Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a3f536b2-f455-35c2-ba37-54a8ee9d66c7.roa
File:                     a3f536b2-f455-35c2-ba37-54a8ee9d66c7.roa (raw, json)
Hash identifier:          1ffQHU3he90Q455N4nZtrEBAPid8DD2xjXeLynN40Fo=
Subject key identifier:   DB:28:B8:C7:F3:28:69:06:0D:AE:95:8D:D0:3C:57:44:3C:C9:A4:5B
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339DA233A31413CD3188F80
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a3f536b2-f455-35c2-ba37-54a8ee9d66c7.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.49.240.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:da:23:3a:31:41:3c:d3:18:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=2cd75697-7fee-4ba3-93a0-d0cc8d54a6c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:86:8a:92:d4:d8:c3:45:95:31:1b:80:96:b3:
                    63:98:20:ac:ff:3d:f0:60:8f:18:13:2d:8f:96:2e:
                    b8:8f:f3:4c:0c:5c:2d:ef:88:9e:08:03:84:a7:9f:
                    e1:dc:67:01:69:93:9e:61:39:0c:bc:08:c6:44:7e:
                    81:9e:6b:d7:bd:0f:eb:92:80:d8:e5:a7:de:6f:0f:
                    f0:f0:bf:cf:b1:9f:64:4f:28:a8:9d:ff:63:d9:31:
                    4f:63:4f:eb:28:a5:10:a3:8f:44:0b:73:dd:79:d3:
                    ef:44:4c:13:e8:79:4c:1e:c7:cf:26:fc:28:13:e3:
                    56:02:2f:87:cc:09:a1:91:4e:ba:00:be:34:f8:43:
                    f3:0f:34:f2:46:67:cb:74:48:52:86:25:15:ab:83:
                    89:86:fe:e9:5c:d4:45:37:ca:40:22:1f:da:d7:c3:
                    93:14:12:f8:dc:54:7c:04:cd:a1:9b:ca:84:29:98:
                    7d:33:35:27:02:07:7d:2f:f4:ce:8b:96:b9:55:fd:
                    6d:62:39:7d:6e:88:56:c7:8c:7b:08:2c:8f:91:5a:
                    8a:33:40:49:45:3e:ee:ac:17:27:45:ba:45:71:67:
                    f2:58:af:04:d4:49:af:7c:35:05:ef:6a:b2:f5:1b:
                    51:9e:3a:f4:3f:fe:60:55:2f:d3:bd:83:5a:13:ce:
                    f9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:28:B8:C7:F3:28:69:06:0D:AE:95:8D:D0:3C:57:44:3C:C9:A4:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a3f536b2-f455-35c2-ba37-54a8ee9d66c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.49.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:0e:72:fc:4e:e5:e0:d1:0e:65:58:54:07:cd:2a:41:d2:5b:
         d5:0e:45:78:45:04:f3:00:c7:10:cb:eb:74:83:1e:2e:62:d2:
         00:ee:8d:bd:12:c0:4e:5b:c5:e8:7a:1a:86:36:1d:71:ac:84:
         d3:51:67:00:44:b5:00:ec:6e:c5:f8:d9:ac:e9:1b:48:18:ad:
         52:6d:19:fc:3e:c1:44:33:73:22:a4:a2:f7:08:b3:d7:9a:ac:
         3b:da:39:6a:62:06:09:d3:cf:d4:b1:ef:24:31:25:63:2a:33:
         1a:d8:da:f4:c9:b1:41:58:ef:fb:a8:49:fc:c7:60:dc:5c:ab:
         86:49:93:5e:2c:04:45:b8:84:c6:d2:ab:69:5e:b1:ce:05:29:
         f5:b6:7d:4b:b1:f4:99:f2:04:71:5e:de:78:a7:b0:8d:3a:46:
         13:90:62:4a:d7:4f:dc:7c:68:12:3e:0f:f8:fa:09:ee:d9:4d:
         05:91:2d:62:7e:d9:9b:66:e3:c3:60:7d:e9:2b:6a:91:46:10:
         4f:0b:89:82:0e:31:8c:e6:01:13:24:7f:a3:3a:4d:e0:0b:31:
         4f:39:0b:df:2d:18:68:69:55:18:8a:e6:a1:df:ec:8a:d6:60:
         dc:1c:f5:81:05:22:5f:a6:ed:d3:76:0c:a4:03:35:50:6d:c2:
         cb:fe:73:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----