Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/305d5804-7648-315f-9b20-30d795b457ca.roa
File:                     305d5804-7648-315f-9b20-30d795b457ca.roa (raw, json)
Hash identifier:          cTShAXYqK9T0VRtJpCRtxbSMDQCqC6CS1D/r6xdnxgk=
Subject key identifier:   14:90:CE:C7:7B:FF:3D:2E:17:6C:56:1C:FD:E9:61:4F:CB:B9:A7:ED
Certificate issuer:       /CN=6cc31951-8581-4fc7-a691-41d9e992a7cc
Certificate serial:       010D0C9F4328584925B3AE98289AB4EB30F22DC0
Authority key identifier: D7:2C:52:8E:CC:F9:6F:78:BB:0D:8F:B7:F9:E6:FC:2A:8F:5D:C2:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/305d5804-7648-315f-9b20-30d795b457ca.roa
Signing time:             Tue 11 Mar 2025 01:00:40 +0000
ROA not before:           Tue 11 Mar 2025 01:00:40 +0000
ROA not after:            Mon 09 Jun 2025 01:00:40 +0000
asID:                     46887
IP address blocks:        204.13.136.0/22 maxlen: 22
                          204.13.136.0/24 maxlen: 24
                          204.13.137.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:25:b3:ae:98:28:9a:b4:eb:30:f2:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc31951-8581-4fc7-a691-41d9e992a7cc
        Validity
            Not Before: Mar 11 01:00:40 2025 GMT
            Not After : Jun  9 01:00:40 2025 GMT
        Subject: CN=71ba4c88-b898-4321-8cfe-56b8975849bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:14:7f:24:e1:0f:89:5f:0b:d8:39:e5:38:be:
                    01:2f:14:7b:47:68:00:e7:6b:fe:a7:f3:11:41:16:
                    d8:90:46:3d:c3:f7:25:85:38:1d:db:b2:61:10:8d:
                    1e:04:f2:69:c6:3d:29:ae:33:b2:37:96:f7:cc:4c:
                    27:7c:df:ad:60:e0:17:f4:33:3a:92:11:06:f3:7a:
                    22:5d:02:4e:c2:dd:07:28:07:ba:90:0f:7a:1b:40:
                    25:36:51:f9:42:6b:2b:83:82:a6:18:ab:38:7d:08:
                    80:23:d4:92:bd:f6:94:c3:a6:06:6a:29:1b:08:d2:
                    42:19:2d:d7:ea:0a:da:93:27:53:96:1d:e5:e4:9e:
                    99:0c:f6:5a:58:41:06:fe:5f:22:0b:41:0f:59:19:
                    94:df:76:b2:a5:54:f5:ff:ae:9b:28:bb:c8:df:63:
                    b4:87:f4:8c:19:d4:31:4b:d5:68:03:0c:2a:97:45:
                    e3:e4:04:54:9a:0b:cb:1d:14:4c:5a:0c:55:27:91:
                    db:47:89:22:24:86:f8:8d:47:92:d9:70:b1:a8:db:
                    dc:1d:5b:ab:fe:79:e0:93:a1:aa:da:7f:6c:d3:44:
                    1a:b3:32:bb:79:8a:b1:4b:da:4e:a4:0b:a4:75:23:
                    b8:83:7a:5f:8b:94:a7:ba:12:34:e5:2a:c1:37:7a:
                    15:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:90:CE:C7:7B:FF:3D:2E:17:6C:56:1C:FD:E9:61:4F:CB:B9:A7:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/305d5804-7648-315f-9b20-30d795b457ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/6cc31951-8581-4fc7-a691-41d9e992a7cc.crl

            X509v3 Authority Key Identifier:
                keyid:D7:2C:52:8E:CC:F9:6F:78:BB:0D:8F:B7:F9:E6:FC:2A:8F:5D:C2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.13.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:a2:2a:ae:a6:8b:f7:6d:42:c0:30:54:2e:c6:0f:3f:9c:8b:
         cf:fc:fe:eb:6e:6f:d7:ef:4c:76:4f:7d:73:3b:d9:65:de:0c:
         f6:08:f3:e2:c5:cd:fd:58:00:c7:02:98:ac:7c:ec:3c:99:ff:
         35:a8:d2:92:73:14:2b:18:67:7f:19:26:1b:e2:7c:11:71:70:
         b3:e2:4d:22:de:a0:c2:e3:69:a1:8b:bd:17:e3:e6:cf:be:cc:
         83:c7:79:3a:ae:6c:55:06:e0:06:01:6c:a2:61:29:86:c3:d3:
         ca:7b:89:fa:09:72:a8:c7:d7:38:06:92:4f:80:f4:93:1f:dc:
         ae:14:50:db:b2:11:e7:61:2f:ad:24:20:1b:cf:28:f3:d0:61:
         8e:e4:3f:c6:8b:50:83:e4:47:51:2f:67:fd:ee:29:ff:34:b9:
         13:9a:b2:06:f3:48:83:82:cf:91:6e:3b:fa:65:d2:9b:4d:11:
         d7:18:1e:06:e1:db:92:5f:d1:db:6e:d4:d9:04:2b:5f:a9:6f:
         2d:5c:41:b8:13:78:d7:88:64:e8:38:f8:0f:a0:67:c8:83:02:
         81:4b:35:9d:cc:eb:db:18:20:3f:02:7a:71:62:ef:f7:37:57:
         39:5e:f9:0c:03:d9:43:de:80:92:a6:fd:ce:43:2b:96:4d:25:
         89:3d:77:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:29:44 2025 by rpki-client