Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b401987b-dcb2-3ff2-aed9-b774518489e6.roa
File:                     b401987b-dcb2-3ff2-aed9-b774518489e6.roa (raw, json)
Hash identifier:          gPOQO84djKYNRVTbgfF36KpeT+5KAmtuIQ5jXWxzgpg=
Subject key identifier:   57:7A:1F:01:CB:92:CA:5F:29:E0:F1:34:19:F5:CE:76:71:07:3A:CA
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D12CDA5B7183D0558C6D00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b401987b-dcb2-3ff2-aed9-b774518489e6.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     10796
IP address blocks:        24.123.126.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:2c:da:5b:71:83:d0:55:8c:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=a467fc12-38f8-48e3-a0b6-94fad8e8b6a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0d:f7:5e:ea:ab:ba:a8:33:e9:95:c3:49:2b:
                    6f:ce:c1:fc:6b:8c:e4:f4:23:dc:ff:a9:8c:2a:b2:
                    ab:72:0d:46:97:00:4c:d9:ed:76:b3:c3:ed:50:b8:
                    1d:ce:05:51:50:72:41:a0:97:17:b4:41:44:bb:48:
                    14:42:2e:de:b5:c9:ed:d4:10:9d:cc:33:dc:9b:7f:
                    c7:8f:a3:1e:c2:b5:0b:b3:af:42:0e:82:a6:44:b9:
                    05:e5:59:ec:93:c8:dc:e7:5a:a0:81:37:6a:4f:83:
                    3b:e6:5b:22:93:8f:c0:4d:ea:b1:eb:50:fa:f2:bd:
                    2a:4d:b3:94:be:21:35:35:e6:6d:6a:34:c9:fa:1c:
                    1d:2b:0e:a1:e1:ad:d8:e2:f5:82:14:0d:06:0b:e9:
                    e1:ce:b7:68:e1:bf:ef:a6:4f:97:1a:0e:50:0f:39:
                    ee:33:8e:9e:aa:51:2b:49:2e:06:5a:c1:b2:02:25:
                    0f:67:5a:96:c7:ee:20:07:b6:8c:4a:f6:02:05:ae:
                    0d:54:34:c9:1e:57:a1:6b:b8:14:68:fa:4c:8a:63:
                    1f:98:6d:c8:05:23:8e:e0:18:5c:1c:83:b6:b5:bc:
                    24:77:eb:bf:f4:b5:9c:99:60:68:72:4d:f1:6f:76:
                    65:88:7a:61:71:57:e8:33:1d:e0:26:20:40:0d:38:
                    e8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7A:1F:01:CB:92:CA:5F:29:E0:F1:34:19:F5:CE:76:71:07:3A:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b401987b-dcb2-3ff2-aed9-b774518489e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.123.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:13:79:12:52:4e:a1:60:df:cc:f3:0f:90:54:bd:8d:36:e8:
         1c:f3:dd:0a:b8:c9:6b:32:1f:73:eb:d7:a2:c2:69:a2:6e:59:
         02:c8:57:c5:f6:0b:f4:b3:1b:15:43:51:34:4b:da:c1:7b:b7:
         45:a4:13:71:42:07:2e:1c:04:39:7b:fb:13:36:19:4c:a5:24:
         c4:21:50:fc:86:f0:e1:40:9a:ef:40:19:9e:14:20:6c:cd:b7:
         5a:b4:5a:a7:33:4b:91:2a:cf:38:56:1d:01:14:64:b3:ad:f5:
         e8:b6:1a:f6:dc:30:44:4a:3a:25:a0:17:5e:49:fb:06:4a:9a:
         c7:60:1f:af:52:00:c6:55:44:18:90:6a:65:e6:fa:d7:51:3a:
         9f:a7:63:c6:ea:3b:4a:2f:4c:dc:64:89:44:cd:dc:9a:f4:fd:
         1e:45:36:98:ed:e9:87:b0:fc:12:15:0c:f9:77:fd:5a:64:75:
         f3:9b:a6:ed:8a:02:6c:95:ae:93:f7:7d:9e:08:76:e7:96:3c:
         90:b4:45:15:a2:6a:4c:4a:d7:14:8b:74:75:16:19:3c:d2:7d:
         ad:0d:03:c6:6c:8d:41:ab:f3:f2:39:63:e9:7c:23:cb:23:b0:
         ce:55:a7:a7:3e:2e:c9:c8:fa:dd:72:9c:b0:2b:03:cd:f5:e3:
         69:e2:e6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----