Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7428bc5-158c-3dda-8acc-403a9b9b59be.roa
File:                     e7428bc5-158c-3dda-8acc-403a9b9b59be.roa (raw, json)
Hash identifier:          5weuzBKbXGo6XvXUVtYfVPsScEc55N1llDvqp08P46A=
Subject key identifier:   75:2E:64:73:2B:2D:96:CB:DB:A8:39:EC:EB:30:CC:B6:93:47:0A:CA
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339D763931342C9E7199700
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7428bc5-158c-3dda-8acc-403a9b9b59be.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.53.0.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:d7:63:93:13:42:c9:e7:19:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=b2ae376e-2e62-461f-a488-6cb01881f1c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:04:67:c0:ff:92:05:34:91:03:dc:31:9f:e1:
                    0c:7d:56:0f:3a:fe:f5:2c:72:32:07:8a:87:db:9a:
                    2c:5c:6c:0a:02:13:69:ea:ba:67:30:e8:21:e3:14:
                    ea:90:5e:b1:d4:6b:49:9a:05:7e:03:67:b4:da:15:
                    6e:63:da:5b:a3:bb:aa:d4:b8:95:e6:08:76:8f:16:
                    2c:28:bb:c8:e6:c3:49:ea:15:75:7c:98:2f:8a:2c:
                    e4:41:af:8c:35:f8:56:01:31:6b:b5:d2:7c:4f:97:
                    33:4b:c7:c8:5e:fe:45:ce:95:ef:25:28:a2:e2:b3:
                    17:30:8e:ea:db:7a:84:8a:2c:1b:3d:43:02:c4:95:
                    c2:68:cd:28:1d:24:b5:20:1c:54:5e:9f:b2:3b:82:
                    1b:a3:99:9d:b7:bf:56:cf:6d:e5:c0:05:e3:36:27:
                    ee:25:59:0f:fc:86:13:92:dc:7e:d1:9f:e2:46:2b:
                    cc:7c:25:da:2f:82:9b:92:45:fc:c7:13:e6:d9:83:
                    0f:7b:35:73:c5:63:69:eb:9a:68:fa:b3:f8:c3:fe:
                    50:77:11:f2:a3:5c:55:52:bd:e8:e9:19:6e:f2:8f:
                    b5:38:3f:5e:1e:8d:29:ee:3e:99:9a:57:99:f5:d1:
                    f5:32:af:60:80:e5:f3:8d:da:e3:89:2d:fd:91:82:
                    e6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:2E:64:73:2B:2D:96:CB:DB:A8:39:EC:EB:30:CC:B6:93:47:0A:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7428bc5-158c-3dda-8acc-403a9b9b59be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.53.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:34:a0:52:a5:2a:90:68:4f:d7:61:9f:7e:d5:9b:39:bc:c2:
         04:06:ad:de:00:58:58:18:71:36:1b:2d:4a:be:7b:18:ea:9c:
         37:12:22:b7:4d:36:ba:e8:26:2b:e0:08:f2:83:6e:9d:d0:b0:
         de:9c:ba:3c:8d:a5:5d:1e:f0:55:b7:b0:f5:6b:f1:bf:82:7c:
         44:60:48:c0:5f:7c:27:4e:87:5f:f2:de:08:b7:52:67:a0:af:
         29:e7:00:ad:ee:4f:25:db:d0:d6:22:a4:85:bc:24:51:f2:6e:
         f1:29:61:3f:89:c5:7a:15:c6:26:78:89:57:e3:f7:dc:b4:63:
         80:fc:a0:3b:a0:37:b1:f5:25:98:8e:fd:03:ee:09:60:ab:9c:
         fe:4d:9b:91:e6:19:9f:00:fb:eb:cd:53:b4:7f:ae:f5:eb:c3:
         2a:7a:9a:3e:f9:98:99:18:fe:f2:01:54:e2:3c:eb:02:a2:17:
         57:6a:ea:b7:f7:1c:25:b2:50:41:bb:b5:14:02:c3:0f:80:0f:
         72:d9:6e:3c:5d:bf:70:3e:5f:ec:f8:82:85:4b:74:b2:bb:b1:
         cd:0b:69:24:42:4b:8e:4e:ee:b6:6a:39:dc:7f:e8:ae:b5:64:
         45:a9:fc:00:0d:3b:5b:c1:a9:85:6a:1c:4b:16:82:03:94:0c:
         9c:cb:b5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----