Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/70855dc6-bde9-320b-89cd-7ebc7e267d57.roa
File:                     70855dc6-bde9-320b-89cd-7ebc7e267d57.roa (raw, json)
Hash identifier:          aA582KSCZgZ1WBQ0owAYxhGesICEwegoC8sBqa2kCbI=
Subject key identifier:   69:C9:44:73:8D:2B:56:52:8A:D4:23:F5:33:AF:91:93:5C:92:A9:F7
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339D0EBFA7F2F1DD5DAD6C0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/70855dc6-bde9-320b-89cd-7ebc7e267d57.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.53.80.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:d0:eb:fa:7f:2f:1d:d5:da:d6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=4988e295-8b46-4a10-9476-5a56654ddbe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bd:59:4e:ab:bd:3f:3c:57:83:4e:d8:61:bf:
                    b9:ea:d0:a5:cb:5c:35:ac:15:a7:df:e1:28:54:bf:
                    e1:1e:a2:de:35:e2:91:c5:bd:76:2a:fc:18:56:9f:
                    66:5f:fc:09:3b:0b:58:d3:a2:e6:e4:9a:b1:75:10:
                    c1:58:7e:79:db:0a:c1:61:4a:db:23:d5:15:ba:f2:
                    9d:d5:0f:71:87:50:c2:18:af:88:d8:d3:7f:a2:21:
                    05:9c:07:44:1c:ba:d7:7f:8b:0c:3f:9b:57:b2:fa:
                    fc:13:de:f6:ab:cb:f7:51:03:33:07:f6:38:5d:52:
                    2c:a4:06:6c:a8:9e:1f:e2:94:9f:94:e4:29:99:af:
                    ba:64:65:cb:67:f9:90:bb:83:af:03:b7:cd:f5:c7:
                    19:76:f1:f9:8e:a9:85:79:16:75:4f:e7:c6:31:5f:
                    5f:36:45:e3:c4:bc:94:88:0f:09:aa:bc:b5:fb:32:
                    f1:65:04:9e:a5:72:9d:9f:39:8b:61:c4:ad:f6:7d:
                    d4:bd:1b:de:53:39:3c:ad:7c:10:08:66:26:36:c6:
                    3b:8f:9f:27:92:25:e2:f4:dd:1d:98:10:5a:c1:e2:
                    ad:a2:65:83:a1:86:26:37:48:9a:c2:5c:63:a9:0c:
                    8a:56:2f:06:3f:c6:e8:f1:37:ba:d0:a5:d4:bd:67:
                    6c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C9:44:73:8D:2B:56:52:8A:D4:23:F5:33:AF:91:93:5C:92:A9:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/70855dc6-bde9-320b-89cd-7ebc7e267d57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.53.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:c8:2c:b1:5f:4a:b4:b6:50:f0:18:84:7d:d3:46:05:23:8c:
         49:df:d1:96:da:f7:a8:8c:62:00:11:47:a2:73:19:a3:11:80:
         98:0f:08:9b:f8:5d:51:c7:d9:1d:e0:05:52:29:3d:85:45:66:
         ad:cf:40:85:0c:ff:6e:c2:4e:1d:c7:d0:08:d8:5e:f9:13:cf:
         56:67:74:79:fb:de:c1:a3:a5:2a:54:1a:40:e3:9b:31:95:76:
         da:f2:01:d9:45:19:2f:c9:bc:43:a6:ee:8e:eb:15:49:cc:e6:
         82:f7:fa:43:6a:d0:9d:5f:7c:7b:88:1c:db:95:f1:c9:e7:48:
         9d:84:3e:63:a3:1d:d5:32:ee:00:14:a4:5f:5f:92:c0:1d:78:
         61:f7:b0:29:06:08:f7:36:e5:f6:db:0e:56:84:c9:3f:09:6c:
         68:9f:9d:0c:38:21:dd:6b:2b:48:b3:61:9f:a7:b6:fa:dc:3c:
         d0:8b:28:20:0b:7f:6b:ba:e7:86:d7:f3:64:7d:22:09:f1:33:
         29:8d:c5:a2:b7:ff:29:4c:da:76:a2:bc:94:62:89:ec:90:05:
         b1:ac:c9:b5:46:91:8b:d9:40:2e:2f:67:40:a7:8d:a5:c0:d0:
         8d:1d:3e:13:aa:e2:67:4a:b0:b0:4a:9e:3f:48:08:b5:63:ca:
         7a:4b:15:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----