Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3fbc693e-94c5-364e-a032-9c4c6036e73e.roa
File:                     3fbc693e-94c5-364e-a032-9c4c6036e73e.roa (raw, json)
Hash identifier:          1IIUdOTRT0Grq0QueUlhi6N9QlzrUdKMlc2kKW6LBh0=
Subject key identifier:   AF:2A:D9:B3:9F:1A:BB:B6:F9:F4:C7:02:76:C5:0D:F7:4E:93:51:AD
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848388545E6FDBDBC81A4D86F00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3fbc693e-94c5-364e-a032-9c4c6036e73e.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     396362
IP address blocks:        136.0.103.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:45:e6:fd:bd:bc:81:a4:d8:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=57fa9ed3-ca34-4951-8f04-67231151402d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:66:ed:4f:5e:80:31:2e:6d:f8:71:a0:ac:b5:
                    96:93:cb:9b:e4:8a:aa:d4:4c:4f:d5:65:e5:e7:37:
                    24:7c:03:17:44:75:ab:f5:03:8c:99:48:a9:24:fa:
                    df:d4:9e:63:dd:e5:65:8f:59:12:ad:62:91:a1:9e:
                    39:d2:01:a3:36:bf:12:70:c0:58:bc:2d:f8:d9:68:
                    6b:bb:a2:d5:bf:30:c2:e9:12:48:2f:31:df:bf:df:
                    90:2e:e6:0f:35:3c:37:1b:bb:7b:09:87:e6:b3:bb:
                    13:63:47:e4:30:08:f2:48:e9:3b:aa:31:12:f7:b7:
                    b9:db:20:58:e8:ee:cb:64:d6:55:11:a9:e0:81:b1:
                    5b:34:07:b4:07:02:26:03:2b:4d:4c:84:64:05:8d:
                    f1:cc:2c:88:f3:b4:0d:2f:68:93:2e:87:2b:6d:59:
                    a3:31:54:b4:36:a3:52:1b:14:08:70:db:82:e2:0a:
                    df:bc:ea:36:d9:20:7c:5d:e6:6e:14:34:dd:d2:8d:
                    e3:b6:ae:64:9e:5a:99:8d:66:0e:87:14:cb:df:ff:
                    c6:d2:ec:e8:18:3e:e3:f8:c5:94:79:d5:6b:d6:04:
                    97:72:0e:74:aa:e0:32:16:28:a8:2d:be:74:b2:7c:
                    49:d2:9d:12:1c:49:00:bd:0f:c1:e9:3c:e7:fb:0d:
                    29:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:2A:D9:B3:9F:1A:BB:B6:F9:F4:C7:02:76:C5:0D:F7:4E:93:51:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3fbc693e-94c5-364e-a032-9c4c6036e73e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:70:a4:f6:6c:da:13:2d:d8:b3:68:06:f2:e1:05:1e:e3:0e:
         84:64:41:47:9d:00:31:f7:84:9d:92:75:59:8e:04:ea:99:22:
         5f:1d:66:64:26:1c:c5:cd:c2:cd:08:96:01:c1:09:e1:28:93:
         58:64:b9:18:83:8b:e2:aa:13:68:10:6e:5b:a9:8d:ae:85:70:
         11:b0:d7:f2:cd:26:3f:c2:b8:e2:0b:2c:dd:9a:73:33:70:08:
         44:83:45:45:4c:e7:16:8d:fa:eb:f5:e5:15:10:fc:c8:23:9d:
         59:0f:bf:61:2f:c4:a5:9a:d3:d0:53:8d:0d:bf:84:9b:a5:fe:
         6a:da:36:55:1e:44:9b:c6:a2:37:0f:67:f4:ea:57:6a:75:cd:
         a3:53:9d:ab:e6:3f:dc:a4:3b:e5:9c:a9:92:37:15:50:6e:ca:
         f6:73:d5:e8:43:d7:fd:32:3d:62:96:8f:1f:d9:6a:37:70:0b:
         58:1b:ac:2c:f2:40:2c:b7:fb:00:7a:2d:dd:60:cf:55:23:8f:
         2f:35:10:82:c4:f5:09:a1:c7:90:10:90:e7:62:42:cb:c1:28:
         7e:9e:95:d2:91:fa:09:2e:09:c0:51:40:6f:21:0d:f2:f3:93:
         d1:24:f2:d8:a1:05:02:c5:bf:aa:a9:be:e0:1d:8c:01:df:10:
         f4:93:a2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:27:50 2025 by rpki-client