Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2efacf8c-d16b-33a1-80b2-2602505789bd.roa
File:                     2efacf8c-d16b-33a1-80b2-2602505789bd.roa (raw, json)
Hash identifier:          eQmBauLsSczmgDhtQ0ic86P+M7SmU3FEggU/KSzC4Mk=
Subject key identifier:   88:0A:0D:DC:55:DB:A2:2D:13:05:CD:14:6D:8E:C6:7E:59:96:A1:FB
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1B0C73E91C850C0FDAC80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2efacf8c-d16b-33a1-80b2-2602505789bd.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     10796
IP address blocks:        24.209.112.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:b0:c7:3e:91:c8:50:c0:fd:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=fa057956-cd08-41e0-b5e7-b947eba9ea99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5d:4e:cf:5f:f3:12:92:e0:f2:36:c9:52:ca:
                    f0:96:1f:1d:26:1e:c4:f8:5b:55:44:db:42:57:a0:
                    0b:61:ce:39:fc:6c:06:16:0f:9e:75:0c:a6:d2:81:
                    eb:62:a5:0d:b4:b2:17:62:5d:78:e3:ba:1e:7e:66:
                    be:00:ab:d8:79:98:a8:cc:c1:51:f9:6f:04:4e:6f:
                    6e:10:d4:c2:7a:62:8d:c8:58:15:88:50:6c:af:7f:
                    82:a4:7e:08:34:e9:09:26:85:78:ab:3a:dd:50:5d:
                    3f:b3:06:39:8f:23:17:41:66:d3:88:25:4c:9f:b3:
                    c0:5b:de:3a:40:e2:32:5a:49:12:e8:7f:36:87:d8:
                    b1:61:ba:9d:5b:aa:9b:d0:b4:48:b3:81:37:17:23:
                    9d:8b:02:9d:f9:4b:91:dc:b4:73:5e:bc:68:0d:d5:
                    10:6c:f0:0b:22:4f:ca:31:b0:27:ca:c5:59:ad:4b:
                    7a:53:1b:68:3d:a9:c4:ea:d4:18:fc:c5:ba:55:03:
                    a7:a2:c8:5b:5d:92:ad:5c:09:a4:09:8f:25:84:04:
                    2b:15:81:c3:17:46:b8:ea:cb:dd:fc:6a:9b:95:9f:
                    c6:dd:9b:46:fc:58:3f:1f:b6:7a:2d:b2:18:90:52:
                    f2:3c:8d:c7:41:7d:1c:29:a5:83:eb:65:ea:3b:51:
                    95:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0A:0D:DC:55:DB:A2:2D:13:05:CD:14:6D:8E:C6:7E:59:96:A1:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2efacf8c-d16b-33a1-80b2-2602505789bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.209.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:7d:0d:e7:3c:90:cd:3b:1f:9d:95:13:cf:c2:5b:c0:39:bb:
         3a:9a:c8:66:90:b5:2f:58:03:71:fb:ca:1c:37:7e:0c:83:b1:
         b5:c1:1d:99:df:37:d5:90:94:92:dd:91:20:26:f4:ef:68:6a:
         bb:b8:64:e6:32:66:2a:3a:4b:f2:b1:57:75:f1:6e:20:b8:08:
         9d:f3:50:26:64:7d:cf:c6:8c:16:5c:96:87:2a:3b:90:04:51:
         ea:b9:a7:39:d0:3b:dd:ba:d9:38:44:4b:bb:c7:ab:ec:4b:6c:
         51:f5:df:19:0a:92:f6:9f:a6:40:f9:5d:f3:4f:14:c1:ff:e8:
         57:47:39:5e:bf:f2:f9:be:b3:04:c4:e6:f4:3b:5e:58:65:b4:
         8f:57:6c:6d:17:ad:bb:0b:40:25:f1:8a:03:43:74:d3:21:85:
         4f:5b:59:35:be:8a:d7:43:fd:15:4b:30:e2:05:00:a0:62:e3:
         68:b1:fa:34:38:de:3c:84:a6:f7:9a:37:31:af:ac:9b:5e:af:
         82:66:f9:5c:c5:52:4a:21:c2:05:ee:e3:ae:cf:80:ca:8a:1e:
         09:46:6d:8a:67:06:4a:c2:2e:a3:77:30:11:7d:49:e1:73:78:
         1c:b6:32:e7:88:0e:79:8a:47:5e:08:b8:a9:fe:93:a8:fe:ff:
         09:84:49:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----