Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/70855dc6-bde9-320b-89cd-7ebc7e267d57.roa
File:                     70855dc6-bde9-320b-89cd-7ebc7e267d57.roa (raw, json)
Hash identifier:          igQH2lP36psmfCSbPw76wFhouo8I2Nk8xI4P4r5zsxs=
Subject key identifier:   4E:00:4B:C5:C6:13:71:59:99:A5:41:44:84:FA:DD:E5:4B:C9:6E:37
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285848A318A5A53190F5F70CD2BE00
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/70855dc6-bde9-320b-89cd-7ebc7e267d57.roa
Signing time:             Thu 23 Jan 2025 06:13:19 +0000
ROA not before:           Thu 23 Jan 2025 06:13:19 +0000
ROA not after:            Wed 23 Apr 2025 05:13:19 +0000
asID:                     16591
IP address blocks:        136.53.80.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:18:a5:a5:31:90:f5:f7:0c:d2:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jan 23 06:13:19 2025 GMT
            Not After : Apr 23 05:13:19 2025 GMT
        Subject: CN=bd224395-b524-49a9-819b-d922caebcf0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:18:0c:a8:b8:02:45:9b:5b:84:ee:33:0d:2b:
                    9c:9f:e6:12:b1:c6:3d:69:c5:7d:3e:67:4d:e3:fc:
                    7c:2a:0b:56:21:9d:0e:be:a2:5d:8d:ed:e8:36:e0:
                    15:1f:0c:6a:15:17:50:c2:8c:00:81:1e:b3:9d:1b:
                    42:f9:d2:fe:e9:f7:ec:3b:89:f6:77:7a:d9:3a:e1:
                    ae:84:93:be:f6:89:69:5c:35:c7:25:22:6b:d8:76:
                    b0:6b:4d:0a:f6:d4:66:1b:16:b9:70:d6:78:14:d2:
                    91:9f:4a:8b:3e:d3:88:05:ab:f5:dc:2f:33:fe:84:
                    ae:44:79:e4:8b:8b:b6:aa:2f:17:35:1c:ad:12:54:
                    43:82:6b:11:60:f1:46:36:0d:e3:5d:ed:1b:7a:4c:
                    11:68:08:a9:6b:ab:14:b2:45:7d:66:b6:48:c5:e1:
                    9d:70:89:f1:65:77:69:7f:fc:6d:49:05:9b:57:ed:
                    19:47:52:6c:93:99:a2:c0:10:dd:fd:1c:6f:46:60:
                    cf:c3:79:d1:93:48:63:6a:7b:f7:4f:f5:34:44:9c:
                    e1:b8:c6:35:36:ab:42:3f:99:61:7a:28:65:ea:2f:
                    fd:10:f5:a3:2b:8d:4e:00:9a:71:27:8d:91:36:d7:
                    1f:20:31:fe:23:14:56:25:f0:94:fc:69:a5:5c:c3:
                    14:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:00:4B:C5:C6:13:71:59:99:A5:41:44:84:FA:DD:E5:4B:C9:6E:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/70855dc6-bde9-320b-89cd-7ebc7e267d57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.53.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:27:83:1a:06:18:2d:31:27:ec:6d:01:84:c9:3e:6d:24:6e:
         1c:f6:69:12:93:87:d6:45:19:1b:05:82:3c:d6:2c:4f:bd:9e:
         53:fb:1e:2a:ce:f0:cf:49:dc:d3:3f:11:61:a5:55:5e:08:3c:
         a5:1e:7d:cf:e6:98:9b:d2:43:2a:61:3c:57:3a:8f:5f:cf:79:
         c9:5c:bd:ab:8a:c6:58:12:34:b5:7e:b1:2d:e7:40:4a:b8:c8:
         1f:73:81:dd:2d:a8:0d:9a:e2:12:52:ba:8a:14:33:93:31:aa:
         20:81:02:84:15:a1:b4:09:92:f8:b8:a2:a7:6f:eb:49:85:f5:
         1e:46:a4:36:0b:a9:a3:42:59:a7:ef:ed:42:80:2e:24:88:1f:
         49:4c:65:36:73:f6:25:fa:35:ed:58:89:67:ea:1b:8d:94:a2:
         54:b7:3c:b1:78:02:c8:20:f3:f8:c7:6e:5a:44:46:ed:b0:19:
         7c:f2:61:b5:d5:52:4e:52:38:e3:8f:e5:15:ae:3b:ef:d4:75:
         7a:fd:1f:d3:05:c8:48:b3:f6:ae:b5:c7:1d:91:d4:62:0f:77:
         a3:f2:e7:2c:15:d4:08:eb:da:50:34:3a:e3:e6:17:17:44:b0:
         1e:3b:79:49:12:70:17:78:c9:e4:c1:c2:87:66:84:6b:dc:b7:
         c6:41:76:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:21 2025 by rpki-client