Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/48925f21-01cd-3c3a-aa32-ac8dd0c553c0.roa
File:                     48925f21-01cd-3c3a-aa32-ac8dd0c553c0.roa (raw, json)
Hash identifier:          1T6qJyJ8IgUHz3C3a+LH3ZhDo2cJgwQRfTk7h3AP17M=
Subject key identifier:   74:C4:08:29:39:5D:8C:DB:D4:8C:F0:08:5A:7C:47:0C:25:E0:ED:1F
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285848A318A22A88FB7F9C6F84E880
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/48925f21-01cd-3c3a-aa32-ac8dd0c553c0.roa
Signing time:             Thu 23 Jan 2025 06:13:17 +0000
ROA not before:           Thu 23 Jan 2025 06:13:17 +0000
ROA not after:            Wed 23 Apr 2025 05:13:17 +0000
asID:                     16591
IP address blocks:        136.56.96.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:18:a2:2a:88:fb:7f:9c:6f:84:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jan 23 06:13:17 2025 GMT
            Not After : Apr 23 05:13:17 2025 GMT
        Subject: CN=16589c69-9d01-4de0-bc65-d5aa860dd5df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3e:1f:6d:e9:83:d5:92:d3:b1:f6:15:17:be:
                    d5:2d:0a:5f:ac:17:de:a5:e3:5f:84:b0:3b:ee:7a:
                    99:13:46:00:90:6a:1f:a5:b2:f9:d6:c7:01:18:49:
                    3b:8b:63:f4:b3:e3:df:56:09:10:ad:a2:04:3d:56:
                    18:ea:6b:f0:9f:42:8e:ff:da:f3:6c:f5:2c:28:44:
                    8d:27:5a:fe:8f:b6:43:b0:47:3b:ea:6f:43:b9:ca:
                    50:4d:04:5e:08:72:ee:30:c5:9c:26:0d:b6:41:1e:
                    b1:36:4c:90:7f:f7:83:f5:8e:84:53:23:8b:7e:d6:
                    b2:c6:e2:3c:6c:d8:bd:f9:48:af:20:64:3e:69:3d:
                    bd:de:c1:93:00:b3:d6:a4:bf:40:7c:df:ce:54:32:
                    99:dc:7e:8a:d1:75:e1:db:68:6b:a7:97:d4:ef:1b:
                    3a:cb:9b:63:b4:e8:05:ba:0e:a8:0f:51:88:d7:c3:
                    f1:fd:c0:0a:6d:e4:90:cd:6a:6d:38:7d:d3:17:34:
                    c9:86:25:77:f2:ef:83:a5:97:79:e1:9c:2e:7c:c8:
                    1a:68:bc:aa:f1:fb:9b:51:c3:fe:07:e0:d2:65:01:
                    ed:2e:2c:c9:d1:b2:11:41:1f:75:d5:4c:69:95:90:
                    59:75:86:cd:50:0d:bb:ba:81:44:68:79:ab:31:24:
                    ea:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C4:08:29:39:5D:8C:DB:D4:8C:F0:08:5A:7C:47:0C:25:E0:ED:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/48925f21-01cd-3c3a-aa32-ac8dd0c553c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.56.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:93:c0:c2:78:d2:1a:6d:80:d9:9f:db:5a:14:5d:3a:9d:b8:
         a2:d2:ab:84:72:00:25:7f:f8:aa:06:d2:5b:08:99:92:7b:5a:
         76:fe:ab:af:59:9e:80:c9:bf:b0:58:56:2f:b7:0e:60:a3:ee:
         55:81:b3:4d:55:4b:51:49:5e:f2:0e:7a:e4:1d:40:6e:90:d4:
         c4:10:b4:51:a9:a2:19:ee:b3:a6:4a:64:2c:aa:88:f9:22:36:
         e3:77:37:74:2d:f9:07:65:fb:9e:9b:c9:30:60:a2:c3:f3:d7:
         7d:e2:9b:d5:f5:5c:85:a1:0a:36:e8:e5:e0:21:84:01:d1:0c:
         c7:0d:37:2a:ac:33:01:60:65:43:9b:74:19:fc:e7:52:71:da:
         9c:5e:6d:71:23:33:2b:12:71:72:a9:4d:ba:97:2c:e2:50:02:
         d4:64:82:c5:7e:dc:c5:52:b5:7f:b1:a8:09:0a:a5:e8:2d:4c:
         64:b9:9c:0b:39:57:f9:56:bc:90:08:ab:67:64:9f:8f:b9:3c:
         e9:9a:68:3d:49:ff:82:61:94:b5:29:f0:4e:03:24:ba:b9:d0:
         6b:19:27:6b:ba:e9:50:a8:a3:78:2c:15:f3:0f:26:b9:17:5d:
         3b:0e:66:91:27:ed:7a:92:04:bc:f3:3e:6b:fc:c3:3f:8c:92:
         a0:4c:38:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:27 2025 by rpki-client