Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1d49a194-b663-3145-9023-045b5bb94e66.roa
File:                     1d49a194-b663-3145-9023-045b5bb94e66.roa (raw, json)
Hash identifier:          +ZUoVNdNfSeVs2+8GJ40UZZXnbABLINMO5gQFVUcghk=
Subject key identifier:   94:89:A1:6C:AF:55:17:64:E0:F2:DF:A9:4F:E4:7F:58:9B:E3:E8:F5
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584858A03D2188E6616FFE72B680
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1d49a194-b663-3145-9023-045b5bb94e66.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     5650
IP address blocks:        136.0.68.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:3d:21:88:e6:61:6f:fe:72:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=ac981344-822a-4712-b961-e34de6346afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ea:e4:ac:f0:34:ff:6f:0c:2c:5f:b1:95:e5:
                    dd:8c:bd:02:61:69:c9:68:ef:b5:c3:f1:03:81:84:
                    f7:f1:6a:0f:a1:a3:52:22:8e:15:12:b7:e1:59:d7:
                    c3:60:40:15:af:07:5a:60:05:23:bf:e6:4f:59:24:
                    54:05:8e:56:e0:a7:d9:d1:1f:55:20:6d:78:d3:a7:
                    cf:74:ca:45:59:e1:c3:e0:fe:0e:d4:2a:48:b3:c1:
                    e0:46:0f:e4:3f:70:cf:58:70:58:96:75:92:8d:fd:
                    9b:32:2b:49:17:75:2f:43:b3:b8:2f:bc:34:d5:48:
                    d5:7c:4c:37:9a:e5:b9:5d:34:cf:5f:85:ea:a4:53:
                    7f:88:4b:58:14:6f:63:77:e8:28:58:78:c5:e1:8d:
                    ca:60:c2:e0:e6:b0:25:bd:c1:f3:b0:96:9b:b7:80:
                    70:76:70:8e:43:75:1f:9a:01:81:ee:82:fb:d9:af:
                    f3:26:1b:c6:70:21:78:8e:73:43:69:aa:a4:ae:a3:
                    dc:45:f1:05:62:b2:34:55:fe:a0:53:07:4d:da:65:
                    a3:82:4e:f0:58:03:a5:a7:e1:8b:d1:27:8f:d0:19:
                    90:06:16:d2:24:08:21:78:e4:bd:7e:67:f9:04:ad:
                    1d:5a:26:dd:97:e1:a8:10:98:b7:f9:60:52:d5:8a:
                    a8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:89:A1:6C:AF:55:17:64:E0:F2:DF:A9:4F:E4:7F:58:9B:E3:E8:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1d49a194-b663-3145-9023-045b5bb94e66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:e2:7b:6f:15:2b:48:d7:45:97:21:cb:86:e8:1e:d2:44:ba:
         3b:08:6e:26:51:b3:66:d3:8d:ef:50:b1:be:e0:99:c3:98:06:
         f5:71:0f:cf:55:ed:78:ca:41:d7:e2:4a:85:3b:f8:f6:af:cf:
         b3:c1:1a:5b:56:b5:58:47:b8:ed:0c:0c:68:90:40:dd:ae:22:
         d7:ca:63:62:5a:46:b4:03:dc:54:8e:a7:ec:c4:1d:e9:03:a6:
         17:20:57:bb:c3:58:d9:89:0b:9c:7b:b8:8a:ba:48:73:90:75:
         15:a4:6f:fe:8d:38:14:63:a6:34:7e:62:c0:0c:98:06:60:1a:
         ed:77:f4:07:5e:82:9d:c3:d3:9e:a9:83:9d:8d:3f:48:b6:6e:
         32:e7:0e:18:71:00:1c:ba:b7:08:24:79:69:93:e8:b2:ac:0e:
         5e:f8:24:84:57:95:21:88:05:79:c1:14:a8:31:ca:c4:ab:37:
         b3:19:1b:66:25:34:f7:d6:2b:f0:ef:6e:fc:b9:14:c7:69:3c:
         8a:a6:e4:19:55:b6:ba:f0:3a:a4:b5:cd:79:bc:35:76:75:8a:
         55:05:a2:d5:b6:2b:ca:33:52:c9:a7:ee:a5:b1:5b:53:c9:92:
         76:f0:fb:9c:5d:ca:5a:2c:87:ce:c1:82:71:ed:c3:65:6b:04:
         03:cc:d8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----