Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aa55acaa-797e-37a6-8a74-a9775a85ba9b.roa
File:                     aa55acaa-797e-37a6-8a74-a9775a85ba9b.roa (raw, json)
Hash identifier:          J3MfppPToy3kGXRgJmO+A+jQBd4ZhDZy34U/h4ZRNt0=
Subject key identifier:   6F:58:17:D4:22:8F:2A:F8:15:4B:EF:FA:5D:52:F8:93:12:D4:1B:7E
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D156D581D1E24F945F3940
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aa55acaa-797e-37a6-8a74-a9775a85ba9b.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        24.95.224.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:56:d5:81:d1:e2:4f:94:5f:39:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=beda3967-f1f4-4b7c-831f-37ffe7012ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9a:86:4a:99:55:75:64:78:e5:05:bd:ac:f6:
                    be:3f:be:2a:94:e0:df:cd:f4:77:ae:e7:4e:37:72:
                    f6:a5:3b:f7:07:67:e4:0a:28:9f:ff:87:05:f4:ed:
                    1e:6f:57:e9:2e:a0:81:ff:39:b7:42:a7:8b:9b:1e:
                    e0:cc:23:29:25:d5:60:99:39:5b:14:72:1b:44:6f:
                    fe:3c:dc:9d:f3:c1:93:16:a7:df:3a:7f:ca:e5:63:
                    48:24:ca:4c:ed:5c:f1:b9:36:4d:27:61:78:45:83:
                    03:20:6c:7d:34:9b:c0:e8:31:fb:62:ca:ee:e0:48:
                    15:dd:bf:ff:01:48:1e:0f:27:e5:73:ae:0a:38:db:
                    7c:58:88:04:98:c5:ee:c7:7f:3d:30:e8:89:49:5c:
                    20:5b:79:da:0c:a4:3b:cb:e8:f2:46:e7:67:ff:53:
                    d1:21:32:b3:8f:4e:d8:f5:ce:4d:03:97:71:8c:e8:
                    6e:76:b3:18:22:2e:7e:0f:01:80:cc:44:ca:b2:7a:
                    d7:44:1e:58:0d:b3:5b:42:08:5b:9c:23:8e:cd:bd:
                    cc:bc:17:52:a8:16:bd:fa:28:15:bc:96:fb:b9:ff:
                    91:b1:9b:2f:7e:ab:5e:8d:2f:aa:8c:fc:43:13:ca:
                    69:41:3a:96:5f:96:0a:90:d7:57:de:72:bd:64:c0:
                    d4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:58:17:D4:22:8F:2A:F8:15:4B:EF:FA:5D:52:F8:93:12:D4:1B:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aa55acaa-797e-37a6-8a74-a9775a85ba9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.95.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:d3:78:6b:fe:3d:b5:6e:e7:62:d9:df:5d:a1:4c:e2:6a:57:
         57:24:7f:3c:50:ed:c1:28:2d:fd:a4:79:89:07:e5:9e:9b:21:
         32:b7:0b:f8:b5:0a:9c:30:db:35:11:52:2c:64:49:3f:80:a3:
         e5:b4:3c:85:8b:78:ae:96:7c:4c:aa:a7:2c:49:5f:2c:3e:9d:
         8a:5b:6e:1a:75:0f:f1:86:c3:e5:de:d6:51:ea:51:fe:93:8d:
         11:e4:9a:7d:ba:ce:f7:ae:83:de:d8:83:10:90:8b:ad:ce:49:
         ad:12:23:23:fb:f1:29:29:b6:5a:96:5d:cd:14:88:2c:bd:49:
         cf:71:be:2f:55:b3:7c:ff:dd:2f:e7:d7:0f:a5:2b:e4:9e:17:
         58:ca:ee:7e:40:11:25:ab:ed:1c:5d:d1:8d:83:36:ec:20:18:
         23:59:9d:f1:0d:70:43:08:4c:bb:af:8c:5b:04:0b:64:86:3d:
         48:12:c8:f0:1e:43:79:f9:fa:92:bc:ec:4b:74:f1:04:b3:cb:
         c3:06:f0:05:90:73:aa:5a:62:bb:ee:ee:31:0b:36:03:ba:ab:
         4a:18:f7:bc:50:08:0b:a6:f3:cd:6c:a2:2a:0b:96:54:29:22:
         e0:40:8e:8d:e4:1d:e1:63:69:dd:e9:b2:62:68:33:83:40:c5:
         02:ce:e2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----