Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c49a928a-cb43-392e-8d6d-68e9dc73b3b3.roa
File:                     c49a928a-cb43-392e-8d6d-68e9dc73b3b3.roa (raw, json)
Hash identifier:          52oN7nfmTTMoriBhG6ii2Y5gI9FjZyW2kbJ9kAngx0Y=
Subject key identifier:   56:ED:E1:F9:03:DF:94:BE:3A:96:01:2D:B8:EC:25:D6:B1:21:CB:59
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339C8D86580BADA8C4AE5F0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c49a928a-cb43-392e-8d6d-68e9dc73b3b3.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.32.96.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:c8:d8:65:80:ba:da:8c:4a:e5:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=b364ab26-9d75-40e0-8bd5-cf96871877ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:32:68:e5:00:91:2e:18:52:46:42:4d:1a:fc:
                    3b:56:f0:b9:ac:10:0f:74:f3:bd:73:8a:e0:01:af:
                    70:92:8a:cc:a3:87:76:57:d6:8f:69:4a:0e:37:ae:
                    4a:b7:a6:af:3f:38:25:b4:d1:a0:55:f8:0a:8b:40:
                    ee:69:07:2c:c7:16:4e:0d:4b:c6:ca:a2:7c:7c:33:
                    99:6a:94:b6:a4:8a:00:5f:41:1a:80:bd:37:d8:e5:
                    f8:82:f5:0a:57:14:e6:36:fc:7d:c1:bf:bb:6b:1f:
                    a0:b5:76:e9:2f:aa:40:4d:ed:87:c6:27:80:71:ec:
                    e5:95:0c:d4:29:b6:0a:e0:92:f5:dd:15:12:6a:4e:
                    22:80:91:25:39:de:79:1b:06:55:da:7c:7f:e4:47:
                    30:aa:c4:b6:da:2f:ce:7d:18:89:8d:23:49:9c:18:
                    72:9b:a7:13:09:3b:94:96:58:44:a7:3e:90:e2:62:
                    a7:42:ef:3a:16:c0:b7:60:40:1e:55:a5:78:23:2b:
                    91:91:71:13:d0:0a:8c:0d:3b:70:e5:30:90:58:b1:
                    67:ff:73:84:d7:e4:b7:20:6b:84:20:3b:f7:81:0d:
                    d3:00:0d:29:c5:63:6f:2a:ba:f5:21:86:de:76:fb:
                    67:3e:b8:42:61:fd:3f:4e:c7:7b:fd:30:12:bc:6a:
                    88:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:ED:E1:F9:03:DF:94:BE:3A:96:01:2D:B8:EC:25:D6:B1:21:CB:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c49a928a-cb43-392e-8d6d-68e9dc73b3b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.32.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:fa:bc:0e:f4:2a:63:30:8a:b3:96:63:fe:3d:81:e4:04:50:
         ae:3e:4b:7f:01:7f:4a:3b:34:73:59:ae:f2:77:a5:ab:79:da:
         f5:c8:5b:05:68:5e:a5:a8:7c:0a:5b:ee:02:fb:3e:25:e0:0a:
         17:28:5f:fd:fb:55:e5:4c:89:9d:56:75:9e:76:86:0c:3c:a1:
         6a:6d:01:6f:51:7e:0d:0a:be:d6:4a:ae:1e:18:7a:19:f0:61:
         ec:13:46:07:76:ed:76:d3:ac:e5:1e:7e:d6:d7:bc:15:7b:03:
         c8:4b:b8:18:49:c6:b9:17:5d:ff:dd:b8:48:ad:ec:c5:62:3a:
         9d:bf:50:83:df:f9:a3:f1:be:ea:31:ee:83:0a:29:cd:c5:fa:
         ea:3d:3c:fc:4f:37:46:14:e6:47:b0:4c:f5:80:56:78:d2:53:
         0e:f4:49:6d:54:2b:5b:74:c5:cc:7b:8d:14:d9:f1:c2:55:66:
         4e:d3:e9:8b:2a:0c:fb:8d:f4:ff:04:9a:1e:54:3d:93:4a:9d:
         02:42:b3:d3:e6:09:9f:9a:54:38:c4:e8:e6:32:ef:b8:26:ae:
         b9:be:42:14:5b:c0:2d:f0:43:f0:03:ec:16:7a:3d:fa:55:b9:
         82:ce:8a:d2:aa:eb:57:8d:f1:61:98:12:bd:b7:7c:c9:02:8a:
         e7:96:f4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----