Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3f42ef2f-c26a-34cc-988a-7cd4f67ec0ed.roa
File:                     3f42ef2f-c26a-34cc-988a-7cd4f67ec0ed.roa (raw, json)
Hash identifier:          xd78AWl3THB1csLsvmCvCiEmG1aO3378cgSrlBv4E/w=
Subject key identifier:   25:9C:F6:18:48:D7:73:76:13:22:55:66:92:68:67:CF:68:72:5A:A2
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858490114280D30B2EA4D5B48B800
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3f42ef2f-c26a-34cc-988a-7cd4f67ec0ed.roa
Signing time:             Tue 25 Feb 2025 22:10:15 +0000
ROA not before:           Tue 25 Feb 2025 22:10:15 +0000
ROA not after:            Mon 26 May 2025 21:10:15 +0000
asID:                     20001
IP address blocks:        66.91.128.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:01:14:28:0d:30:b2:ea:4d:5b:48:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 25 22:10:15 2025 GMT
            Not After : May 26 21:10:15 2025 GMT
        Subject: CN=7ea0bffe-18cd-4e43-96f0-ccbdb470a1cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b8:5a:87:6f:37:51:9c:e3:e3:39:a1:f5:9e:
                    ba:10:12:0b:b1:0f:b7:b3:29:46:1c:4a:b9:a0:db:
                    d3:44:62:e6:8a:1a:e7:49:40:2b:75:a2:b2:fb:5c:
                    fa:eb:00:e0:09:8b:e2:2d:bb:a2:7b:b8:ea:70:e0:
                    dd:ac:8a:ed:3b:ee:87:9d:ea:5a:33:e3:9c:7b:f2:
                    2d:55:50:02:83:72:e3:ec:47:e5:d6:00:1b:63:f4:
                    18:ac:03:e6:b5:55:44:3c:10:8a:ff:dd:ed:6f:81:
                    05:5a:6b:04:d0:cb:c9:d9:b3:5b:84:44:7d:a7:d9:
                    68:42:a2:cd:95:73:a9:70:df:4b:e6:39:fc:06:b4:
                    5c:32:75:fd:96:3d:45:21:35:71:9e:80:69:37:7c:
                    92:0e:46:b7:38:d4:a7:bd:66:5e:f2:63:7d:39:11:
                    1f:ce:7e:4b:b7:a0:32:31:08:ce:ab:4d:78:07:28:
                    22:e7:03:95:9c:d1:75:47:de:3f:7a:24:53:6b:fb:
                    b6:c9:c8:6f:03:53:fc:b3:2a:e9:bc:f5:e7:af:f3:
                    b3:ce:9f:4b:aa:19:3f:e2:8f:55:f1:61:80:a2:91:
                    29:bc:a7:ef:8b:5c:64:21:c0:b9:f1:c4:33:a0:f4:
                    28:29:01:2f:25:fc:15:76:ad:a1:e0:dc:e4:63:77:
                    84:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9C:F6:18:48:D7:73:76:13:22:55:66:92:68:67:CF:68:72:5A:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3f42ef2f-c26a-34cc-988a-7cd4f67ec0ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.91.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:f7:50:82:e2:a9:dd:da:f1:cf:d0:3d:2e:a1:83:3a:0e:84:
         f5:24:2d:4b:fa:c1:34:59:a5:d2:5f:3e:23:79:91:de:bf:f8:
         b8:b6:6d:0f:90:50:e9:ce:a2:2a:a4:cf:6e:79:d6:8b:a8:c4:
         e0:64:67:34:0c:de:30:07:19:7f:db:d9:27:78:3b:02:dd:9b:
         b0:bd:ba:10:da:53:db:d3:bb:d4:96:96:da:fd:c4:1f:cb:95:
         7b:89:53:d0:8c:ca:93:18:17:fb:53:a5:8e:10:e4:a6:e5:95:
         82:83:30:ef:8f:50:02:fe:bd:ba:26:46:f3:1d:ec:05:9b:0a:
         4b:f8:4d:a5:11:15:1e:6d:2c:45:54:e7:ad:94:82:de:e0:ab:
         2c:f2:db:e1:e0:a7:68:71:18:cb:83:d2:c1:66:24:f4:8a:5e:
         d0:aa:09:66:84:43:77:e2:78:7f:6b:2a:92:39:08:45:fb:47:
         99:91:79:2d:5c:d2:80:c1:31:02:a5:1b:18:0b:01:34:5f:83:
         cd:3f:33:e6:0b:99:a5:48:23:42:c9:ef:a0:b3:6f:4a:f5:17:
         b7:2d:8f:3b:0b:a2:43:bb:97:e4:4c:6c:1a:c8:41:b8:b0:1c:
         31:c5:30:a6:e6:19:59:96:df:df:b7:9c:27:6d:ec:8b:3f:e3:
         2b:bf:3c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----