Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/96274b94-74ed-3d67-9ac2-ce24f87a9057.roa
File:                     96274b94-74ed-3d67-9ac2-ce24f87a9057.roa (raw, json)
Hash identifier:          b1rTGmN/umYBwZzYBPiWHry5aaAXs4v+K0dm2Ty/rjM=
Subject key identifier:   BE:05:35:EA:F2:F8:0C:FD:56:86:2C:81:87:79:03:14:07:97:5F:8F
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285848A318A69101ED9EABAA17FA00
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/96274b94-74ed-3d67-9ac2-ce24f87a9057.roa
Signing time:             Thu 23 Jan 2025 06:13:19 +0000
ROA not before:           Thu 23 Jan 2025 06:13:19 +0000
ROA not after:            Wed 23 Apr 2025 05:13:19 +0000
asID:                     16591
IP address blocks:        136.56.144.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:18:a6:91:01:ed:9e:ab:aa:17:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jan 23 06:13:19 2025 GMT
            Not After : Apr 23 05:13:19 2025 GMT
        Subject: CN=d7ac49e7-6b69-4b19-bed3-133b99df2956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:47:be:5a:eb:7b:a5:37:c8:3b:66:07:f1:fe:
                    8f:9d:20:71:40:df:56:be:5a:7c:53:39:62:63:1b:
                    ae:6e:c3:6f:64:60:08:f1:f9:7b:0b:54:7f:76:3e:
                    fe:9b:49:71:76:83:4b:86:48:f3:a4:a0:62:86:b0:
                    5e:1b:ee:bc:75:80:a0:eb:47:fe:da:68:b6:4d:48:
                    ca:2e:52:e2:ca:08:b5:92:61:b6:76:6d:53:fc:68:
                    dd:5e:a9:e6:e3:b6:81:2b:0a:1b:9a:10:72:c3:e2:
                    49:1d:3c:02:30:5b:54:79:63:d6:52:f7:58:60:1c:
                    ea:a7:cf:f6:70:64:18:66:a6:fd:0c:2b:3d:e4:f1:
                    fd:29:ba:87:c5:ba:c9:0c:0c:41:2b:5d:8d:ba:55:
                    7b:6b:ed:13:b7:66:56:77:d5:9e:1d:d7:26:f5:c9:
                    7e:e8:db:e2:85:80:da:39:70:be:8c:93:1c:84:fc:
                    fb:35:56:10:21:1e:25:59:66:14:05:65:c9:bf:09:
                    54:5f:77:4f:06:cd:db:d9:98:70:e5:14:c5:cb:c6:
                    94:a5:51:23:25:ec:c5:5f:1b:a1:e1:ec:5c:fd:e5:
                    87:c7:61:9b:c9:4a:0f:5d:78:ee:9f:86:a5:72:97:
                    10:4e:6d:d9:43:10:1c:6d:df:93:fb:2d:5e:48:20:
                    c1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:05:35:EA:F2:F8:0C:FD:56:86:2C:81:87:79:03:14:07:97:5F:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/96274b94-74ed-3d67-9ac2-ce24f87a9057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.56.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:db:2e:44:54:21:8b:47:c4:8e:0f:55:fc:d6:6f:b9:8d:79:
         4f:2c:f0:e6:2e:36:57:77:b7:a0:61:2b:9d:58:e6:bf:b5:07:
         d4:57:af:35:d0:4b:1d:0c:e4:95:95:67:27:c9:52:2d:95:78:
         31:8e:87:a2:df:69:c7:c5:a6:29:57:c0:5f:4d:84:f0:32:73:
         98:e5:f2:98:dd:35:de:7a:9f:0f:4a:a7:ab:8c:4b:50:2f:65:
         49:ed:e1:2e:bc:b6:de:40:90:4d:c1:64:7b:a2:93:6a:c5:89:
         32:13:04:ee:dd:99:21:b6:9d:5d:f4:ad:e6:b7:db:0b:16:33:
         28:0e:89:b7:00:49:d5:52:d4:af:b6:c9:ca:97:c0:18:83:80:
         99:d5:e0:e1:16:89:ad:af:27:d1:b4:9e:5b:78:25:8e:8d:77:
         d3:5a:a2:c9:5f:e7:d7:30:a9:1c:d0:a7:c9:7f:7e:50:04:c2:
         3a:56:26:23:0c:1d:be:78:26:07:c0:57:32:7e:4f:1f:60:fe:
         7f:f2:68:aa:63:df:4a:4b:09:f2:52:cc:17:e2:5b:da:36:f6:
         63:fb:b0:a8:d3:11:34:66:b2:a7:3d:52:18:03:94:7b:70:30:
         40:a3:8c:ef:b5:e8:34:2b:cd:3b:f7:a5:d0:6e:b5:28:ec:11:
         fd:90:91:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:39 2025 by rpki-client