Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9de09370-0ac5-3177-bed9-24bddb949aa3.roa
File:                     9de09370-0ac5-3177-bed9-24bddb949aa3.roa (raw, json)
Hash identifier:          dJGkExL/k8xD1UxbLnzGuYhMZjgy44wsC0NlBFuA7Pk=
Subject key identifier:   6A:33:C1:09:2F:D6:FE:80:E7:35:1F:0C:76:1D:48:85:E7:8D:52:14
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339D1C198CAC389F65FF880
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9de09370-0ac5-3177-bed9-24bddb949aa3.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.52.144.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:d1:c1:98:ca:c3:89:f6:5f:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=5b7250c0-f94b-407d-a6ac-323fbb1245fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:50:cb:3c:79:d9:da:99:8f:c6:6d:f9:ed:6e:
                    31:1e:ba:8c:8e:32:fb:bd:92:3b:5d:8b:85:b7:51:
                    64:a4:af:72:42:25:09:5a:b8:f5:31:60:fb:7e:1e:
                    d0:e3:5e:dd:fa:97:a9:92:fa:b6:24:f2:82:2a:5e:
                    96:bf:7f:cc:f6:7e:0d:ec:1f:44:77:6e:8c:2d:67:
                    31:8f:52:23:2b:bf:64:0d:4a:8d:da:40:11:bf:dd:
                    6a:b1:bb:89:8d:09:02:0d:d8:ae:d8:0c:44:58:8f:
                    ee:1b:d3:bf:69:23:eb:a3:de:e0:f0:eb:19:80:35:
                    01:0c:3a:76:5b:a7:f5:dc:74:23:a5:18:a4:36:c4:
                    4d:09:e8:4e:b4:84:0f:cb:c2:27:8b:d6:15:d7:1d:
                    da:d8:f2:e3:d3:13:50:de:1a:3c:c3:a6:e0:b1:9b:
                    f1:27:9b:94:c8:4b:27:8e:63:6b:5f:a7:f7:1d:a1:
                    bc:ac:ac:e9:52:3c:84:b6:13:d2:f0:d1:8a:cb:af:
                    8f:ba:f1:94:8d:41:e1:c4:ff:f8:bd:fa:d7:c9:3c:
                    a1:72:7e:0a:cd:93:3e:99:a6:db:08:76:fc:e0:d9:
                    8d:fa:43:92:d0:5c:16:99:43:62:56:4d:ae:2d:7b:
                    ab:0c:aa:0a:9f:a3:8c:ca:e8:85:0b:79:18:8a:56:
                    0b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:33:C1:09:2F:D6:FE:80:E7:35:1F:0C:76:1D:48:85:E7:8D:52:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9de09370-0ac5-3177-bed9-24bddb949aa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.52.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:31:b1:78:5a:5d:7c:73:2c:ad:64:c1:4c:20:0e:55:1e:3c:
         bd:4a:39:2f:95:56:e7:56:c9:71:c2:af:34:28:c6:2e:1b:eb:
         86:d5:55:23:a2:67:f8:f9:a9:87:03:9c:2c:72:60:73:65:c7:
         c5:88:2b:2f:f7:32:07:af:2d:5e:a3:4b:8c:4e:6c:47:96:52:
         d1:ea:cc:38:9a:f8:0c:25:5c:b6:18:d2:e0:9c:75:c7:de:82:
         1e:14:62:4f:5a:13:b9:e3:2f:5c:0a:fa:b3:f3:41:48:ae:d9:
         88:7b:df:1d:41:72:b2:b9:4f:af:ca:00:e1:ec:c1:34:e3:0b:
         87:63:ef:79:82:5d:f5:83:80:db:b2:b9:c5:51:94:9b:bb:c9:
         85:da:30:63:b6:52:bc:6c:ef:cc:8e:09:03:0a:58:f8:3a:7b:
         df:41:ec:71:6d:cc:15:de:f8:9a:5c:b0:34:82:cd:e8:b4:9b:
         5d:b2:be:8d:07:9d:e6:34:c4:f8:5a:fc:f2:3d:80:7d:83:87:
         9b:95:f5:44:72:55:58:48:f9:84:42:24:58:22:bc:26:7f:fb:
         84:08:2f:50:60:af:5f:05:ef:f6:17:3b:47:38:43:3a:31:ec:
         f1:09:a5:05:55:93:17:98:6a:de:dc:d1:c2:2e:e5:b6:19:50:
         b5:c3:7e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----