Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/29898ed9-0e25-3ca0-96d7-3385703fdfbf.roa
File:                     29898ed9-0e25-3ca0-96d7-3385703fdfbf.roa (raw, json)
Hash identifier:          iaB2XYQScmAkezPRy/ei4kx51E7E+VgNivPCtmsYm1s=
Subject key identifier:   8E:70:61:62:88:59:8A:F0:6B:FE:6F:64:B5:21:0E:B6:9E:8B:23:CE
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D15E50BBBB9A9FA888E730
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/29898ed9-0e25-3ca0-96d7-3385703fdfbf.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     397352
IP address blocks:        98.0.236.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:5e:50:bb:bb:9a:9f:a8:88:e7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=0e9d9301-4fbb-4b12-8fbe-e7df04bc4476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c8:ba:ab:c0:39:d1:3b:ff:72:06:4b:d3:c3:
                    f3:2d:3e:73:dc:5c:1e:57:28:5e:68:f0:dc:c5:e3:
                    99:d3:76:32:be:94:62:86:4f:85:02:c6:54:08:dd:
                    ce:4b:01:ca:21:ea:a7:54:33:ad:ee:ee:6f:3b:f0:
                    f1:0c:1e:85:ba:c3:1b:6f:9e:07:24:4e:25:b2:78:
                    ae:82:05:4d:b9:93:6c:5e:df:de:3a:99:58:d1:fd:
                    c7:d7:da:d3:cb:74:49:1b:de:e2:d1:80:ed:ef:4c:
                    16:fd:74:7e:d3:76:bf:3c:34:4c:67:18:71:ac:76:
                    34:80:90:1f:da:2b:47:c5:9a:c9:ae:e1:3c:41:94:
                    c4:f9:50:86:22:19:d2:5e:3d:6c:04:f5:fd:6a:ce:
                    af:ae:9f:9b:d1:ed:e7:46:a4:37:14:47:d9:5f:a7:
                    09:2b:24:50:ba:66:93:c3:d9:21:6b:96:ad:84:6a:
                    72:6f:e2:6e:23:63:7a:9c:a6:31:d7:4e:8e:fa:a1:
                    83:34:68:11:88:53:44:6f:e5:06:3f:0e:47:4c:4d:
                    dd:83:1e:7b:76:13:e5:c5:10:e6:04:e4:31:f8:e8:
                    ef:87:25:60:ec:a6:06:ba:75:9b:bb:e9:51:f1:fb:
                    3d:c5:58:6f:8a:04:5b:2d:5a:a2:f1:cc:fa:ba:76:
                    eb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:70:61:62:88:59:8A:F0:6B:FE:6F:64:B5:21:0E:B6:9E:8B:23:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/29898ed9-0e25-3ca0-96d7-3385703fdfbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.0.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:71:b2:57:96:a9:b2:d5:5d:da:fb:9c:5c:c7:2d:a8:31:9f:
         8f:79:71:4c:c7:a4:64:89:2f:62:5a:7c:80:84:fc:0f:61:38:
         ca:9b:3e:66:5b:6d:6b:78:67:ca:cb:e0:3f:14:12:86:03:ca:
         e9:51:4f:29:e8:68:55:ec:d1:ef:da:7f:1b:62:bf:04:38:dd:
         58:bf:ab:8e:b0:ba:01:53:57:fb:14:22:2b:e0:85:f2:8f:27:
         d4:d3:06:9b:52:2c:c0:13:99:72:45:d8:a2:e9:85:66:45:ad:
         4b:ff:81:3d:06:3b:12:c5:72:33:12:b1:da:c0:94:e8:f1:a7:
         9a:a7:b2:45:2d:17:4d:72:77:80:fb:72:36:f0:e9:b6:85:f5:
         d0:20:f4:5e:09:94:08:f0:f8:6e:87:3e:50:69:a3:fa:b6:ba:
         f4:2d:79:60:84:32:e2:44:f1:7d:80:fa:fc:86:52:39:01:b7:
         a3:75:bf:fe:c5:3d:c7:35:c9:c4:79:53:df:81:e5:34:5c:ba:
         9d:3e:a7:dc:59:f6:f9:74:96:95:1e:c3:00:ed:ba:72:1c:0d:
         7b:3e:76:dc:03:f8:01:cd:d7:41:f3:a3:55:c0:9f:49:60:45:
         86:d2:78:fb:b3:75:bc:56:7c:5c:cc:00:75:f5:ce:89:80:78:
         6f:9f:b9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----