Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d41af3be-033b-3682-9fce-2fe81eb547e0.roa
File:                     d41af3be-033b-3682-9fce-2fe81eb547e0.roa (raw, json)
Hash identifier:          /ov73srnZ3Goam/DL0n5hqr5dfmCoOzha22QlSADQmY=
Subject key identifier:   3D:FB:BE:68:AC:6D:85:24:04:C5:72:32:69:EC:5F:CC:92:30:35:C0
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848AF2B9DA90062A1B9998F2880
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d41af3be-033b-3682-9fce-2fe81eb547e0.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     18779
IP address blocks:        136.0.32.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:9d:a9:00:62:a1:b9:99:8f:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=0870b770-9be5-47a7-8290-2fd1ab7af8db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:28:3f:24:60:d9:a0:51:3b:ad:4d:93:cf:63:
                    a5:2d:4b:f0:fa:a3:b9:06:d1:a5:aa:a4:9b:55:52:
                    38:d0:81:d0:9a:fd:0d:ce:9b:59:05:8a:bc:89:13:
                    15:a4:74:87:73:63:76:89:eb:bc:c0:89:0c:88:b6:
                    a8:b3:af:a4:f7:66:7c:da:44:bd:af:d5:66:62:ec:
                    0e:ea:39:a4:0e:a8:c0:14:90:41:9e:9f:53:ba:ad:
                    fe:23:d9:1f:5d:f0:2f:5f:9e:f4:09:f8:5a:03:ca:
                    df:38:d3:69:b4:14:b0:60:9f:d7:df:81:7d:55:07:
                    cf:25:a8:f9:82:0e:ba:c7:4d:2f:4d:a4:cf:f5:a3:
                    62:70:9c:bd:ad:60:f9:b4:d8:55:02:97:64:5b:80:
                    2e:a8:97:61:c0:a7:ad:f6:ed:7e:15:0a:62:37:93:
                    59:d0:52:53:39:d5:70:27:8a:43:f8:29:d2:14:30:
                    fe:b0:73:2d:9e:2e:cc:66:15:91:e4:d6:a5:a9:16:
                    90:a2:f5:ff:93:9a:46:fd:00:29:cb:4c:a7:df:81:
                    3b:2f:92:7d:98:c5:06:77:95:f0:f8:8d:02:cf:17:
                    41:c4:71:8e:1b:46:17:40:90:37:67:89:88:c4:53:
                    77:f5:d4:55:1c:2f:07:0d:ef:a6:bd:56:60:bd:6e:
                    d4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:FB:BE:68:AC:6D:85:24:04:C5:72:32:69:EC:5F:CC:92:30:35:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d41af3be-033b-3682-9fce-2fe81eb547e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:32:18:a1:7f:14:60:e9:a7:48:b6:6f:a1:b0:db:36:c7:31:
         76:7b:6d:c2:8b:ce:ce:aa:1d:a1:af:10:ce:cf:64:b0:58:26:
         f9:b0:de:86:a4:f8:85:9a:5b:cc:3c:b1:74:bc:d2:58:6e:0c:
         f7:f1:87:82:d0:c3:97:35:fb:e2:78:1f:f6:28:08:e3:18:3d:
         63:c0:ff:a2:5f:51:7c:64:2f:3b:12:03:33:7a:08:57:a8:ad:
         e1:42:48:1e:ab:63:69:8f:aa:f3:42:a7:04:50:bd:9d:6b:25:
         18:9a:f5:f2:08:08:99:fa:2c:5c:0c:e7:7a:02:5b:10:9b:72:
         04:3c:34:bc:62:1f:2c:36:6c:3d:76:dd:72:ef:25:16:5a:ce:
         42:41:99:75:f9:d4:6e:61:61:10:9c:f8:3b:35:a0:97:ce:64:
         59:81:03:fb:04:ff:6e:88:25:95:1d:99:0c:7c:e3:b7:b9:bb:
         b5:ea:87:46:93:e8:0a:98:ae:3c:69:e5:c0:51:9d:24:0a:7b:
         3d:99:34:b6:3f:6b:41:15:6b:ac:69:aa:fa:f6:3f:2b:1a:0f:
         1d:6f:f7:79:5f:23:8c:86:47:f6:95:e2:b0:a9:e2:d1:4b:ec:
         25:ca:0b:20:b6:55:59:a8:88:dd:45:77:68:07:5a:cf:8f:81:
         7f:73:78:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:39:49 2025 by rpki-client