Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ca9c00a9-0c14-352f-8ac9-def403bc3b3c.roa
File:                     ca9c00a9-0c14-352f-8ac9-def403bc3b3c.roa (raw, json)
Hash identifier:          6zq3CRMnfg5s1/gFDFCNYNViFDuqrYAeexYXUkEIxBA=
Subject key identifier:   6E:F4:E5:23:B0:CE:C4:D7:05:8F:57:6F:5D:EB:C5:51:80:97:37:F6
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339D683AE6D7E4950753980
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ca9c00a9-0c14-352f-8ac9-def403bc3b3c.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.60.48.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:d6:83:ae:6d:7e:49:50:75:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=958b55e1-4147-4ecb-8980-24b8b4b1ff21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:eb:48:01:60:e9:bb:40:78:ab:ef:40:25:ee:
                    f5:d7:42:07:a5:db:b4:0f:83:50:e2:d2:e2:3c:e6:
                    92:9a:b8:e8:db:35:a4:c4:50:1d:84:4f:a4:0c:c6:
                    11:fd:80:11:86:cc:ea:11:7d:2d:05:bf:44:86:3f:
                    11:21:58:a5:35:67:0e:22:dd:9a:14:c5:5c:44:25:
                    ff:6d:43:da:01:31:1b:33:eb:45:2f:dc:96:ba:b4:
                    e8:70:e0:74:aa:60:d7:19:9b:09:3a:66:4e:60:d4:
                    e4:c3:81:59:ec:e4:7e:25:80:8e:3a:02:33:d9:ce:
                    11:53:0b:0a:97:fa:c6:bc:e3:40:92:49:ed:68:51:
                    e5:7a:4a:bf:34:26:3f:0f:af:da:69:e3:34:44:de:
                    b6:20:83:a4:80:16:19:65:0a:f7:58:36:d2:93:de:
                    58:58:e4:02:14:68:7c:97:fc:4a:af:c9:9b:54:3f:
                    20:d0:91:d5:84:59:69:9a:d5:a4:39:32:96:68:fb:
                    6d:93:0b:05:9a:29:65:66:ea:17:59:ad:7e:dd:a7:
                    3f:50:93:1d:12:a4:6d:87:f1:01:58:42:71:6b:09:
                    9d:d1:9b:40:4e:3d:9e:71:82:6c:14:37:7d:d1:bb:
                    3a:51:32:8b:a4:6e:f5:0b:e9:fb:b2:de:d1:09:2a:
                    18:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F4:E5:23:B0:CE:C4:D7:05:8F:57:6F:5D:EB:C5:51:80:97:37:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ca9c00a9-0c14-352f-8ac9-def403bc3b3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.60.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:3e:e6:78:a4:0b:1f:27:4f:5a:42:98:8f:50:f3:21:71:7d:
         67:80:ca:d3:f4:a5:8a:87:28:b9:66:dd:2d:b4:53:46:ee:d1:
         76:95:10:bb:26:d2:66:02:1c:65:81:e2:62:21:1c:0c:c2:67:
         65:44:b7:e4:19:cb:92:cb:dc:8b:fd:3c:6d:c4:c3:34:d5:20:
         6d:ab:bb:9a:64:ff:1d:2d:32:31:b6:94:5c:75:c5:1d:d5:44:
         b5:c3:52:b1:1b:47:9d:d5:0c:25:a9:75:03:77:95:c2:6a:82:
         0b:4f:4a:d8:1f:a5:62:76:d0:04:60:39:d3:69:4f:c7:72:f0:
         f0:80:98:c1:20:42:c9:dc:bc:79:e1:aa:cc:ef:32:f8:35:62:
         ea:d6:b8:7d:ee:96:de:d8:31:98:1a:72:ee:b2:cb:3e:26:dd:
         42:a1:0c:26:37:43:a1:7e:d3:78:21:e6:dd:39:14:af:ff:dd:
         0e:60:5a:e8:2a:68:ab:0b:44:6a:dd:7a:f1:4f:1f:60:89:2d:
         1a:1c:78:09:58:26:82:bc:21:d7:8a:40:39:6c:43:9f:04:80:
         0b:51:e8:09:e1:7e:87:8e:fc:c0:71:14:c2:93:96:9d:18:bb:
         ae:4d:21:a0:b8:bc:76:a5:94:bc:58:11:f2:b8:65:1a:03:46:
         90:7d:b8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----