Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/16068b36-8d2d-3fae-92fd-76135f39e5a7.roa
File:                     16068b36-8d2d-3fae-92fd-76135f39e5a7.roa (raw, json)
Hash identifier:          q+5Yn5SB8CHj7TOq7cc1dqcu9EDtKXvloSTrZLbKB84=
Subject key identifier:   A0:25:B2:3C:5A:EC:F6:21:12:EA:53:01:3E:05:B3:C3:B4:10:8D:21
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285848A318ADA763608BC7F45474D0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/16068b36-8d2d-3fae-92fd-76135f39e5a7.roa
Signing time:             Thu 23 Jan 2025 06:13:22 +0000
ROA not before:           Thu 23 Jan 2025 06:13:22 +0000
ROA not after:            Wed 23 Apr 2025 05:13:22 +0000
asID:                     16591
IP address blocks:        136.33.224.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:18:ad:a7:63:60:8b:c7:f4:54:74:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jan 23 06:13:22 2025 GMT
            Not After : Apr 23 05:13:22 2025 GMT
        Subject: CN=480d5ab2-7b58-428b-942b-be6802f61598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1c:f4:6f:7c:3a:2b:04:d5:48:94:89:5b:f7:
                    c7:f5:f8:0f:bf:05:25:2b:0c:62:12:3a:67:65:e7:
                    92:15:0b:a0:7f:da:da:a6:fa:5c:fe:c6:f7:e7:6f:
                    1f:8b:d3:79:d7:4e:cf:56:df:dd:6f:a1:4e:e9:86:
                    fd:2d:e3:f8:31:e5:bc:12:b8:f9:12:2e:2a:7c:9e:
                    cc:5f:f3:77:2e:ff:61:5c:69:d6:bd:3f:0c:c6:7f:
                    fe:aa:4c:85:61:d1:84:6d:9e:bf:fa:76:c4:75:88:
                    dd:42:89:6f:3d:82:d3:4e:c0:4a:ec:fa:6a:bb:dc:
                    48:b5:c3:8b:ba:4a:5b:49:c7:04:17:13:0c:1c:03:
                    aa:52:84:75:cd:b2:e2:4f:f4:b7:6a:89:96:ed:a0:
                    d3:03:eb:ed:4e:78:54:66:8a:41:ba:a8:44:40:2e:
                    c8:75:3e:79:11:36:7e:45:d7:b0:3c:a1:3d:74:ef:
                    cc:cf:73:8e:33:6e:21:7c:6f:5f:d0:33:63:9a:6d:
                    1d:86:2a:ab:98:cd:06:fa:16:e2:cd:a6:ee:d9:91:
                    90:6a:10:5e:f4:89:02:0e:02:44:60:05:24:95:32:
                    9a:d5:99:8c:8d:f3:6b:22:36:42:cb:b2:14:33:26:
                    b8:bf:48:73:ea:d2:02:a2:8a:6d:9c:3e:8e:ba:a0:
                    57:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:25:B2:3C:5A:EC:F6:21:12:EA:53:01:3E:05:B3:C3:B4:10:8D:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/16068b36-8d2d-3fae-92fd-76135f39e5a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.33.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:8b:bb:a7:d2:c1:98:c0:bd:df:58:f8:67:87:52:36:6e:fc:
         6c:72:41:f4:d9:eb:26:2f:d5:a6:35:a7:9d:0f:c1:a6:66:68:
         4f:0a:7a:2b:49:4a:d9:63:96:1b:05:6d:ed:8e:61:cf:71:8b:
         a2:cb:a9:59:7a:7d:6a:c0:8b:13:79:ff:04:7b:32:2d:ea:cb:
         e5:17:08:0f:0a:c3:21:46:e3:6c:d3:6b:e5:86:11:a1:8f:28:
         3a:9d:34:9e:b4:cc:ef:52:b1:ce:d9:d9:7e:e7:65:be:7e:49:
         0d:3f:3c:eb:6b:4d:d7:83:97:86:ca:41:1f:05:b4:95:94:e6:
         00:c1:c9:e4:f9:d0:be:2b:f9:62:00:b3:2c:fd:fd:32:11:bb:
         57:b1:67:4c:1f:ae:c8:fc:a7:f0:ea:9a:d2:43:30:a7:0f:be:
         0c:45:07:29:58:e7:8c:fb:3d:6d:59:54:89:f9:c5:b4:24:c2:
         8a:5d:4d:31:24:f1:33:1a:6f:10:a8:7e:36:91:e9:4a:b2:07:
         98:67:41:fa:43:da:1c:2f:51:7d:bb:e8:75:39:29:65:69:fd:
         d1:c9:7e:d7:cb:7c:f4:1e:a3:90:26:ae:6b:ef:ad:57:ce:76:
         fd:f4:49:c4:be:92:20:b9:c8:e8:bf:ba:38:ad:25:f4:32:00:
         97:bc:9c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:22 2025 by rpki-client