Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/acbbe311-1699-3187-8ea8-fbcbd63c2ac6.roa
File:                     acbbe311-1699-3187-8ea8-fbcbd63c2ac6.roa (raw, json)
Hash identifier:          DAsvKiXWTeth3jWu54UwBnq1d608IzISa7ADkeOii1k=
Subject key identifier:   A0:23:8D:28:DF:21:97:78:4A:F1:6D:23:C5:63:A2:46:50:B9:D8:C6
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339DD31FCD01B31641E55E0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/acbbe311-1699-3187-8ea8-fbcbd63c2ac6.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.35.160.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:dd:31:fc:d0:1b:31:64:1e:55:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=62b33519-a313-4c02-a5e1-d02d0abf30fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:31:3d:0f:1b:ae:a8:56:c5:78:a5:37:af:48:
                    ca:3b:28:80:b4:c3:cf:42:05:28:af:bd:5c:fc:af:
                    05:b0:4f:0e:ea:83:f1:f9:fd:04:4c:bf:17:43:fe:
                    e4:23:c9:69:9a:70:3e:30:12:cf:c9:41:11:61:1e:
                    f3:ac:fe:f8:20:07:8f:cf:a1:08:65:e0:38:bc:61:
                    1a:69:57:13:b4:19:ef:63:09:e0:e9:91:80:d6:09:
                    09:f2:2a:6d:c4:55:64:40:d1:4e:77:85:14:f5:45:
                    99:93:90:61:39:fe:49:31:6a:5c:c3:3b:52:31:bf:
                    cf:e8:4b:7c:b6:d1:30:ba:a2:fc:68:70:d8:04:fd:
                    0c:c5:72:93:0d:89:b5:a9:41:4f:f2:87:e8:5a:13:
                    57:d9:da:21:c8:4a:44:c1:9e:57:33:1e:4b:4b:ea:
                    01:ef:e7:d7:2f:13:82:bc:58:a5:42:30:39:ab:43:
                    d8:c0:2b:21:36:1f:17:7a:39:aa:5f:4a:13:0e:e8:
                    e0:3b:37:ee:c4:fd:49:35:7a:1a:14:9a:82:ef:75:
                    e1:c1:07:af:34:30:66:81:d5:fc:72:29:d2:21:9b:
                    f1:11:a3:e9:a0:70:74:b9:8f:53:1b:8c:76:d8:4b:
                    61:e0:39:24:18:3e:22:9d:94:d6:b9:6c:26:35:36:
                    c9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:23:8D:28:DF:21:97:78:4A:F1:6D:23:C5:63:A2:46:50:B9:D8:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/acbbe311-1699-3187-8ea8-fbcbd63c2ac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.35.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:d6:cb:bc:f1:48:89:03:0a:fa:43:ff:d9:10:a4:0b:e6:06:
         90:48:2d:9a:88:7d:24:fd:c3:ed:ba:c7:e7:51:ca:b8:07:80:
         6e:e1:90:f6:7b:30:81:66:58:c5:e7:2d:d8:e8:45:73:0f:9e:
         21:fd:58:7f:31:71:62:28:5b:5b:d7:08:33:21:dc:37:0f:49:
         9e:81:a4:ad:98:14:61:8a:2f:93:62:73:7c:97:9b:e8:63:ae:
         46:58:7d:35:90:e9:30:fb:ba:b2:23:b3:3f:83:f1:32:dc:e2:
         02:b3:87:b7:5c:11:09:c7:b6:9b:06:6b:85:cf:8d:c9:ca:6d:
         95:3f:e6:e5:00:28:0e:7c:72:6e:76:c9:0c:7d:0b:79:e0:c1:
         17:02:41:b1:42:49:f1:ec:aa:ec:cc:f1:c8:9b:e1:93:1b:e3:
         d7:ca:6b:ee:81:ea:cb:b0:b4:ca:cf:ae:4d:fd:73:28:9c:b7:
         86:88:a1:41:3b:73:49:9b:db:2e:dd:32:18:a0:9f:02:3c:d6:
         58:e8:6b:9b:59:e9:c0:58:18:b9:bf:45:8b:7f:06:15:0e:88:
         7a:47:50:c7:98:77:a0:3d:5f:e1:f1:26:7f:ef:2d:30:1a:69:
         a8:82:9b:17:2a:7e:ad:4e:b5:18:77:01:00:e6:36:71:73:0c:
         a9:66:9b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----