Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4b899db3-55d6-3a3c-8b71-7fcce45f09b7.roa
File:                     4b899db3-55d6-3a3c-8b71-7fcce45f09b7.roa (raw, json)
Hash identifier:          5IW7y7g6hSZIZy4SiEB9pq41ibUc5zLTx6YVd1tj7bk=
Subject key identifier:   0A:2A:20:D3:86:AB:4D:EA:E0:2D:B2:FA:C6:D0:B5:51:CD:74:6D:75
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285848A318A48BCF48476A990B5A40
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4b899db3-55d6-3a3c-8b71-7fcce45f09b7.roa
Signing time:             Thu 23 Jan 2025 06:13:18 +0000
ROA not before:           Thu 23 Jan 2025 06:13:18 +0000
ROA not after:            Wed 23 Apr 2025 05:13:18 +0000
asID:                     16591
IP address blocks:        136.61.208.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:18:a4:8b:cf:48:47:6a:99:0b:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jan 23 06:13:18 2025 GMT
            Not After : Apr 23 05:13:18 2025 GMT
        Subject: CN=c5ce4706-d7dd-4177-b47e-f521fbaf5982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:53:56:eb:76:ce:9f:97:6b:58:9e:54:18:d1:
                    5b:9f:91:47:99:16:71:49:44:e7:db:d8:d3:1c:5b:
                    00:30:54:7f:b0:f0:00:b1:6f:a7:7e:2a:d5:1d:07:
                    24:dd:66:0f:ca:21:d2:72:87:71:d6:ff:19:9d:82:
                    98:5b:c9:42:c3:e0:d8:03:8e:28:d3:a4:30:bc:37:
                    39:fd:48:a7:b4:12:d7:41:2d:18:a6:ce:e3:51:40:
                    1c:55:c2:c6:38:f3:fc:25:b3:64:cc:fc:d2:0d:60:
                    4d:e3:f6:8b:16:a8:15:6c:e1:fb:1c:17:83:ff:d1:
                    a3:a2:f2:25:a8:26:31:fb:0c:90:0d:4a:ea:03:39:
                    df:cd:1b:c8:65:94:da:e2:0e:be:24:17:90:ef:5b:
                    c8:47:54:4d:e7:16:58:11:5d:5a:3c:10:dc:f2:3e:
                    ee:7d:d8:79:92:cb:fd:b4:64:d6:70:05:64:86:95:
                    bb:7d:83:df:72:c1:35:5c:b2:c6:31:83:73:9f:7c:
                    7b:b6:7a:4f:b3:ef:48:fb:d0:aa:28:55:60:23:3b:
                    ce:de:01:9a:33:a6:eb:d7:3e:61:b1:68:56:26:cf:
                    ea:58:fc:8c:c2:85:c2:f6:85:f3:cd:2d:9b:f3:3e:
                    e1:80:18:a9:45:75:2b:f3:b4:b6:82:43:82:57:63:
                    8e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2A:20:D3:86:AB:4D:EA:E0:2D:B2:FA:C6:D0:B5:51:CD:74:6D:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4b899db3-55d6-3a3c-8b71-7fcce45f09b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.61.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:1a:57:29:25:07:fa:6d:f4:26:c7:c9:24:03:bd:15:20:94:
         38:0b:f9:21:b4:e2:af:29:8f:83:fe:f6:b1:ea:34:7c:83:15:
         6e:38:2f:ba:af:b1:85:70:4c:ff:38:e8:55:ca:ad:51:16:d2:
         ae:a2:28:b3:c9:86:d9:30:05:25:01:f1:bd:da:a2:bb:31:11:
         13:85:b5:5c:a4:c3:e2:21:4c:b8:b8:40:b1:20:bd:0e:f3:7c:
         cd:b8:db:9d:66:b4:cd:b7:75:51:c4:88:74:dd:01:02:b8:37:
         9c:fc:67:1d:e4:02:ff:a6:5f:b4:c9:ee:90:ce:01:1f:82:a3:
         d1:1c:e7:51:27:50:50:26:52:68:07:65:58:83:af:01:68:15:
         3b:41:fe:37:d2:07:d4:6a:e5:01:a0:25:c6:c3:69:26:af:eb:
         72:96:89:b0:06:4f:ff:b7:83:f9:54:1f:f9:0c:67:08:78:fd:
         66:fd:1b:af:08:ca:85:7b:f6:21:b8:b4:ac:58:8c:e7:7f:ad:
         30:8e:3c:8d:8e:42:85:5e:9c:17:2c:89:9e:5e:ec:e4:c6:a1:
         a2:d5:bc:b2:6f:d3:83:52:58:b0:5e:c9:80:7b:9e:4e:17:69:
         9d:27:68:e7:23:ef:9d:c3:a1:73:81:17:4e:af:0e:91:04:62:
         5f:c6:2b:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKSLz0hHapkLWkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDEyMzA2MTMxOFoXDTI1MDQyMzA1MTMxOFowLzEtMCsGA1UEAxMk
YzVjZTQ3MDYtZDdkZC00MTc3LWI0N2UtZjUyMWZiYWY1OTgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1NW63bOn5drWJ5UGNFbn5FHmRZxSUTn29jT
HFsAMFR/sPAAsW+nfirVHQck3WYPyiHScodx1v8ZnYKYW8lCw+DYA44o06QwvDc5
/UintBLXQS0Yps7jUUAcVcLGOPP8JbNkzPzSDWBN4/aLFqgVbOH7HBeD/9GjovIl
qCYx+wyQDUrqAznfzRvIZZTa4g6+JBeQ71vIR1RN5xZYEV1aPBDc8j7ufdh5ksv9
tGTWcAVkhpW7fYPfcsE1XLLGMYNzn3x7tnpPs+9I+9CqKFVgIzvO3gGaM6br1z5h
sWhWJs/qWPyMwoXC9oXzzS2b8z7hgBipRXUr87S2gkOCV2OOuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAoqINOGq03q4C2y+sbQtVHNdG11MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNGI4OTlkYjMtNTVkNi0z
YTNjLThiNzEtN2ZjY2U0NWYwOWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD3QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIoaVyklB/pt9CbHySQDvRUglDgL+SG04q8pj4P+9rHqNHyDFW44L7qv
sYVwTP846FXKrVEW0q6iKLPJhtkwBSUB8b3aorsxEROFtVykw+IhTLi4QLEgvQ7z
fM24251mtM23dVHEiHTdAQK4N5z8Zx3kAv+mX7TJ7pDOAR+Co9Ec51EnUFAmUmgH
ZViDrwFoFTtB/jfSB9Rq5QGgJcbDaSav63KWibAGT/+3g/lUH/kMZwh4/Wb9G68I
yoV79iG4tKxYjOd/rTCOPI2OQoVenBcsiZ5e7OTGoaLVvLJv04NSWLBeyYB7nk4X
aZ0naOcj753DoXOBF06vDpEEYl/GKyo=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:37 2025 by rpki-client