Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7a7c7082-67e5-3be4-b00d-ab9b02f70527.roa
File:                     7a7c7082-67e5-3be4-b00d-ab9b02f70527.roa (raw, json)
Hash identifier:          Sq1ti9f+yeNnV+MdviD1GIR7ECf8d5D8/IECXTsriMo=
Subject key identifier:   F0:CA:43:26:CD:25:34:B2:0E:2A:CE:C4:70:B0:53:B5:5D:87:45:44
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285848A318A7B0DD970A34DFF62480
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7a7c7082-67e5-3be4-b00d-ab9b02f70527.roa
Signing time:             Thu 23 Jan 2025 06:13:19 +0000
ROA not before:           Thu 23 Jan 2025 06:13:19 +0000
ROA not after:            Wed 23 Apr 2025 05:13:19 +0000
asID:                     16591
IP address blocks:        136.37.192.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:18:a7:b0:dd:97:0a:34:df:f6:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jan 23 06:13:19 2025 GMT
            Not After : Apr 23 05:13:19 2025 GMT
        Subject: CN=514913d1-b3a7-446d-bcb0-dad91c302984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:37:b7:51:a7:0c:61:e4:b2:4e:93:92:eb:c2:
                    a9:24:e1:13:c3:28:5d:60:69:02:48:c9:fe:61:39:
                    78:05:c0:80:f5:13:65:89:98:6d:14:ef:ba:c8:3c:
                    22:9b:cb:8f:27:ac:83:10:61:33:44:30:ac:99:5a:
                    64:91:ab:2c:eb:e9:36:fb:a5:59:20:c1:77:0b:00:
                    9b:d9:33:d8:22:2c:3f:99:9c:00:4e:d7:6b:07:20:
                    5c:cc:f0:96:90:19:a3:24:44:c4:f4:f0:60:d8:b8:
                    b5:84:f1:5e:86:8a:c7:6d:1f:68:05:a9:dd:75:d4:
                    f9:83:3c:14:cd:3e:ff:f6:fb:af:94:16:b2:5e:eb:
                    85:2e:08:18:6d:12:84:5a:9b:61:79:f6:19:2f:28:
                    7a:26:db:bf:23:13:3c:2c:d1:b8:43:de:d8:17:4d:
                    54:d8:14:5d:a4:55:cf:21:40:a7:42:e1:93:1b:12:
                    36:4a:61:db:26:de:29:79:bc:cc:65:4c:cd:2a:5f:
                    db:a8:a3:25:c8:89:ba:5f:2e:61:27:53:7c:cb:05:
                    33:14:e3:39:d6:f2:6d:bd:7f:87:e4:b1:96:31:57:
                    8e:08:dc:57:3f:4f:1b:f6:50:09:be:dd:74:56:3f:
                    3d:f9:3d:07:69:f5:00:61:b4:5d:a7:43:c0:0c:91:
                    ae:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CA:43:26:CD:25:34:B2:0E:2A:CE:C4:70:B0:53:B5:5D:87:45:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7a7c7082-67e5-3be4-b00d-ab9b02f70527.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.37.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:80:6f:91:67:43:36:da:78:12:66:15:d8:09:aa:56:f0:c2:
         4e:78:6f:ad:ef:02:b6:ed:0d:35:2b:12:7b:04:9c:a1:26:20:
         96:ce:c9:0b:d8:cc:1f:bc:7a:e4:97:bf:69:f6:0a:06:d1:d8:
         98:14:36:f3:19:a4:d9:fc:07:6c:96:fa:41:c6:9f:9c:f4:74:
         3a:0d:e1:fb:94:50:79:dc:d9:b2:ae:eb:75:9a:32:83:f2:7d:
         1b:03:07:3a:fe:ac:12:f4:f0:50:b7:29:a2:2b:47:81:da:44:
         f1:f3:f9:ce:88:10:af:0b:21:e7:77:ed:15:19:23:88:64:71:
         72:31:a8:6b:da:e6:65:7f:b4:73:04:ea:72:fe:a1:1b:28:24:
         af:57:c2:af:4f:cd:a2:e2:5f:3d:f4:17:61:5e:e4:e2:3b:69:
         22:ad:fb:1d:fc:29:e9:19:a8:44:66:85:c7:5a:54:75:61:25:
         6c:48:25:02:b0:ab:1b:e6:30:37:d8:d3:fc:de:6e:41:34:4b:
         84:86:15:2f:4f:9e:fc:1d:b8:e7:92:b3:5e:6d:6c:64:61:30:
         59:3b:1b:ab:f5:3c:18:ac:c8:2e:bd:0f:21:e4:88:d4:f2:28:
         36:32:dd:21:6b:55:97:8b:b5:de:97:82:c5:b1:50:01:53:cd:
         5d:4a:ea:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:10 2025 by rpki-client