Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2840b8e9-69ab-3a8f-ab85-f83d852b0c1d.roa
File:                     2840b8e9-69ab-3a8f-ab85-f83d852b0c1d.roa (raw, json)
Hash identifier:          wC3soUyuJUumxqcPd0JyB22vqKaDo/FmaIYiubb5yf0=
Subject key identifier:   3F:69:83:09:0F:28:73:83:80:DF:D4:34:91:7B:DD:2B:76:1B:8B:D9
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339DA0E0FCE1B26BAC4BD00
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2840b8e9-69ab-3a8f-ab85-f83d852b0c1d.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.57.192.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:da:0e:0f:ce:1b:26:ba:c4:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=bb389dd4-3e56-408e-aa8f-bc3bb7495d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fc:31:7d:ca:13:15:06:b4:28:b3:9f:bc:dc:
                    27:06:93:3e:8f:ea:68:37:ea:44:ee:6e:3b:51:34:
                    d1:d9:a5:cc:c7:5a:cd:6a:d6:c5:f9:26:8b:c7:a4:
                    35:7a:8b:f7:dc:63:3c:b1:e7:d2:3d:18:93:32:81:
                    3d:6d:c4:b0:a3:aa:22:61:b8:8c:7d:a7:b4:f3:09:
                    7e:d1:07:e4:8f:ef:a7:34:83:10:2e:a7:fc:89:b9:
                    e4:ab:f7:1e:cc:a0:f7:02:5a:f4:0f:d5:d1:de:05:
                    b9:0d:1e:28:0f:6d:c4:66:94:ca:d3:e2:45:a7:09:
                    22:ed:ae:54:3e:1e:d5:d1:ee:27:0b:3e:c9:d5:61:
                    b6:a7:81:90:61:f0:82:72:a0:de:72:52:e9:0f:61:
                    6e:a5:5a:5d:86:b5:8f:d5:49:03:ae:7c:f4:49:a9:
                    79:e3:00:7a:48:f7:09:e3:0e:98:18:b7:d2:74:11:
                    72:8f:04:d6:65:6a:9e:76:b8:63:ed:5b:a3:06:6c:
                    59:69:e6:19:5f:46:33:4d:91:19:f8:e7:2f:fa:58:
                    d8:17:86:ad:97:17:db:98:b6:9d:df:c5:35:98:55:
                    e2:e1:3f:03:87:29:65:58:00:b0:3c:b2:cc:ad:ba:
                    58:3a:6c:0c:b3:49:25:b0:cc:d2:b0:12:d6:cd:48:
                    58:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:69:83:09:0F:28:73:83:80:DF:D4:34:91:7B:DD:2B:76:1B:8B:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2840b8e9-69ab-3a8f-ab85-f83d852b0c1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.57.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:7c:5a:e5:c1:a8:c3:d7:46:bc:71:b7:60:44:60:b8:26:25:
         7a:1e:70:81:45:c1:9f:ae:28:17:77:77:f2:25:47:a7:4e:f0:
         ba:bc:c4:c1:9f:a7:2b:7f:9b:8c:25:49:df:52:cc:bd:ae:18:
         3c:74:23:ce:38:c2:ae:2d:32:9e:13:72:54:f6:b5:19:16:27:
         0f:b8:2e:96:8d:cf:11:bc:17:34:37:97:0f:e9:68:28:28:8e:
         a4:0f:68:e2:59:a9:2f:37:ed:04:6a:b0:26:e8:05:97:a6:21:
         3a:bb:c0:0e:df:23:7d:55:47:a4:5c:49:19:99:3f:b4:68:05:
         02:73:03:c5:ea:1e:d9:52:d6:82:11:b6:b0:f8:aa:ba:31:bd:
         aa:10:4f:09:88:bb:e4:b5:b7:88:3e:58:c4:10:29:4f:f2:c0:
         e4:04:59:d2:2b:93:8b:9e:c9:66:8e:47:eb:15:94:19:ba:f9:
         02:5e:f3:92:70:f7:7f:45:43:b3:64:7e:03:72:de:46:25:3c:
         3b:53:cb:a4:42:62:6a:0d:5a:d1:cc:cc:d7:ff:39:cf:99:25:
         75:b0:79:6c:63:e3:3b:6e:8f:86:87:45:42:37:5f:cd:69:0d:
         2a:d6:3c:bf:cb:20:7a:7d:eb:1a:ed:44:67:ac:c5:d9:bc:1a:
         06:72:11:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----