Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/11fca44c-2ef7-3fe0-a598-806d0f59ad39.roa
File:                     11fca44c-2ef7-3fe0-a598-806d0f59ad39.roa (raw, json)
Hash identifier:          vG3tV1S8mmCL21+BPDFUHhNU5RDgfsC4T/IZ94uYGSI=
Subject key identifier:   91:6A:4C:41:0C:A5:73:95:16:52:07:89:63:D8:5E:38:A4:97:72:74
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285848A318B0034AAE761609674EA0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/11fca44c-2ef7-3fe0-a598-806d0f59ad39.roa
Signing time:             Thu 23 Jan 2025 06:13:23 +0000
ROA not before:           Thu 23 Jan 2025 06:13:23 +0000
ROA not after:            Wed 23 Apr 2025 05:13:23 +0000
asID:                     16591
IP address blocks:        136.55.160.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:18:b0:03:4a:ae:76:16:09:67:4e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jan 23 06:13:23 2025 GMT
            Not After : Apr 23 05:13:23 2025 GMT
        Subject: CN=5bca9ebe-66b9-43d8-a568-7bb53ed65561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ed:a2:e9:24:79:66:fb:97:bb:9a:fc:6a:a2:
                    46:81:52:b6:c4:ec:f2:f5:10:57:46:2a:2a:d2:34:
                    97:98:1a:32:53:d2:ac:a3:23:67:b6:2c:2a:6d:0c:
                    11:f1:1d:a7:86:76:fa:86:98:b0:78:9c:ee:bb:16:
                    11:01:b7:bd:82:68:bf:55:81:c4:93:f3:b5:9f:17:
                    60:25:1f:30:07:09:e1:e3:64:32:be:f9:eb:c4:c1:
                    17:88:e3:d5:4b:5d:44:01:ee:2b:b2:f9:8b:ed:ec:
                    d1:be:93:ae:76:96:bc:73:02:93:85:79:38:65:f9:
                    85:89:c1:f0:a1:cd:a7:50:51:1f:55:65:ad:5a:f6:
                    96:38:19:01:8e:20:81:62:d2:46:38:8d:c0:bb:26:
                    1e:cd:54:d7:56:2b:24:1c:07:cf:a6:68:70:d8:c3:
                    38:1e:ff:d4:26:f9:89:4a:46:df:9d:3e:9c:66:7f:
                    f4:e0:62:0a:65:84:55:f3:ea:6a:ff:1f:13:d0:69:
                    48:44:7a:3b:87:9b:8b:42:0d:a9:f1:5e:95:b8:e5:
                    ad:80:fe:c5:40:f6:66:01:8e:0a:ab:57:b2:3a:d0:
                    a1:ec:da:24:e7:4c:3c:37:60:4b:21:c1:50:d2:e6:
                    e1:6c:70:50:bb:ff:27:7c:d7:bf:8c:61:37:bf:87:
                    2b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6A:4C:41:0C:A5:73:95:16:52:07:89:63:D8:5E:38:A4:97:72:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/11fca44c-2ef7-3fe0-a598-806d0f59ad39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.55.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:81:16:bf:bd:21:74:af:1f:cd:18:32:78:f6:76:bb:13:6b:
         5e:32:34:26:74:f6:3e:a2:04:3c:6c:71:84:f8:8c:ed:da:96:
         16:f9:79:92:58:a9:68:ce:b3:61:9a:67:74:42:28:b9:0e:4e:
         53:cc:ff:fd:88:bc:8b:24:c1:fd:f1:dc:74:5d:36:1a:25:8d:
         c1:82:1c:a7:20:5c:53:3d:6f:42:d8:43:f3:b2:8c:12:22:8b:
         bb:df:41:f2:91:d5:98:fd:02:a9:57:fe:dd:79:6b:57:fb:7f:
         56:84:5d:79:cf:94:99:fe:73:8e:61:84:a9:95:77:c5:02:49:
         ed:de:da:dc:f9:52:df:2b:93:25:12:35:f1:7d:f0:1b:28:ca:
         ad:cb:bb:06:72:bb:4c:78:4b:7a:ba:bd:bb:44:5f:d6:c3:39:
         76:af:08:0f:a7:0d:7b:b3:c8:f7:00:52:5e:2c:6d:6c:97:f1:
         bb:6e:bd:b9:10:fb:99:9b:9c:d7:3a:9a:85:fb:f0:f6:3e:18:
         aa:e6:40:eb:a3:29:1e:d3:1f:82:8a:b8:09:2f:a4:ea:76:e2:
         b3:e3:87:97:c0:b3:eb:d2:61:4d:d9:e2:63:02:60:6a:06:99:
         0e:91:fe:95:5e:2d:11:8e:3a:f4:8a:8a:c6:29:20:a7:b5:d0:
         37:26:c1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:15 2025 by rpki-client