Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7d11c1cd-a605-36a4-8f89-95f86ea8a5a5.roa
File:                     7d11c1cd-a605-36a4-8f89-95f86ea8a5a5.roa (raw, json)
Hash identifier:          GfYlzgvUTSQPTcGxSZcQni0I4U/T6woU7h7DQ8ANlYc=
Subject key identifier:   B9:E5:A7:66:87:81:FB:86:03:40:1F:F9:E0:E0:8C:7F:48:D4:B2:AC
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1470C2A2036612C856400
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7d11c1cd-a605-36a4-8f89-95f86ea8a5a5.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     12271
IP address blocks:        68.172.208.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:47:0c:2a:20:36:61:2c:85:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=09a28d95-c5c5-4b5e-9d7a-735f164780aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3b:58:96:9c:e7:ac:80:ac:f3:e4:5b:73:71:
                    01:9a:f5:fe:c5:96:00:9c:5d:35:66:fe:9e:b9:e7:
                    95:66:2c:2b:62:31:df:1a:d7:94:a7:95:43:13:13:
                    fe:65:f2:f0:28:3a:b0:51:e7:12:19:c5:15:37:41:
                    3e:3b:2b:3f:6e:c1:a1:c2:f5:e6:33:40:65:1c:94:
                    79:10:5a:31:b3:7b:0d:0b:4b:b9:aa:d4:0e:ef:1d:
                    5e:7f:4a:02:0a:0b:a8:d0:d3:3b:d3:42:56:9d:7d:
                    bd:ea:f4:e8:63:74:38:4e:92:89:5c:7a:41:42:8a:
                    26:c3:36:b6:bd:7e:ec:a9:d0:55:f2:a2:a4:c2:6c:
                    b5:5e:1d:20:81:9a:45:70:d9:a2:71:3e:20:49:b2:
                    7f:15:19:18:d1:68:86:e2:ce:e3:03:6b:c0:dd:fd:
                    e5:a4:c3:95:30:eb:85:41:91:3e:dd:31:dc:41:7c:
                    7f:49:17:ba:42:5c:e7:5a:d5:52:09:53:02:9d:61:
                    2d:c4:ed:48:2d:46:c9:73:1d:32:04:ed:24:44:a7:
                    9c:25:e8:5d:80:ec:7c:42:12:b5:17:e8:66:dd:a5:
                    3a:55:75:6a:58:67:8a:3f:73:d7:14:46:62:77:4a:
                    23:61:9c:43:0c:37:ce:67:16:d9:16:bc:10:fa:2b:
                    40:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E5:A7:66:87:81:FB:86:03:40:1F:F9:E0:E0:8C:7F:48:D4:B2:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7d11c1cd-a605-36a4-8f89-95f86ea8a5a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.172.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:ae:12:d1:77:6c:e1:c3:53:92:fd:dc:1f:d6:5a:a8:14:19:
         15:f2:cf:02:ca:ac:6f:42:27:77:b7:b0:51:03:49:b8:75:bf:
         bb:37:27:6c:91:c5:4c:6b:2c:e3:10:1c:68:e7:25:15:05:8d:
         44:17:e1:61:56:0f:f9:42:59:50:56:47:a1:f0:f7:c8:78:96:
         27:15:ed:0e:f1:60:17:6d:55:3a:cc:cc:d9:ab:7e:35:37:4d:
         87:83:d1:a4:a9:5d:3b:e7:6d:a9:ed:3f:c1:10:23:27:e9:04:
         a9:dd:dd:7d:55:55:5d:f5:b4:15:86:6e:01:17:12:e6:96:8d:
         71:50:08:99:f4:00:f4:ce:03:5b:e4:72:8c:52:6a:f5:ac:d0:
         e3:a7:44:32:5c:9f:eb:e9:20:27:4b:76:2f:0e:a7:40:42:14:
         b7:f4:ef:c3:01:61:1b:ba:c1:13:58:07:41:2d:fb:96:a0:4a:
         ec:fd:44:a2:d1:ae:cd:05:5c:b7:2e:4d:74:87:7d:48:6f:d8:
         4e:0f:ef:58:3f:c3:bb:27:ba:10:f6:69:75:df:c0:42:c5:ff:
         be:2b:d0:22:9c:c8:ef:3f:4a:09:e5:91:a9:4e:a4:59:84:62:
         d8:17:ca:f6:10:a6:a3:3e:1d:01:d3:0d:6b:a8:2b:f2:df:c3:
         5c:0b:1d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----