Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a4d174ef-e870-39c8-9fd0-86313be6068a.roa
File:                     a4d174ef-e870-39c8-9fd0-86313be6068a.roa (raw, json)
Hash identifier:          UMlJ51nGrHT1HUDH9TCM4pNgkGZzoFvsnTWHP1CBCgM=
Subject key identifier:   BF:4D:55:58:C4:A9:76:BD:AC:B1:22:AC:0C:EF:36:D0:5B:88:8C:24
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1415E409FC46014183980
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a4d174ef-e870-39c8-9fd0-86313be6068a.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     11427
IP address blocks:        66.25.0.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:41:5e:40:9f:c4:60:14:18:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=a0506f60-eff6-4e32-82db-55691c380b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:38:b8:e5:ea:85:21:58:a3:e6:23:91:5d:13:
                    7b:7f:eb:78:2c:da:52:fc:6d:1e:64:03:ee:5f:8d:
                    22:e6:82:7d:29:27:03:2c:bb:2a:e8:64:7b:b3:40:
                    0c:a4:c3:7a:c0:fa:cd:0f:1f:80:ad:cb:97:5a:f4:
                    43:11:92:e8:0e:aa:1f:0e:9b:0a:e1:0e:bf:34:b0:
                    13:6d:93:06:5f:80:a4:ca:bf:df:fb:4d:10:cf:ab:
                    b0:a7:42:52:62:25:40:68:a2:01:70:6b:a9:a0:2a:
                    61:d1:5c:0a:e6:36:8e:7f:43:5c:78:c2:e3:c7:28:
                    8e:b3:22:6a:4d:3e:bd:c6:be:0e:1d:63:75:17:44:
                    12:d6:d3:d4:3c:9b:34:dc:da:c5:3c:05:b8:3e:b8:
                    72:57:13:13:7a:ba:91:1e:e1:01:83:0a:0b:49:72:
                    9e:9a:f4:22:b8:04:36:21:91:9e:dd:3f:da:68:12:
                    84:93:04:1c:28:ab:21:ed:31:64:4c:bd:91:80:0b:
                    0a:3b:2c:c0:e4:65:fa:20:ca:c3:86:d2:49:ca:87:
                    ab:48:fc:df:e8:dc:cd:9e:80:9a:ad:ff:06:ad:59:
                    9d:93:c3:01:f4:17:52:b1:95:31:d3:39:26:b4:82:
                    ef:ac:c4:f8:00:75:f5:8a:9a:3e:15:c2:30:02:a3:
                    b8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4D:55:58:C4:A9:76:BD:AC:B1:22:AC:0C:EF:36:D0:5B:88:8C:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a4d174ef-e870-39c8-9fd0-86313be6068a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.25.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:92:86:1b:43:7e:ae:52:0d:fa:9b:fe:bc:76:f3:5d:3c:9a:
         02:b9:6b:0f:7f:a6:cb:29:ac:7e:3c:bc:93:63:f4:e6:18:cb:
         ed:be:c7:be:ac:ee:71:03:37:d9:b3:d3:a9:26:cf:2a:1d:9d:
         42:77:30:3e:08:e6:4f:55:50:fc:67:49:9b:91:5e:dd:e0:e6:
         83:be:57:3b:28:56:ca:c3:ec:4f:43:57:02:7d:e3:c3:15:f8:
         93:3c:77:da:aa:38:a3:e0:62:31:d0:97:b4:63:e5:07:fe:b2:
         ba:be:c3:53:b7:69:a3:4f:2d:d9:38:21:41:2a:e5:7e:21:8e:
         ac:53:ef:e0:41:be:da:e0:4b:36:de:7f:ab:70:e0:cf:a6:ed:
         40:0e:11:aa:ff:c9:13:93:c7:83:b9:fa:81:77:1b:37:de:ba:
         79:d8:df:ca:95:1a:a1:f4:95:45:1c:c4:b7:b2:3e:ad:0b:29:
         c1:0f:4c:a6:3f:20:32:24:56:21:be:9c:ca:13:ed:fb:e4:53:
         ae:7d:a0:be:bb:d4:f3:0b:c6:07:6f:85:e0:c8:83:b4:f0:d0:
         ad:91:ce:14:95:99:4f:6a:27:4b:74:d0:c3:8d:f6:c7:11:3b:
         d1:ac:f7:7e:1c:52:33:33:19:1c:fe:3a:6c:d6:1e:16:60:00:
         ab:c8:02:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0UFeQJ/EYBQYOYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
YTA1MDZmNjAtZWZmNi00ZTMyLTgyZGItNTU2OTFjMzgwYjlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDi45eqFIVij5iORXRN7f+t4LNpS/G0eZAPu
X40i5oJ9KScDLLsq6GR7s0AMpMN6wPrNDx+ArcuXWvRDEZLoDqofDpsK4Q6/NLAT
bZMGX4Ckyr/f+00Qz6uwp0JSYiVAaKIBcGupoCph0VwK5jaOf0NceMLjxyiOsyJq
TT69xr4OHWN1F0QS1tPUPJs03NrFPAW4PrhyVxMTerqRHuEBgwoLSXKemvQiuAQ2
IZGe3T/aaBKEkwQcKKsh7TFkTL2RgAsKOyzA5GX6IMrDhtJJyoerSPzf6NzNnoCa
rf8GrVmdk8MB9BdSsZUx0zkmtILvrMT4AHX1ipo+FcIwAqO4DwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL9NVVjEqXa9rLEirAzvNtBbiIwkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYTRkMTc0ZWYtZTg3MC0z
OWM4LTlmZDAtODYzMTNiZTYwNjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQhkAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEmShhtDfq5SDfqb/rx28108mgK5aw9/pssprH48vJNj9OYYy+2+x76s
7nEDN9mz06kmzyodnUJ3MD4I5k9VUPxnSZuRXt3g5oO+VzsoVsrD7E9DVwJ948MV
+JM8d9qqOKPgYjHQl7Rj5Qf+srq+w1O3aaNPLdk4IUEq5X4hjqxT7+BBvtrgSzbe
f6tw4M+m7UAOEar/yROTx4O5+oF3GzfeunnY38qVGqH0lUUcxLeyPq0LKcEPTKY/
IDIkViG+nMoT7fvkU659oL671PMLxgdvheDIg7Tw0K2RzhSVmU9qJ0t00MON9scR
O9Gs934cUjMzGRz+OmzWHhZgAKvIAvs=
-----END CERTIFICATE-----