Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/def6cc03-ef21-30d2-9a02-5e771e1a04a9.roa
File:                     def6cc03-ef21-30d2-9a02-5e771e1a04a9.roa (raw, json)
Hash identifier:          3anc0gjTJTkYGW5njOg7QeZIhfFtxrtwycMwraI07/k=
Subject key identifier:   74:40:BB:80:23:96:ED:97:33:FA:34:58:08:60:74:DA:9A:F9:33:41
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848705AFB03462762CAABC65BC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/def6cc03-ef21-30d2-9a02-5e771e1a04a9.roa
Signing time:             Sun 05 Jan 2025 02:00:39 +0000
ROA not before:           Sun 05 Jan 2025 02:00:39 +0000
ROA not after:            Sat 05 Apr 2025 01:00:39 +0000
asID:                     8881
IP address blocks:        136.0.148.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:70:5a:fb:03:46:27:62:ca:ab:c6:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan  5 02:00:39 2025 GMT
            Not After : Apr  5 01:00:39 2025 GMT
        Subject: CN=3b2d3f34-6213-4a9c-9d53-a003cdf57829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ae:a2:75:26:50:4c:5f:88:66:12:c3:0e:a4:
                    fd:ac:38:9d:15:09:f4:52:e2:78:c5:90:aa:20:ca:
                    eb:8c:2d:6c:01:91:08:15:fe:f2:8d:21:e9:68:4e:
                    76:40:44:c2:c5:2a:be:75:a6:06:14:36:5a:f5:49:
                    4b:e9:91:fe:b1:b4:2d:05:16:1a:a7:87:cc:80:fd:
                    ae:f1:48:66:a3:24:ce:6b:c9:69:e3:00:df:5e:3e:
                    e0:2f:de:5e:7f:6b:e7:fb:ae:b9:ca:39:c8:d7:81:
                    d9:fe:88:9b:eb:f8:80:63:51:3c:d8:9d:8b:b3:27:
                    f6:b3:71:6c:04:66:61:b8:03:be:6e:b2:db:9b:b2:
                    5a:6c:47:ce:8e:54:8d:95:f6:7b:13:97:05:35:7d:
                    af:4f:f5:91:a6:21:ca:11:71:b4:6a:21:fe:e3:5e:
                    ff:ba:cb:fd:c7:64:f9:93:48:a9:5c:e5:12:0d:85:
                    20:5d:99:89:f4:1f:ae:86:a3:45:4a:de:9f:54:1e:
                    95:e4:4e:d6:56:c0:4a:71:63:b3:dc:02:a6:99:c8:
                    0a:44:32:15:87:61:14:e9:fe:6b:ff:c2:d1:f9:ef:
                    18:d9:2b:c2:be:a2:be:42:a8:9c:ba:71:da:00:08:
                    6e:2c:bc:29:f6:f5:ac:91:c8:73:28:9a:8f:99:4f:
                    74:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:40:BB:80:23:96:ED:97:33:FA:34:58:08:60:74:DA:9A:F9:33:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/def6cc03-ef21-30d2-9a02-5e771e1a04a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:93:3a:bc:56:8d:63:9d:aa:9b:df:9f:da:1b:9b:f3:60:40:
         2b:04:02:70:83:b0:ec:2e:31:2a:3a:d2:4d:1a:8e:39:d4:6c:
         7d:4d:ee:1b:1c:ee:25:27:8e:e5:60:15:74:a6:88:b8:c4:5c:
         9a:98:4a:b6:c7:a9:8d:27:8b:23:a4:13:39:87:98:ee:2f:dd:
         4a:b0:b2:a5:06:25:d5:56:a1:81:3f:ac:6c:48:45:34:5c:c4:
         e1:6b:70:b0:1b:24:17:fb:96:cf:0f:76:e2:46:94:f5:5f:b3:
         84:fa:ef:85:34:b4:ea:3a:9f:c2:79:81:ca:39:79:c7:6b:5d:
         24:f0:81:2d:82:fc:f5:d0:22:6f:01:99:20:6b:42:cf:d4:ae:
         e6:ad:64:f2:d2:de:21:bf:75:0b:f9:64:ca:12:5d:d0:87:c5:
         0a:74:1c:69:36:9a:3f:f9:e1:e2:07:f7:5c:dd:c7:7b:d9:1e:
         64:da:b8:bb:27:67:b1:ab:fe:86:29:d2:51:68:4b:45:91:c0:
         72:cc:b3:cc:c4:3d:bb:f4:08:ab:e0:8c:3b:54:40:79:d0:79:
         98:98:ea:3a:75:96:cc:18:61:84:f6:6c:2f:a3:7b:96:8f:d5:
         9b:85:2b:e2:c4:33:0a:ea:9d:07:eb:c4:48:ba:9d:af:49:5f:
         1f:c1:d4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:56:31 2025 by rpki-client