Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f0b78fce-a780-3f3e-a75f-086eabd8200e.roa
File:                     f0b78fce-a780-3f3e-a75f-086eabd8200e.roa (raw, json)
Hash identifier:          nmKJTJxb4Mvf/5sK8i8gk1nC7dQDwqUTAicZ86vr7BI=
Subject key identifier:   EB:92:AD:26:F1:D4:2C:AC:CA:4E:41:AC:91:2F:E8:5B:79:2A:99:88
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285848A318B1C6515D305C7D0A47C0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f0b78fce-a780-3f3e-a75f-086eabd8200e.roa
Signing time:             Thu 23 Jan 2025 06:13:24 +0000
ROA not before:           Thu 23 Jan 2025 06:13:24 +0000
ROA not after:            Wed 23 Apr 2025 05:13:24 +0000
asID:                     16591
IP address blocks:        136.52.112.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:18:b1:c6:51:5d:30:5c:7d:0a:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jan 23 06:13:24 2025 GMT
            Not After : Apr 23 05:13:24 2025 GMT
        Subject: CN=b8467edc-e2f6-4767-abd7-8202a692fbae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:31:75:5e:38:0c:c4:5b:7e:c8:27:aa:f7:a9:
                    49:20:7c:46:5a:d8:68:89:28:8d:e8:e9:4c:76:3c:
                    16:70:1b:3d:60:0a:02:6d:10:fb:fe:c7:a7:3c:30:
                    02:0b:b8:f5:0e:a0:ef:6b:ed:46:87:62:46:71:44:
                    64:6a:f1:b5:41:63:54:52:de:de:fe:30:40:d8:e0:
                    75:a5:63:36:90:9c:62:3c:20:2b:43:05:c1:6d:9a:
                    10:d5:a2:19:7b:4e:2e:54:52:d2:0f:e0:85:b0:0c:
                    d4:bc:b6:25:5b:64:56:d1:8c:e4:aa:bf:ba:77:8f:
                    30:7c:53:bb:80:8f:21:4a:7f:28:59:f8:ac:c5:7b:
                    84:ee:5b:e0:0a:ae:ef:48:16:54:2c:92:d1:9f:da:
                    05:ef:05:91:a4:48:b3:a1:6b:5d:40:ed:32:33:2d:
                    a3:36:1a:60:ac:8d:3d:af:fb:9a:2b:35:7b:2e:3d:
                    58:90:80:ae:b6:7e:4a:3e:78:f7:c7:27:92:f9:74:
                    85:24:19:01:7e:f9:e3:9b:c4:4e:3b:36:fd:2e:67:
                    a1:0e:cd:d1:7b:cd:e1:84:df:cd:85:74:a2:9c:71:
                    9b:3a:e2:02:c3:4c:58:a8:a3:e2:26:e5:8e:bb:ce:
                    a9:39:e3:07:eb:6a:2a:dd:e0:5f:81:3d:df:eb:85:
                    c0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:92:AD:26:F1:D4:2C:AC:CA:4E:41:AC:91:2F:E8:5B:79:2A:99:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f0b78fce-a780-3f3e-a75f-086eabd8200e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.52.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:23:33:b6:8a:0e:07:7b:4c:e6:67:5d:93:66:74:57:b5:42:
         68:25:ae:13:42:72:5d:64:c8:d2:37:8b:ff:e3:68:28:75:2f:
         3b:60:60:d7:17:11:62:4b:9a:85:c7:8f:4d:40:b8:d8:a1:45:
         5c:4f:95:a8:9b:f2:e1:52:19:6b:ab:3d:5a:7e:47:bc:0f:d2:
         54:62:cd:43:f8:b3:3f:c0:35:f4:6e:e1:7a:9b:25:73:22:17:
         47:cc:ae:3d:46:b4:54:73:c8:bc:d5:03:92:ef:99:18:a3:c7:
         88:6b:82:e1:c4:70:3a:6d:15:65:08:b1:06:9a:c5:9d:cc:82:
         cf:7d:b7:46:df:3a:33:43:6d:68:5b:0e:dc:a5:39:0d:ee:88:
         d6:3f:ae:6b:69:e2:08:b9:a2:d5:7b:cd:c9:bb:f5:02:d8:16:
         0e:86:25:fb:60:9d:0c:16:db:5f:12:e6:cb:bb:15:4b:74:ce:
         02:2a:e1:4b:4e:e6:37:e9:d8:a1:db:ef:91:2a:43:2e:db:1d:
         12:67:b2:4e:ca:8f:c9:cb:23:8d:e7:07:65:db:13:e5:34:4e:
         65:7d:d3:75:5f:3b:61:10:31:16:13:b8:ab:95:fc:0b:c7:c7:
         f5:40:20:f4:b3:14:73:4d:b5:5f:a6:04:ff:8a:fb:f7:04:16:
         3a:72:43:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGLHGUV0wXH0KR8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDEyMzA2MTMyNFoXDTI1MDQyMzA1MTMyNFowLzEtMCsGA1UEAxMk
Yjg0NjdlZGMtZTJmNi00NzY3LWFiZDctODIwMmE2OTJmYmFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijF1XjgMxFt+yCeq96lJIHxGWthoiSiN6OlM
djwWcBs9YAoCbRD7/senPDACC7j1DqDva+1Gh2JGcURkavG1QWNUUt7e/jBA2OB1
pWM2kJxiPCArQwXBbZoQ1aIZe04uVFLSD+CFsAzUvLYlW2RW0Yzkqr+6d48wfFO7
gI8hSn8oWfisxXuE7lvgCq7vSBZULJLRn9oF7wWRpEizoWtdQO0yMy2jNhpgrI09
r/uaKzV7Lj1YkICutn5KPnj3xyeS+XSFJBkBfvnjm8ROOzb9LmehDs3Re83hhN/N
hXSinHGbOuICw0xYqKPiJuWOu86pOeMH62oq3eBfgT3f64XAGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOuSrSbx1Cysyk5BrJEv6Ft5KpmIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZjBiNzhmY2UtYTc4MC0z
ZjNlLWE3NWYtMDg2ZWFiZDgyMDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDRwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHMjM7aKDgd7TOZnXZNmdFe1QmglrhNCcl1kyNI3i//jaCh1LztgYNcX
EWJLmoXHj01AuNihRVxPlaib8uFSGWurPVp+R7wP0lRizUP4sz/ANfRu4XqbJXMi
F0fMrj1GtFRzyLzVA5LvmRijx4hrguHEcDptFWUIsQaaxZ3Mgs99t0bfOjNDbWhb
DtylOQ3uiNY/rmtp4gi5otV7zcm79QLYFg6GJftgnQwW218S5su7FUt0zgIq4UtO
5jfp2KHb75EqQy7bHRJnsk7Kj8nLI43nB2XbE+U0TmV903VfO2EQMRYTuKuV/AvH
x/VAIPSzFHNNtV+mBP+K+/cEFjpyQ6s=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:06 2025 by rpki-client