Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e0ca77d0-cc29-377f-83dc-1eebfa6c597c.roa
File:                     e0ca77d0-cc29-377f-83dc-1eebfa6c597c.roa (raw, json)
Hash identifier:          jT6bMSg8NycrDEMl+lI5/kjbJO1oVM/de+6cR1VGmpQ=
Subject key identifier:   A8:6B:39:1A:33:93:46:A2:5E:C3:FA:45:F7:BD:D0:D8:12:01:04:C3
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285848C582136E29E31EC3ACC66F00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e0ca77d0-cc29-377f-83dc-1eebfa6c597c.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.22.229.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:13:6e:29:e3:1e:c3:ac:c6:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=ab0cad3f-61dc-4255-ace5-473456a60c7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:84:75:8a:5f:67:89:e4:8e:cf:c4:cd:b2:76:
                    1b:fe:19:dc:d2:ba:43:e2:e5:b5:8c:c2:9d:06:f8:
                    c9:db:d0:0e:82:fc:7f:94:0c:95:f1:d0:48:45:91:
                    d0:f8:01:5a:33:51:43:9c:1f:66:a3:0a:e5:10:7c:
                    a0:8d:29:a5:9b:b7:d9:83:e2:4d:12:15:b0:b5:03:
                    94:9f:28:e2:7e:e4:d3:87:bd:3b:e2:e9:46:67:e9:
                    32:6a:44:11:fb:ed:0f:79:c7:97:98:c1:dc:f3:fb:
                    37:36:61:f7:84:44:01:f3:ac:91:da:f3:a9:cd:a1:
                    b7:29:25:f3:b8:c7:96:af:4e:ad:0b:48:0f:c0:22:
                    28:f5:59:aa:ea:31:84:38:49:32:ec:f3:07:6f:64:
                    24:cf:97:45:94:3e:d2:61:bd:a9:13:dd:86:c2:45:
                    46:bd:2a:fa:de:83:13:d3:13:e1:54:11:fb:07:09:
                    8c:e6:6f:7a:75:97:70:69:db:8c:44:2c:8f:21:8e:
                    5d:7d:33:f4:8f:31:36:70:e7:e1:e0:d0:13:7b:f8:
                    ee:23:8a:64:99:b3:28:db:32:92:a1:b9:a2:7d:20:
                    75:0c:19:22:4b:12:9c:7f:5f:52:8c:7f:df:3e:f4:
                    eb:5b:68:40:67:4c:9d:58:db:c2:ff:37:03:35:2f:
                    59:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6B:39:1A:33:93:46:A2:5E:C3:FA:45:F7:BD:D0:D8:12:01:04:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e0ca77d0-cc29-377f-83dc-1eebfa6c597c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:eb:75:90:7f:8e:e4:bf:f3:cf:86:21:a5:87:33:e8:f4:26:
         32:df:8d:fc:b2:37:6a:0c:ae:f8:0b:56:0e:d3:d0:a9:9f:6f:
         11:d0:02:f6:8b:e3:b3:50:26:51:ef:e7:35:c3:6d:44:dd:13:
         4a:23:53:e6:23:7a:28:e4:f0:7a:f9:c9:52:ea:67:8f:3e:e3:
         aa:5c:6b:23:bf:5b:3a:32:38:2f:31:c4:85:6b:f2:81:be:02:
         ef:31:e2:11:a6:6d:6c:5e:67:9a:02:51:81:2a:9d:33:3f:5e:
         ba:6f:20:c2:6d:12:73:aa:5c:33:61:9f:45:a5:59:4f:39:36:
         23:71:1b:61:43:91:8d:70:9c:9d:b5:43:45:19:75:0f:9e:37:
         16:16:eb:09:74:93:64:84:e5:56:13:50:b9:a4:7a:b5:46:87:
         1b:8e:8c:65:19:02:6f:e7:49:2f:86:88:ed:bf:9a:80:58:da:
         22:fd:33:c9:16:6a:39:63:38:09:21:aa:0f:bd:7f:11:65:95:
         cd:22:d6:37:f0:c4:85:1c:a2:35:53:36:73:90:47:a4:d7:93:
         e6:07:32:26:c1:c9:91:a9:09:c2:8c:1c:94:01:e2:9f:e8:5a:
         87:44:e6:92:11:d9:49:d2:50:6c:e6:83:eb:e7:9b:ab:08:67:
         f4:b3:3c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:32:31 2025 by rpki-client