Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/46d792b5-1f88-3972-8f65-dcd450287d12.roa
File:                     46d792b5-1f88-3972-8f65-dcd450287d12.roa (raw, json)
Hash identifier:          1maQ1i1QwMIToGOukhvWvUujGoYYn9tZ6U5qsyx0A5s=
Subject key identifier:   3E:34:9B:D0:70:B1:FF:D0:15:2F:69:85:87:74:81:D5:02:8A:52:4F
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1AC1A516B766809B92F00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/46d792b5-1f88-3972-8f65-dcd450287d12.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     10796
IP address blocks:        104.231.128.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:ac:1a:51:6b:76:68:09:b9:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=4cb5086f-0e22-4a78-968a-2fa41e3eb7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:34:60:9b:b0:91:d2:10:d7:cb:9f:92:e6:06:
                    06:fc:60:16:1f:51:d2:ea:b4:b4:22:5e:16:c1:b3:
                    e3:24:0a:6e:31:18:11:92:56:0d:ef:fc:9c:55:cb:
                    c2:cb:a5:a2:f5:3a:7c:6b:00:5a:8a:69:f0:20:f7:
                    6c:4a:88:d8:ef:69:af:f6:36:57:00:6b:0b:bd:bd:
                    ab:ea:c2:13:8f:af:a2:be:3b:0b:be:ca:c2:a3:37:
                    0c:4d:64:eb:bf:d1:35:95:f5:c6:00:2c:29:38:8f:
                    fe:93:5d:3d:db:02:64:64:72:cb:97:74:81:ec:df:
                    18:bb:a4:a3:7c:0a:ef:44:e9:78:44:b1:40:8b:da:
                    19:27:01:bd:19:b7:8c:14:bf:0a:a0:9c:2b:5e:c4:
                    26:b2:36:2c:a9:60:e5:da:ec:95:fa:43:85:38:5c:
                    7d:46:79:48:6e:d7:3a:ce:75:2b:a9:90:67:40:8a:
                    80:06:6e:a0:b9:1e:8d:cc:d3:92:e0:ca:47:f2:d7:
                    2d:7f:5c:b0:98:94:dc:c2:6f:ea:63:ca:1b:73:ae:
                    df:5a:af:6e:3d:d8:f8:26:e8:63:10:40:cc:06:14:
                    bb:96:f7:4b:62:b5:17:a1:24:59:cf:b6:df:48:ad:
                    0e:db:7c:11:57:f3:76:02:83:c6:f7:7a:55:c2:c4:
                    9f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:34:9B:D0:70:B1:FF:D0:15:2F:69:85:87:74:81:D5:02:8A:52:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/46d792b5-1f88-3972-8f65-dcd450287d12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.231.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:ad:f3:3f:6e:5e:5e:8e:bf:52:64:5b:0f:a3:d2:d2:14:9b:
         8e:18:f7:9c:6f:c4:c2:d5:4f:b2:92:5d:4e:8c:ba:01:cc:57:
         37:74:49:73:6a:28:b0:a1:28:78:da:d7:1e:e7:1a:46:3c:78:
         fe:bc:6a:97:07:c6:e9:ae:df:22:a8:a2:19:80:74:3a:4f:d9:
         78:f5:e4:da:ba:2c:ac:00:c6:69:bf:34:86:5e:83:7d:d8:db:
         1e:37:cb:61:ce:ff:d1:3b:e4:1a:d8:b5:a9:23:ff:be:92:4c:
         2c:c1:4a:e6:fb:9f:c6:df:ce:3d:0c:07:74:1a:b6:11:e6:0d:
         9c:87:cf:4b:e9:c3:ff:44:64:ce:89:a7:aa:92:71:50:95:2e:
         96:8f:78:c1:8b:e3:77:e9:8f:b4:51:18:d2:9f:f3:40:b9:6b:
         7f:58:a4:fb:10:cd:2f:09:37:71:4d:3b:ff:c3:7c:26:5e:21:
         67:2f:3e:4f:8a:23:2a:04:82:cd:2f:05:0f:d5:90:d3:cd:75:
         f0:d3:ae:c6:23:b6:30:79:f6:f8:25:01:9b:a7:b5:98:84:8e:
         09:fa:4f:85:4f:b3:98:7c:d6:11:91:eb:92:94:54:ca:94:48:
         1b:3e:36:60:db:1f:60:de:aa:ed:f1:22:ad:01:2b:2b:0a:b2:
         2d:a7:22:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----