Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b3c7f732-3b19-3349-937a-018a8cd0d18c.roa
File:                     b3c7f732-3b19-3349-937a-018a8cd0d18c.roa (raw, json)
Hash identifier:          vJhV9eewUPHqQet1x9L7tgSPYzvVVv1WIGooZFmoJtQ=
Subject key identifier:   09:DE:98:EF:38:90:F4:22:81:97:F3:04:1A:9F:F9:99:08:5D:A3:2D
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285848A318ABE1AC6E95D9D2BD8980
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b3c7f732-3b19-3349-937a-018a8cd0d18c.roa
Signing time:             Thu 23 Jan 2025 06:13:21 +0000
ROA not before:           Thu 23 Jan 2025 06:13:21 +0000
ROA not after:            Wed 23 Apr 2025 05:13:21 +0000
asID:                     16591
IP address blocks:        136.49.32.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:18:ab:e1:ac:6e:95:d9:d2:bd:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jan 23 06:13:21 2025 GMT
            Not After : Apr 23 05:13:21 2025 GMT
        Subject: CN=65573f3a-1f2a-4bfb-bb9c-4dee0fda7230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f0:62:7f:3b:23:41:43:da:ba:8d:74:1e:c1:
                    6e:9f:41:09:81:ec:a0:04:54:98:c5:16:fb:48:a5:
                    64:6a:31:e6:fe:d9:33:f9:d2:59:1a:fc:7d:e4:6d:
                    90:ca:30:e9:e3:0e:8c:44:c3:0a:6c:26:95:4a:39:
                    b4:0e:e7:ee:7a:30:77:1c:41:2c:fd:20:c3:1f:25:
                    81:aa:27:5a:62:ce:82:55:e4:23:55:24:dc:76:7c:
                    2d:80:d8:15:85:2b:a5:ff:5b:71:01:e9:94:13:15:
                    f9:4b:4d:1d:87:e8:e2:62:66:a1:e1:fd:5b:57:06:
                    c0:cb:23:bd:45:b0:1c:68:9e:05:ff:a9:f7:f3:2f:
                    44:bc:1f:36:bf:2b:5b:bc:64:c6:1b:e0:7b:5f:ce:
                    dc:45:0a:85:48:50:ec:eb:31:7b:dc:6c:e1:9c:97:
                    a3:73:78:26:04:48:76:a1:0a:b9:37:8e:62:08:b1:
                    a0:d9:3b:c5:0d:aa:76:fd:07:20:da:58:8f:32:21:
                    1c:52:3a:e9:eb:81:b4:29:b0:45:6b:ac:7d:a0:80:
                    06:20:bf:1e:12:4d:5b:bf:89:d2:99:63:88:c7:39:
                    8a:7e:fb:da:a5:30:50:25:56:61:95:b1:d4:c3:a2:
                    57:2f:e0:4b:2a:9e:46:01:1b:94:88:be:43:c1:da:
                    82:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:DE:98:EF:38:90:F4:22:81:97:F3:04:1A:9F:F9:99:08:5D:A3:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b3c7f732-3b19-3349-937a-018a8cd0d18c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.49.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:96:e1:c2:b2:ce:1d:e5:6a:2c:3a:13:cf:19:18:3b:64:d7:
         d9:30:c3:53:dc:03:ca:0f:4f:99:bf:33:d3:34:16:71:8f:f9:
         0a:82:0a:01:ca:19:d2:09:e8:51:7f:d7:3b:e8:61:11:d9:bf:
         83:b6:b8:3a:56:f1:71:41:39:ad:33:3e:af:2c:b2:29:95:37:
         ce:e1:38:d4:a2:a3:5e:5f:e2:05:f3:94:c3:fd:98:16:47:2b:
         1b:66:6b:cd:ab:97:83:29:9d:db:5d:22:e5:d3:66:2e:48:fc:
         59:93:af:de:15:42:66:9f:47:b2:36:6d:41:2c:ed:90:18:50:
         26:8f:56:a0:40:a6:23:cb:4d:eb:f8:78:f9:d9:c8:d9:ae:44:
         52:41:4a:45:b8:ff:dc:f4:8e:78:12:b6:99:86:07:cd:65:c4:
         3d:05:4f:61:26:37:89:73:df:84:da:b8:29:af:fb:18:c6:07:
         40:3e:6e:22:11:56:63:84:75:0b:b3:5b:1b:ff:c4:c0:20:a9:
         17:41:52:95:c3:31:d7:7b:91:b1:d1:9d:65:30:eb:75:01:fe:
         17:25:be:6c:f2:55:ee:b0:f8:b2:a0:cb:c8:37:d5:31:cf:d2:
         12:29:fe:54:95:06:7c:28:9c:ad:42:29:19:ef:50:db:ce:61:
         cd:0d:79:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----