Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/eaccb886-48b5-3574-bc7a-5165e9a58e3a.roa
File:                     eaccb886-48b5-3574-bc7a-5165e9a58e3a.roa (raw, json)
Hash identifier:          nG8z2Am+cz2IwhQjRt5khWsX9IfWM7dGk76MSGUtRxA=
Subject key identifier:   30:C3:0F:1E:B8:D8:54:E7:53:DF:6A:B4:CC:63:44:1F:39:15:95:2D
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285848A318A14F809DFC461C464500
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/eaccb886-48b5-3574-bc7a-5165e9a58e3a.roa
Signing time:             Thu 23 Jan 2025 06:13:16 +0000
ROA not before:           Thu 23 Jan 2025 06:13:16 +0000
ROA not after:            Wed 23 Apr 2025 05:13:16 +0000
asID:                     16591
IP address blocks:        136.50.160.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:18:a1:4f:80:9d:fc:46:1c:46:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jan 23 06:13:16 2025 GMT
            Not After : Apr 23 05:13:16 2025 GMT
        Subject: CN=a64cf908-c51d-4998-b54e-0cde152fa007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d2:e6:e3:ff:5c:86:15:a2:c7:92:db:01:93:
                    da:48:7b:d8:66:f0:f2:83:7f:d3:13:d1:c9:27:d7:
                    ac:9c:30:96:ff:79:4d:cb:4a:41:24:a9:5f:d0:2a:
                    86:3e:22:8e:59:2e:2a:84:e8:73:55:53:34:bc:f6:
                    38:89:0e:1c:be:cd:b7:f8:06:0c:0d:0f:b3:3b:be:
                    1f:73:16:39:10:58:0a:52:b5:8e:b4:8e:9a:7d:93:
                    41:f5:d7:07:3e:79:dc:b3:1b:a1:a8:ca:9e:73:40:
                    3a:bd:a0:e6:a0:5a:70:ab:58:78:f9:67:6f:52:4f:
                    95:dc:23:ab:1d:27:a6:e9:a9:73:4f:b5:57:08:77:
                    28:29:72:2c:2f:2d:77:57:84:79:9a:52:95:55:cb:
                    11:bd:d5:02:61:bf:50:15:21:69:2d:83:1d:23:39:
                    6a:b4:11:93:f0:10:59:b0:3d:de:dc:75:85:32:85:
                    17:33:7f:1b:fb:b8:bf:69:f8:eb:1a:0d:73:40:a6:
                    0b:0b:87:d8:99:e1:47:e2:53:33:87:23:ce:15:cf:
                    c7:0d:a0:57:36:c7:6a:b7:65:da:2f:51:d2:fb:f2:
                    24:18:0c:95:91:00:11:1d:ae:76:93:a2:19:d2:55:
                    cb:1b:69:49:67:94:05:3a:63:6b:66:8a:f2:da:67:
                    5f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C3:0F:1E:B8:D8:54:E7:53:DF:6A:B4:CC:63:44:1F:39:15:95:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/eaccb886-48b5-3574-bc7a-5165e9a58e3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.50.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:1b:95:cc:5d:67:65:19:97:1a:c8:ff:1b:9b:3a:75:57:45:
         14:51:6b:3c:8c:d3:52:ba:26:1a:78:23:ca:40:09:11:0e:1d:
         eb:ab:68:be:7f:37:4a:4b:13:ba:af:89:98:3a:cd:e6:1c:1a:
         2c:f2:d5:56:35:7a:a1:25:96:40:9b:2b:ab:75:7a:ce:a9:5d:
         15:aa:f8:ab:21:e5:f6:c2:97:f2:3b:c0:67:58:83:ed:cf:4e:
         43:08:d2:09:4c:85:6f:d4:d0:97:c9:10:d5:c8:43:2c:0b:71:
         17:2e:8a:48:c7:be:3b:52:9a:fe:45:f4:26:e6:f2:cd:9c:41:
         f8:c9:36:3f:9b:c6:71:f0:bf:88:cf:ff:aa:d9:95:f6:c6:bd:
         26:ba:cf:ef:7e:03:99:89:99:05:82:9c:a6:0b:4f:eb:68:33:
         28:f9:1d:a9:2d:c8:db:89:0d:23:b5:b9:68:db:8e:3e:32:6c:
         28:29:b0:8a:2c:8b:44:91:ff:0c:50:6c:ff:ba:62:0e:ec:4d:
         c1:dc:52:79:ff:76:80:69:87:0b:3d:6a:9d:bf:2e:e0:3e:42:
         4b:2c:f4:82:66:b2:16:19:06:8f:79:47:a6:2b:c7:c9:16:cb:
         48:a1:cc:fd:a6:ac:d3:e3:02:50:02:30:00:b0:26:d3:dc:bd:
         ea:4d:25:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:03 2025 by rpki-client