Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/61a222d8-81f0-3ba0-af0b-76ff9c32a58a.roa
File:                     61a222d8-81f0-3ba0-af0b-76ff9c32a58a.roa (raw, json)
Hash identifier:          +fzPBmFEIVlLYVn5QGr7RCMZxozlpe2B06xVElmlgoo=
Subject key identifier:   27:DE:40:57:A5:4A:CD:90:30:CC:F8:28:96:08:CF:C2:1F:68:22:EE
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D149A0FA97F9837DB5C880
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/61a222d8-81f0-3ba0-af0b-76ff9c32a58a.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     12271
IP address blocks:        24.39.112.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:49:a0:fa:97:f9:83:7d:b5:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=a4ef59af-8d45-41f5-94fe-8e4b6fe970f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:14:95:43:4c:b1:e9:4a:d1:f2:d7:1e:02:47:
                    95:c2:83:c5:13:22:3f:77:98:19:3c:27:44:9e:28:
                    c5:8e:48:5f:00:d2:e0:72:90:e6:f2:7e:30:04:8c:
                    de:41:8f:5c:1a:03:91:0e:14:70:d5:f3:31:0b:54:
                    66:89:c6:fe:ed:d8:9c:57:da:17:2b:c4:73:a9:f2:
                    3a:5c:c2:ff:31:5f:67:f7:92:65:ec:85:8e:d6:74:
                    b0:d2:8e:af:a6:50:27:a3:68:26:a7:f4:ff:c3:84:
                    8f:af:3c:89:3a:0d:42:39:fe:b9:9c:30:91:31:38:
                    80:00:fb:21:bf:8a:c5:1f:ad:bd:01:8e:df:e6:40:
                    2e:a7:bd:77:50:b7:4f:31:3c:42:d0:64:36:30:56:
                    ce:ed:b6:8f:2c:91:09:41:d0:12:33:a3:34:10:18:
                    5c:ff:df:12:85:3d:38:cd:1d:4b:bb:da:53:cb:7f:
                    16:fe:0f:f6:ce:5a:e9:c7:ba:81:54:ec:48:69:93:
                    3a:0b:1d:cb:5f:d1:eb:b1:04:81:9d:3c:c4:48:13:
                    14:43:55:ce:11:48:d9:31:3f:1b:52:94:af:39:68:
                    93:fa:c4:dd:3a:96:ff:1f:90:2c:e0:94:51:84:72:
                    be:a1:15:9d:de:d9:56:44:a8:a0:1e:2f:46:8c:17:
                    2b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:DE:40:57:A5:4A:CD:90:30:CC:F8:28:96:08:CF:C2:1F:68:22:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/61a222d8-81f0-3ba0-af0b-76ff9c32a58a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.39.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:17:39:c7:1c:c8:79:47:0e:47:b1:21:24:ff:5e:d9:29:e2:
         ea:88:a5:da:08:28:26:2c:a9:cf:fb:86:ae:c1:e4:8c:42:14:
         e4:1e:5f:a8:b3:26:5d:e4:f2:cf:ba:53:b1:2d:c2:86:d3:84:
         a6:3d:90:60:4b:fa:ed:49:ed:ad:a0:81:31:3e:17:03:c1:66:
         33:8f:fb:46:0e:11:00:6a:fe:de:f2:54:a7:40:74:da:91:15:
         13:47:d8:c2:aa:43:47:a5:d0:a3:22:ab:32:c9:f4:0a:99:4d:
         06:7e:5e:9c:40:3f:9f:7f:51:07:a0:ca:43:0c:8d:2b:4d:2d:
         f5:ad:48:a0:26:8d:e1:91:82:dc:e8:08:78:be:52:c6:23:a2:
         87:91:7f:ff:20:0b:94:b5:2d:92:bd:16:af:78:09:d5:c2:ff:
         f4:cb:8c:31:71:e1:9a:38:2d:02:61:3c:0c:63:29:eb:d5:3c:
         c1:e2:4f:6f:f3:e8:84:6d:12:f0:1e:34:06:5e:72:81:13:72:
         c5:94:fd:26:ff:fa:5c:f0:7e:56:37:94:44:3a:aa:45:c8:2f:
         45:a0:c2:f0:a4:8d:79:14:f6:9f:ca:ed:27:9e:d2:a2:64:98:
         69:5e:b4:1b:09:50:9a:fe:81:90:03:83:b9:47:64:9e:d8:ce:
         f7:71:ab:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----