Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/716ef213-e8a2-34db-b2ca-14228c37f7b9.roa
File:                     716ef213-e8a2-34db-b2ca-14228c37f7b9.roa (raw, json)
Hash identifier:          reHjL01jsBi3uPoHIoXJahhCzJBM6uMdhETdy6HTA5U=
Subject key identifier:   19:AD:8F:7D:BF:95:C0:31:3B:28:DA:E1:F8:15:DB:71:21:B4:72:D3
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285848A318AC6BE2641BF504DEC370
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/716ef213-e8a2-34db-b2ca-14228c37f7b9.roa
Signing time:             Thu 23 Jan 2025 06:13:22 +0000
ROA not before:           Thu 23 Jan 2025 06:13:22 +0000
ROA not after:            Wed 23 Apr 2025 05:13:22 +0000
asID:                     16591
IP address blocks:        136.38.112.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:18:ac:6b:e2:64:1b:f5:04:de:c3:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jan 23 06:13:22 2025 GMT
            Not After : Apr 23 05:13:22 2025 GMT
        Subject: CN=c321618c-661a-423f-bc1f-4bfab2e1de47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9c:4a:bc:73:1b:48:dd:08:e2:e8:79:5e:5a:
                    b0:78:dd:2a:ca:a6:ef:fe:84:47:14:da:3d:82:61:
                    0c:ba:27:33:3f:7f:46:54:db:a4:a0:f9:c4:3d:92:
                    0f:d9:26:2e:cb:87:57:7f:6f:a9:f9:c2:39:42:f7:
                    a0:ac:82:0e:d3:b7:48:32:9f:2f:86:fb:d0:24:75:
                    04:48:71:74:e0:e0:fe:35:55:10:9b:64:4d:90:d6:
                    d7:50:c1:eb:9e:a7:93:cd:9f:77:cc:35:68:4f:ec:
                    3a:dc:b4:b4:84:fb:30:9a:d0:3e:cd:f0:72:1c:f0:
                    a5:ff:dc:4d:2d:25:7b:a7:e4:64:f4:84:64:0b:43:
                    79:b6:25:9f:19:ce:10:06:db:2e:eb:48:ac:0c:42:
                    52:8f:9b:43:69:d4:1c:40:5d:93:b5:de:9f:a9:32:
                    c7:5e:a1:b9:6c:f4:fd:61:a5:56:3e:fb:9f:b7:07:
                    41:b5:04:2e:93:dd:ba:d4:56:f7:c3:d4:c1:1e:b1:
                    20:59:82:1a:73:f7:42:1a:7d:84:5f:51:8f:4a:a6:
                    97:c8:01:48:35:f5:11:49:00:e3:92:bc:28:82:00:
                    e9:b7:f7:cd:49:fa:90:d2:f1:92:14:e7:8d:32:de:
                    cd:dd:c4:6b:df:a4:02:c3:44:55:5d:5b:a0:43:f8:
                    c4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AD:8F:7D:BF:95:C0:31:3B:28:DA:E1:F8:15:DB:71:21:B4:72:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/716ef213-e8a2-34db-b2ca-14228c37f7b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.38.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:52:3c:15:7c:5d:e7:2e:13:80:11:62:8b:4e:83:91:4a:a6:
         ea:5f:a6:3b:a7:ad:33:88:65:6d:2b:2f:72:6d:e0:92:32:24:
         4a:a4:6c:6d:cb:6e:1e:ed:ec:43:dc:d5:c0:54:43:2d:d6:b6:
         aa:86:4f:14:be:84:86:91:30:08:12:ae:2b:0d:2f:35:45:50:
         7e:37:ae:e0:d3:b7:f1:c1:ab:92:0f:2a:19:04:d0:4f:5e:68:
         5e:b3:14:dd:b4:68:c3:dd:14:d3:20:e7:d9:31:44:90:60:d2:
         78:d1:cc:dc:e0:c8:1a:0e:8b:bb:73:0b:ca:af:de:08:bc:54:
         8d:15:ea:00:e9:bf:a9:1f:4e:31:6f:fd:3c:85:13:35:3e:ea:
         95:cf:e1:9e:2b:56:fe:5e:a9:6d:d2:7c:50:d5:43:bf:b3:d4:
         c8:ae:f2:d5:a0:da:c5:a7:0c:af:bd:0a:79:d1:60:5f:49:f0:
         84:87:b1:0c:30:c2:f9:70:a2:a0:1c:10:81:dc:b3:bc:a0:73:
         63:c5:4f:f2:5b:9f:19:92:fd:5c:d4:74:46:4e:00:3c:a6:79:
         87:6b:81:22:30:5f:95:b7:f6:81:a5:63:92:60:59:3c:93:18:
         b2:a4:75:51:de:dd:6d:40:eb:ca:47:02:e0:95:bb:47:b0:e6:
         9a:25:8c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----