Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bde3aa23-417b-3df7-81f2-cca7796c6b47.roa
File:                     bde3aa23-417b-3df7-81f2-cca7796c6b47.roa (raw, json)
Hash identifier:          7lXmA6oJAKMK6esincE3PR2thx9DhClP9nZ6SeBWujE=
Subject key identifier:   88:90:A9:5F:36:B8:F4:2A:13:74:FD:CD:D1:D2:83:B7:3E:1D:1A:45
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285848A318AE910D30146112804F00
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bde3aa23-417b-3df7-81f2-cca7796c6b47.roa
Signing time:             Thu 23 Jan 2025 06:13:23 +0000
ROA not before:           Thu 23 Jan 2025 06:13:23 +0000
ROA not after:            Wed 23 Apr 2025 05:13:23 +0000
asID:                     16591
IP address blocks:        136.55.32.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:18:ae:91:0d:30:14:61:12:80:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jan 23 06:13:23 2025 GMT
            Not After : Apr 23 05:13:23 2025 GMT
        Subject: CN=6ff360d3-a6fd-43b5-9b7f-b4a5c5401842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f1:48:93:3b:86:b4:11:97:bb:87:4b:7e:fd:
                    a4:54:a3:b3:28:93:8c:f4:be:34:41:a5:06:f9:46:
                    bd:99:15:0e:dd:98:c5:92:06:7f:b8:52:88:fc:92:
                    6a:d9:ca:17:ce:68:d5:8d:f1:69:60:bd:b3:d3:10:
                    6f:cf:41:74:db:f7:06:f4:dc:1e:0c:7e:95:2b:b5:
                    28:a7:3a:ab:ca:8b:d9:99:c4:cc:18:38:22:d4:90:
                    79:c6:91:50:90:54:7d:38:bc:a4:65:c5:30:ab:76:
                    1a:f8:bb:61:e6:94:85:7f:8d:0e:3c:6f:93:d4:98:
                    0d:e5:49:7d:1d:4a:df:1f:c5:5f:3f:70:e1:44:c4:
                    33:85:ff:ba:08:d7:ed:1b:0d:09:3a:35:74:91:6f:
                    90:bb:9b:63:47:a8:5b:50:7f:fd:89:f1:27:ef:a1:
                    00:61:f6:0a:37:c3:7f:a6:2b:c7:9a:15:15:7c:d9:
                    8c:8d:27:0f:09:36:0e:d9:86:82:4a:62:c6:25:40:
                    8f:fb:c8:ed:4d:ee:64:df:f5:08:53:25:9f:b3:6c:
                    7a:7a:69:5a:f0:1b:da:e6:e1:33:51:f2:90:00:fc:
                    3a:95:16:ce:68:9f:24:8f:88:69:00:6d:46:25:28:
                    ac:2d:78:00:62:13:06:b1:0a:97:5f:f4:1c:bf:bd:
                    03:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:90:A9:5F:36:B8:F4:2A:13:74:FD:CD:D1:D2:83:B7:3E:1D:1A:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bde3aa23-417b-3df7-81f2-cca7796c6b47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.55.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:f7:82:d0:62:be:23:7b:a5:7b:0e:03:e1:e4:63:f5:c0:1d:
         88:2d:0c:ab:32:f3:dd:7c:3d:95:b5:d7:e9:58:25:66:54:6e:
         0e:f3:65:ac:7d:ad:5c:5d:b8:0f:8e:4f:e6:f8:3a:8e:c2:1d:
         f6:f4:22:7f:ab:ae:30:05:88:48:dc:75:01:0c:c6:b2:f5:db:
         17:ce:a7:29:f8:3a:88:7a:cc:dc:ae:2d:a8:54:73:59:6b:b9:
         f3:94:6d:73:9f:a4:25:38:53:dc:5e:8a:6b:0e:8e:ab:80:8d:
         ee:ad:72:9b:0b:ec:20:62:fc:f8:20:f0:a8:e5:e2:a4:91:29:
         7e:55:a4:6c:c5:5c:b2:16:86:ab:d4:49:61:9d:47:b8:e0:20:
         f3:ba:09:9d:fc:d7:ed:13:0a:a3:77:4e:af:78:1e:a7:41:c3:
         58:d4:ea:87:a0:ae:63:a8:3a:b7:7b:2d:c9:bb:9f:ae:47:e3:
         f1:16:11:1c:9a:e7:86:2a:36:53:05:cb:f2:27:f6:d3:b9:5e:
         9f:f7:ca:ea:e4:5d:d0:cd:a9:99:5b:63:b6:14:c3:9a:92:f3:
         63:f5:8c:84:5f:6a:bd:20:b4:b3:8c:cd:ca:98:29:40:d2:d9:
         cb:b0:81:b8:61:11:99:88:e4:b2:b6:9f:3f:d2:7a:ca:2f:b2:
         81:e4:0b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:24 2025 by rpki-client