Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d952b645-35ef-3f72-a694-b7b692438686.roa
File:                     d952b645-35ef-3f72-a694-b7b692438686.roa (raw, json)
Hash identifier:          97pg7TWT/Xk46aF6Pl68mhER111Q7ru/Lu5VPhlpFkg=
Subject key identifier:   AC:9D:30:75:22:BD:FD:61:2E:6A:B6:E7:64:D4:8D:2B:34:0A:CE:D4
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847F584EA3BD952627CEF3F9F00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d952b645-35ef-3f72-a694-b7b692438686.roa
Signing time:             Fri 22 Nov 2024 02:00:40 +0000
ROA not before:           Fri 22 Nov 2024 02:00:40 +0000
ROA not after:            Thu 20 Feb 2025 02:00:40 +0000
asID:                     7018
IP address blocks:        136.0.135.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f5:84:ea:3b:d9:52:62:7c:ef:3f:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov 22 02:00:40 2024 GMT
            Not After : Feb 20 02:00:40 2025 GMT
        Subject: CN=8e376ed0-aaf5-4f13-ad9b-ce4418a73c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:de:91:6b:70:9e:51:52:2e:09:6f:bb:7c:f8:
                    3b:89:05:13:00:76:8d:2e:12:ef:49:32:16:ef:d5:
                    9a:68:b1:8c:d7:32:dc:a1:f5:29:3a:cc:59:da:72:
                    7a:d5:8f:bd:3b:c1:ee:56:3f:95:99:b3:6e:3b:57:
                    9c:f6:86:22:ba:4f:4a:18:f0:aa:9a:49:c0:d5:65:
                    ef:f5:81:16:35:33:62:d0:b2:c8:63:74:d2:ea:99:
                    53:d4:b5:b2:a2:4a:2e:e1:06:d9:45:97:da:a2:58:
                    af:92:67:6c:56:27:6e:87:48:d0:12:00:00:29:08:
                    26:0d:c6:8d:30:7d:9f:80:99:c8:c2:72:26:af:d0:
                    a8:41:ae:b3:8e:c1:16:b6:73:16:f0:a2:8e:ae:87:
                    6b:df:c0:1b:5f:ff:cc:bc:d8:5d:aa:04:ee:11:7a:
                    2d:6d:81:85:73:71:e7:f5:99:7b:07:10:21:f2:c5:
                    ba:93:34:13:ab:28:aa:9f:78:eb:44:5a:ab:0f:71:
                    9d:99:aa:24:87:1f:93:26:b3:cf:0b:23:bb:33:56:
                    57:81:fe:e0:82:19:fb:2d:21:f4:a3:c0:41:2e:91:
                    7e:09:d3:f4:c8:48:a6:23:5c:cb:8f:2b:b9:b7:c5:
                    e2:ef:a0:de:77:9e:6e:77:f3:5c:8e:6b:96:d5:e9:
                    43:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9D:30:75:22:BD:FD:61:2E:6A:B6:E7:64:D4:8D:2B:34:0A:CE:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d952b645-35ef-3f72-a694-b7b692438686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:d1:03:66:8f:b8:97:12:c1:76:78:bd:34:22:85:4e:d0:94:
         89:53:05:bc:d6:09:4c:28:78:6f:e9:56:b8:01:e6:cb:91:a1:
         e2:e0:dc:b1:af:90:49:3c:3e:2d:cc:cf:06:08:6c:94:3d:ab:
         88:2a:4b:07:f6:61:80:07:95:94:ec:7b:e2:71:68:11:29:5b:
         1f:30:7b:bf:e0:1e:7e:79:6d:32:34:fd:1f:34:73:05:02:6b:
         58:8f:16:02:73:6a:9c:8f:36:1b:1d:24:91:f8:a3:62:aa:1b:
         95:a8:32:63:09:09:94:26:54:ba:bc:b9:86:3b:b8:34:f9:c9:
         12:b4:56:6d:e6:80:df:82:7c:5e:13:fc:6f:e2:fc:48:70:06:
         18:30:aa:53:45:f3:b5:76:2a:2e:c1:f3:3f:d0:d3:b2:56:c6:
         56:23:1c:72:07:c7:d9:81:34:de:a8:29:be:d4:07:50:c0:d5:
         07:89:a8:b4:1a:68:8b:d2:68:ca:1c:15:5e:81:59:61:a9:b1:
         60:47:5d:6d:81:6a:67:32:1a:cf:96:7b:c3:7b:16:65:bb:4f:
         2d:e1:8a:c2:c6:36:d4:2b:35:8f:b6:36:bf:ea:fa:f8:a9:f4:
         2f:a1:7e:28:5d:10:f7:fc:62:76:16:d0:5f:7d:a8:69:39:8a:
         f5:5f:ed:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----