Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/dd67e180-e55b-30f0-accc-6c4f6e8c8c94.roa
File:                     dd67e180-e55b-30f0-accc-6c4f6e8c8c94.roa (raw, json)
Hash identifier:          MKO++KQYHeGFsa8afB9RQhowg0HMXYMEomEHca02nEQ=
Subject key identifier:   03:CF:4F:85:1B:2C:B6:80:42:A4:E2:89:16:5B:BB:FC:36:5E:25:F9
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F43285848A04910D5D18288130A5DBB80
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/dd67e180-e55b-30f0-accc-6c4f6e8c8c94.roa
Signing time:             Wed 22 Jan 2025 06:03:26 +0000
ROA not before:           Wed 22 Jan 2025 06:03:26 +0000
ROA not after:            Tue 22 Apr 2025 05:03:26 +0000
asID:                     19165
IP address blocks:        136.27.192.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a0:49:10:d5:d1:82:88:13:0a:5d:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Jan 22 06:03:26 2025 GMT
            Not After : Apr 22 05:03:26 2025 GMT
        Subject: CN=af3e0d6e-1724-4c12-8622-20d5890ddfdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:48:18:52:6f:ae:2f:d7:bd:1f:9a:e8:25:d5:
                    43:ec:a2:bc:69:a4:c9:cc:25:a9:48:e5:68:01:96:
                    54:96:d7:b2:47:6d:d1:a6:79:4b:5d:61:f2:3a:97:
                    06:3d:f7:57:35:ba:c5:f6:cf:cb:fd:ca:1b:d5:0f:
                    37:20:e9:7f:d2:8d:7e:44:9f:38:1f:6d:6e:d9:7a:
                    93:4a:33:92:d5:a2:32:80:a1:19:fb:0c:48:f6:52:
                    5d:d2:44:51:5e:c1:1c:b0:f0:d1:4e:ca:de:20:7d:
                    89:f2:5f:23:74:6c:24:fe:ba:36:84:d7:e5:25:d5:
                    a3:be:0a:c4:ce:d8:5b:81:6d:e3:72:a9:52:c2:48:
                    fb:a1:92:db:09:19:bd:6e:30:34:d5:89:ce:88:7d:
                    75:41:c4:18:f9:0b:a3:c6:23:20:2c:cf:7d:f1:11:
                    0e:43:80:ca:d3:32:40:a2:af:86:35:7c:57:82:f8:
                    5d:69:f6:2f:43:df:9f:76:b2:30:35:0b:6f:15:2c:
                    52:89:e9:84:b0:6a:7a:05:eb:fc:e8:23:bb:a6:1a:
                    cf:55:52:16:ea:11:9e:76:88:cb:59:aa:c9:f4:74:
                    b5:96:49:d3:6c:55:ba:e1:f8:01:ae:3f:0b:7b:29:
                    bf:5a:1f:fc:ae:a5:cc:9d:3e:f5:5c:ab:a3:7b:43:
                    dc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:CF:4F:85:1B:2C:B6:80:42:A4:E2:89:16:5B:BB:FC:36:5E:25:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/dd67e180-e55b-30f0-accc-6c4f6e8c8c94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.27.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:be:7a:dd:5f:e7:f0:b4:1b:79:27:40:d8:3e:5c:26:26:aa:
         6d:aa:26:8d:3b:90:fb:99:de:84:8a:83:af:9c:49:c5:c0:05:
         96:9b:c0:32:b5:49:07:fe:bd:a3:b3:ec:a2:b7:e8:c7:fe:3e:
         90:9e:cc:f9:ea:53:e6:e4:2c:11:34:8f:bb:dc:db:39:52:d2:
         9e:08:dd:4b:e4:70:15:b1:e0:53:e8:8e:6c:b0:d1:de:fe:66:
         78:6b:ac:6f:82:85:1a:1c:de:2e:dd:d6:aa:53:af:bc:05:d8:
         85:e8:6b:c0:c1:6f:ef:16:0d:e4:35:ca:e4:10:3c:19:03:bd:
         23:04:f7:7f:09:f7:7f:58:90:9d:18:2e:c0:5d:e3:07:e9:c5:
         e7:59:a2:0f:4e:08:8d:2c:b3:13:5c:48:ea:52:93:fc:de:f8:
         3f:81:68:f5:c4:b3:b6:b7:7d:a2:69:92:98:c3:81:d0:3e:11:
         99:fc:1c:3a:d6:de:49:80:d8:4e:4e:2a:b5:c1:fa:b8:be:dc:
         9e:8c:bc:37:88:88:b8:48:2b:a2:93:7c:2e:41:fc:07:34:8e:
         e1:72:f7:2b:62:0e:0e:06:6f:28:cf:73:a5:41:a3:07:a8:c0:
         82:c5:cd:73:43:f7:fd:87:05:1d:30:ff:e8:e7:6b:ae:72:3b:
         fd:14:e9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:35:00 2025 by rpki-client