Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3ef18964-0b3f-3ff6-8463-8fda44463ef9.roa
File:                     3ef18964-0b3f-3ff6-8463-8fda44463ef9.roa (raw, json)
Hash identifier:          jC+sVXpRETV8voXT9YdnedRp3+8LReUfCQhpOFwYOPQ=
Subject key identifier:   50:6F:CF:76:FA:46:2E:74:BE:89:12:D9:50:98:BE:E3:D5:F2:26:9D
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285848A318A6C0AF547EC7159E5FE0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3ef18964-0b3f-3ff6-8463-8fda44463ef9.roa
Signing time:             Thu 23 Jan 2025 06:13:19 +0000
ROA not before:           Thu 23 Jan 2025 06:13:19 +0000
ROA not after:            Wed 23 Apr 2025 05:13:19 +0000
asID:                     16591
IP address blocks:        136.38.208.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:18:a6:c0:af:54:7e:c7:15:9e:5f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jan 23 06:13:19 2025 GMT
            Not After : Apr 23 05:13:19 2025 GMT
        Subject: CN=365d530a-cb76-45c6-aad5-69db56bcb065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a3:14:96:f9:78:8f:c6:e9:84:0e:e2:85:ba:
                    7a:26:be:8a:70:c0:76:5e:b7:05:68:93:4e:dd:f6:
                    44:80:6c:55:b7:0c:1a:76:f5:2b:a8:b2:e4:78:a4:
                    0b:7f:63:87:85:e3:d0:5f:b0:30:09:cc:8f:70:5b:
                    0e:83:e0:77:74:14:cd:03:1f:69:41:f5:d4:f7:89:
                    e7:e5:c2:47:49:a1:35:b3:ac:e1:70:66:d8:a0:99:
                    cc:cd:ee:99:d6:78:cd:b7:66:ab:47:9e:f8:03:75:
                    f2:62:85:f4:70:04:04:19:2c:5f:15:48:d9:c0:ba:
                    77:52:2d:be:12:a8:03:e0:18:a7:1b:3e:61:37:20:
                    92:cc:14:f3:45:c9:20:ce:0a:37:98:16:d9:d1:b5:
                    8f:90:5b:f4:16:42:63:44:50:48:0b:de:3d:36:82:
                    ea:24:7f:2c:b5:63:30:b6:88:aa:53:79:d1:b3:31:
                    bd:c1:96:98:f6:98:94:64:5b:d0:1f:ac:ab:21:c6:
                    e2:3f:41:1d:c5:c0:9b:46:1e:17:9b:d7:a3:e6:6e:
                    30:67:b8:bf:3e:50:96:c0:7e:8d:23:3f:9d:35:66:
                    1f:6a:89:dc:00:23:9e:ee:8e:66:8b:b7:27:50:84:
                    f5:ed:60:be:08:9e:4e:7d:cf:ec:a9:69:4c:d9:d4:
                    3c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6F:CF:76:FA:46:2E:74:BE:89:12:D9:50:98:BE:E3:D5:F2:26:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3ef18964-0b3f-3ff6-8463-8fda44463ef9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.38.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:bc:2f:67:27:0e:a7:c2:ba:a2:ee:c2:62:0e:b5:9c:15:af:
         1a:34:93:89:79:53:5c:86:b2:ce:8f:68:ef:52:54:a7:12:96:
         86:9f:0d:b1:96:74:6f:c0:3c:57:87:36:56:00:93:18:ab:fc:
         6a:69:78:d8:ad:92:06:ce:ec:03:68:ba:c5:6d:e4:96:1e:33:
         63:27:d5:9d:7c:db:93:2a:20:0d:c5:09:82:52:fb:7d:aa:f6:
         eb:36:11:65:8e:9f:0c:df:41:d0:a2:81:7f:45:f9:86:fa:67:
         0c:63:9a:1f:25:27:b9:dd:6d:46:c0:70:20:a7:26:ff:9b:72:
         69:f9:58:11:81:5b:75:6e:77:c9:f7:ca:0f:2f:7a:d1:13:b8:
         75:94:71:04:9a:76:4c:d2:c9:66:ad:0b:e9:54:2d:03:f8:2e:
         09:35:8a:80:ea:2d:40:a1:c3:f1:34:31:af:e6:43:44:46:2c:
         b4:92:b0:0c:2d:51:7a:9e:aa:4c:88:8f:25:86:6d:fc:e0:47:
         b7:50:a4:9e:44:86:a8:c1:2a:55:e9:fa:44:26:e2:9b:eb:54:
         13:f2:de:39:64:c1:9f:fe:b3:6c:12:8f:8a:b7:26:5d:fd:11:
         42:ee:f7:24:4a:be:4a:b4:10:3b:6c:e0:f8:7c:dd:45:80:33:
         60:78:a2:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKbAr1R+xxWeX+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDEyMzA2MTMxOVoXDTI1MDQyMzA1MTMxOVowLzEtMCsGA1UEAxMk
MzY1ZDUzMGEtY2I3Ni00NWM2LWFhZDUtNjlkYjU2YmNiMDY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6MUlvl4j8bphA7ihbp6Jr6KcMB2XrcFaJNO
3fZEgGxVtwwadvUrqLLkeKQLf2OHhePQX7AwCcyPcFsOg+B3dBTNAx9pQfXU94nn
5cJHSaE1s6zhcGbYoJnMze6Z1njNt2arR574A3XyYoX0cAQEGSxfFUjZwLp3Ui2+
EqgD4BinGz5hNyCSzBTzRckgzgo3mBbZ0bWPkFv0FkJjRFBIC949NoLqJH8stWMw
toiqU3nRszG9wZaY9piUZFvQH6yrIcbiP0EdxcCbRh4Xm9ej5m4wZ7i/PlCWwH6N
Iz+dNWYfaoncACOe7o5mi7cnUIT17WC+CJ5Ofc/sqWlM2dQ8rQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFBvz3b6Ri50vokS2VCYvuPV8iadMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvM2VmMTg5NjQtMGIzZi0z
ZmY2LTg0NjMtOGZkYTQ0NDYzZWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCbQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC68L2cnDqfCuqLuwmIOtZwVrxo0k4l5U1yGss6PaO9SVKcSloafDbGW
dG/APFeHNlYAkxir/GppeNitkgbO7ANousVt5JYeM2Mn1Z1825MqIA3FCYJS+32q
9us2EWWOnwzfQdCigX9F+Yb6Zwxjmh8lJ7ndbUbAcCCnJv+bcmn5WBGBW3Vud8n3
yg8vetETuHWUcQSadkzSyWatC+lULQP4Lgk1ioDqLUChw/E0Ma/mQ0RGLLSSsAwt
UXqeqkyIjyWGbfzgR7dQpJ5EhqjBKlXp+kQm4pvrVBPy3jlkwZ/+s2wSj4q3Jl39
EULu9yRKvkq0EDts4Ph83UWAM2B4okY=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:50 2025 by rpki-client