Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a260057c-cdbb-3cb9-9968-a1657c67860f.roa
File:                     a260057c-cdbb-3cb9-9968-a1657c67860f.roa (raw, json)
Hash identifier:          kEwRFemgfFeF1ZuC/TlWlANdlhsuD/Ot1+OlI6DgZw4=
Subject key identifier:   13:E2:CC:18:F2:B4:75:AD:C9:07:09:41:21:4E:5D:E2:DC:60:A9:4A
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D12F4FBC46137DAB32AA00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a260057c-cdbb-3cb9-9968-a1657c67860f.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     10796
IP address blocks:        66.61.0.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:2f:4f:bc:46:13:7d:ab:32:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=c9504918-4575-43ab-93e9-89d6c187fde9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4c:e8:7b:ad:60:d8:9a:74:17:43:6e:84:6b:
                    f2:5f:60:58:4a:47:ae:83:2e:d3:d3:dd:70:d9:0a:
                    f6:4a:eb:5f:ff:5b:55:dc:cc:33:82:ca:6e:b4:48:
                    d1:ba:8e:97:69:dd:56:8f:58:24:11:c7:2a:c6:6b:
                    90:74:bc:10:c6:e6:4b:b9:dd:67:1f:61:3e:3d:70:
                    97:28:e9:6b:f1:35:1c:54:db:03:2a:c1:e7:34:db:
                    10:4b:99:79:23:f9:e7:ca:28:6c:29:34:e3:2d:1c:
                    08:b0:c2:63:0f:bd:66:f8:31:6a:62:93:f5:f3:0d:
                    e1:d0:4b:23:14:50:b7:e6:29:55:ae:f6:f0:eb:8a:
                    8d:6d:00:f6:e8:73:b0:c4:e5:e1:22:68:b1:c1:a0:
                    b2:a4:f3:67:19:90:e4:61:b0:71:41:50:79:fb:a9:
                    da:20:5b:23:df:ab:80:1e:b1:25:79:a8:0d:0c:3a:
                    6a:be:8a:b4:3e:51:95:34:3d:07:c4:85:97:c0:33:
                    b6:42:ff:cf:d1:a7:ad:ca:93:f7:86:7a:9e:ad:b0:
                    1a:61:d7:02:71:1a:ab:0f:14:45:21:06:da:5c:ca:
                    43:56:02:82:47:cb:3d:2f:08:6b:f6:7f:ff:ba:46:
                    97:41:24:f3:9d:de:2d:a9:e5:86:c4:a7:9f:5b:af:
                    c7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E2:CC:18:F2:B4:75:AD:C9:07:09:41:21:4E:5D:E2:DC:60:A9:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a260057c-cdbb-3cb9-9968-a1657c67860f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.61.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:05:4f:98:31:4a:cc:89:50:66:a6:dc:e4:6d:c6:37:c2:04:
         87:55:c5:f1:3b:6f:c5:9d:36:6e:49:f0:e2:88:d3:cc:d2:83:
         9e:ea:a4:3d:df:dc:a0:52:9d:84:ad:b2:29:85:4c:0e:ad:84:
         5d:1a:bf:96:d0:ab:9a:67:63:92:eb:27:f2:fd:4b:db:01:1b:
         3a:ba:7c:2e:7b:93:71:84:62:fc:30:d0:9c:78:64:22:e2:f1:
         38:75:e4:f1:b2:12:48:29:9e:31:d0:7c:83:0f:48:fd:e2:03:
         25:0f:c2:e3:96:13:75:5d:cf:e6:8b:1f:dc:d9:16:e5:0c:20:
         cf:c9:c9:65:3d:6f:de:5d:04:ff:4f:a0:58:2d:7f:47:e4:b3:
         8b:fa:5a:fd:b5:d3:43:4d:b7:4e:90:52:b8:96:5e:6d:9f:34:
         c4:0a:53:fe:6c:b9:c0:3f:66:77:d0:e6:9d:e7:71:42:ce:62:
         0b:1e:9f:27:d6:a6:60:4b:25:75:3f:86:20:57:3a:f3:9a:e4:
         97:ca:45:bb:f6:02:b4:97:d1:1f:52:f2:68:70:ed:97:4a:f3:
         2a:ba:53:15:d9:c3:09:81:9c:26:fc:3e:23:a3:52:b2:95:e5:
         28:5f:55:ed:3a:98:99:c9:61:f6:31:f4:a4:54:b1:f0:58:83:
         67:6f:b2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----