Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/63a2667e-3886-3b2c-b2e9-e1d169d43b23.roa
File:                     63a2667e-3886-3b2c-b2e9-e1d169d43b23.roa (raw, json)
Hash identifier:          J+IWfVRGL9eUm2pX5MFSVPM18xM1XcNWmuWwij4YNK8=
Subject key identifier:   89:2A:CA:00:A5:14:33:84:8A:E7:F0:49:B1:A0:B5:7C:90:4A:36:9D
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285848A318A50B3945767CF6F40AC0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/63a2667e-3886-3b2c-b2e9-e1d169d43b23.roa
Signing time:             Thu 23 Jan 2025 06:13:18 +0000
ROA not before:           Thu 23 Jan 2025 06:13:18 +0000
ROA not after:            Wed 23 Apr 2025 05:13:18 +0000
asID:                     16591
IP address blocks:        136.53.144.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:18:a5:0b:39:45:76:7c:f6:f4:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jan 23 06:13:18 2025 GMT
            Not After : Apr 23 05:13:18 2025 GMT
        Subject: CN=625f54f6-aa8e-4b02-8972-f118ca79916a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8d:bb:5f:ea:99:18:21:64:29:7c:bd:91:62:
                    9c:a9:d4:e5:46:2f:c5:6d:1a:d6:d9:e0:a0:e7:ac:
                    7d:51:e4:1b:5c:aa:a1:67:f9:be:c9:3b:9f:9c:65:
                    3d:09:42:7c:ef:b1:5b:b8:1d:72:37:8b:05:22:ae:
                    c9:58:fe:61:f7:25:c6:ab:1f:7d:c9:7e:96:bb:c9:
                    7f:e8:be:fe:8b:67:5d:fc:6f:fd:d5:d3:bc:93:72:
                    b1:ae:b1:2d:68:0c:42:38:f0:2f:ae:a8:9e:b7:41:
                    69:6c:6e:21:d9:a8:4f:57:55:a8:8a:fe:e5:87:c0:
                    d1:df:7c:9a:83:d4:f4:83:fc:38:58:98:30:00:30:
                    62:3e:25:2d:b5:11:35:61:aa:8f:1a:fd:62:1e:fd:
                    27:87:f6:2f:b1:9a:86:2d:5a:7b:1b:48:dd:9b:e6:
                    4e:f4:5a:dc:55:a7:a6:92:d2:45:06:55:be:d8:9c:
                    e5:71:4d:34:03:d3:f1:8d:f8:90:65:a1:8a:14:c3:
                    99:3f:23:d3:80:99:f3:6f:a5:e5:c2:c2:8d:93:4c:
                    af:00:8d:11:99:a2:3c:76:8b:d8:d8:a2:6e:d5:bc:
                    29:37:54:d9:2b:f5:33:2b:13:5a:3d:f5:10:f2:70:
                    4e:2a:e8:d7:47:b4:c6:9a:e6:af:8f:dd:d6:8b:8d:
                    f1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:2A:CA:00:A5:14:33:84:8A:E7:F0:49:B1:A0:B5:7C:90:4A:36:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/63a2667e-3886-3b2c-b2e9-e1d169d43b23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.53.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:21:22:5f:db:df:cb:5f:ac:36:73:9a:63:f4:a1:36:21:fc:
         1b:fa:a7:63:f4:01:41:d5:b6:a6:1a:b8:1a:09:8d:f7:a1:5e:
         c6:23:b4:24:63:16:1f:a2:2f:5e:15:13:a6:f6:e8:49:98:30:
         92:47:de:e5:34:1f:9f:1a:b0:67:76:81:37:2e:61:9e:35:24:
         11:03:72:c9:fd:68:e6:ce:b7:7a:1c:d3:c4:d3:47:0b:59:a0:
         38:c9:f0:8d:b5:9e:b9:e8:bb:77:f8:e7:a7:f6:1c:82:0f:a7:
         51:8c:c9:29:d0:a0:ed:94:41:98:5b:1f:49:91:40:33:71:23:
         7f:c1:65:87:cf:c8:99:24:7c:3c:3c:1b:b6:bb:d0:ef:93:2f:
         0d:f1:4b:06:52:03:ca:8c:33:65:03:8f:3a:75:82:e7:00:37:
         d8:8e:82:f6:ae:39:5f:9f:5b:5b:89:9a:e2:82:d9:e0:39:da:
         a8:42:cd:3c:ff:2d:50:a6:ef:44:6b:e2:48:da:16:d5:c2:15:
         c9:a2:06:76:14:3f:33:fe:6b:c9:dd:6b:4c:43:d7:92:7c:83:
         04:87:1f:e3:67:13:8a:78:14:8e:cb:a2:9d:38:41:d5:6c:3b:
         dd:02:2c:2f:b6:ba:20:53:11:c7:8a:e7:5e:dc:3b:42:01:df:
         33:be:2d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----