Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/74e42a91-4e6a-38f3-9928-86c5ee9607d6.roa
File:                     74e42a91-4e6a-38f3-9928-86c5ee9607d6.roa (raw, json)
Hash identifier:          T/x8uY1Wo5kg+ryKZ3+wVc4NRxq+P5mXAel1ZlD93K0=
Subject key identifier:   4E:DE:59:31:70:D6:3D:D2:C5:52:88:D6:F5:98:3E:28:06:55:7F:89
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F43285848D2114035F45242D3EE570280
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/74e42a91-4e6a-38f3-9928-86c5ee9607d6.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        136.245.64.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:40:35:f4:52:42:d3:ee:57:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=d27e1401-21b3-4b6f-a816-73f3c9e4a948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c2:82:1c:f1:9a:5b:39:59:47:b9:e7:e4:d2:
                    d5:c4:d5:b8:18:70:1f:2a:ac:37:5c:2c:a0:fa:4a:
                    1a:e7:c6:ba:c2:da:b3:32:fc:21:f2:29:48:fb:ce:
                    28:3d:89:16:6d:e5:2f:66:61:47:2e:47:10:4b:90:
                    36:3a:a0:1e:25:58:43:d9:ef:5b:0e:2c:e8:21:15:
                    cb:f8:b4:fc:ef:f8:40:8a:d0:42:5b:2b:0a:b3:76:
                    4b:31:c4:00:45:a6:f6:bb:df:f7:82:fb:2a:b5:db:
                    91:4b:58:e4:6a:98:04:14:3d:a3:2d:b3:52:b4:5c:
                    d6:c2:0f:15:a8:41:c2:59:c9:93:df:a2:10:39:fb:
                    e6:d6:e3:3f:31:77:18:74:0b:d6:f5:1c:66:2e:8c:
                    12:fe:00:3f:96:98:ba:5a:a6:a1:8c:f3:98:48:3f:
                    8e:f4:9f:93:f1:e5:e5:0e:a8:a3:12:6f:6c:f6:1f:
                    30:57:76:ef:47:57:68:d8:9a:71:fb:17:3a:e3:56:
                    6d:ec:27:d8:70:ba:80:89:98:59:c4:77:69:a4:09:
                    23:59:6a:37:c1:69:ee:e0:7f:82:a9:05:c8:a9:34:
                    be:5e:79:01:38:62:0e:53:3e:c3:8d:27:f3:bb:40:
                    fa:da:d7:2d:a9:fd:ca:85:31:e9:71:12:5f:0e:66:
                    08:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DE:59:31:70:D6:3D:D2:C5:52:88:D6:F5:98:3E:28:06:55:7F:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/74e42a91-4e6a-38f3-9928-86c5ee9607d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.245.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:9c:11:33:c4:6d:fa:91:4f:47:1d:13:4b:2f:bc:58:b8:06:
         53:a3:c6:fd:80:97:1d:cc:c4:19:67:a5:9c:cb:cb:75:03:64:
         e8:77:06:9a:6a:b9:12:de:7e:de:37:1a:1f:66:af:88:92:5b:
         af:a7:9b:16:63:4d:0d:a1:0f:02:6c:58:8b:09:03:47:35:28:
         79:c5:5e:8a:2a:b8:d0:cc:16:2e:e8:ca:f1:58:f4:de:b9:fb:
         fe:2d:aa:62:e9:16:1a:9d:8d:dd:f3:f8:74:35:a4:fe:be:76:
         04:a4:61:d6:17:1d:ae:2e:7f:18:a8:f9:ab:cd:1f:39:c1:92:
         af:81:70:6c:a6:d8:a5:2f:1c:5f:3e:ea:37:7e:3e:25:7c:93:
         63:1c:ca:0b:97:53:4b:5e:a7:98:dc:27:69:19:09:16:5d:29:
         cc:49:55:ad:9a:fa:47:bf:df:b8:b5:a5:11:e1:f9:b6:56:48:
         08:bd:fe:90:c2:41:b1:5b:7c:7d:5e:69:d7:f1:f8:55:67:0d:
         d9:dd:a2:fd:58:e5:d3:07:41:a7:6c:cd:a1:af:7f:5d:3a:12:
         93:fd:88:7d:bd:43:89:1f:31:62:15:e2:81:cf:fd:a2:ed:ce:
         4a:6c:f2:6d:d1:c5:22:4f:a1:14:df:9f:cd:25:5d:e5:df:9d:
         78:30:f1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:45:28 2025 by rpki-client