1c:9a:5e:67:c7:19:34:0b:
                    a5:a7:76:18:94:cb:92:97:ab:68:c2:5f:bc:9d:f9:
                    57:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8B:87:E7:95:83:40:5E:09:78:EF:CE:BF:CA:C3:79:CE:3A:13:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/28e91201-8ec4-3965-a7ba-e5e4a38a0bee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:74:3f:34:3a:c7:69:ea:6d:56:f0:fa:5a:c7:1f:4d:96:e9:
         db:36:a9:1e:68:07:e9:c0:6c:6b:e6:d0:36:21:36:52:94:0f:
         5f:e3:34:52:db:7b:fd:0b:2e:53:89:54:2e:29:2f:cc:5f:77:
         b4:2d:d5:a2:b4:8e:1d:d7:42:4a:88:91:09:3f:69:7b:54:c2:
         46:c2:39:7f:66:97:4b:0b:88:ff:a5:1b:57:5c:5f:10:84:71:
         50:9a:4d:28:fc:d9:f3:33:2d:2d:3d:f0:bc:b2:36:54:fe:1e:
         99:70:f7:ac:69:dd:b7:e4:26:2c:cb:94:54:83:f0:d4:ef:2d:
         0b:e8:48:42:12:d3:3f:17:b0:95:b9:19:a0:72:c0:45:1f:9f:
         92:43:5e:22:3a:f1:cd:05:12:3a:16:66:66:29:d2:0d:4f:ec:
         8e:65:4c:6d:30:fa:e8:24:be:f2:0f:43:83:02:45:ca:71:19:
         1f:01:93:4f:51:ec:1d:a8:99:8b:de:50:0f:14:74:ff:e8:49:
         7c:a3:02:76:c3:49:8a:30:47:8e:43:87:44:3c:ae:42:96:eb:
         8b:de:45:f6:c4:df:5c:3b:07:19:37:d8:33:3d:29:c5:fc:0a:
         39:6e:b3:38:6b:39:88:28:b6:d4:ed:db:92:e4:9a:01:6e:f2:
         30:de:74:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:50:43 2025 by rpki-client