Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b434cb18-a989-3b44-9a64-7e6fe913a894.roa
File:                     b434cb18-a989-3b44-9a64-7e6fe913a894.roa (raw, json)
Hash identifier:          DqT3M25M2h43gFnNsme0VZ9RP1mMpcQ9wUf5BeJwzJM=
Subject key identifier:   61:40:49:B4:C6:9B:46:3A:F2:86:2D:D7:06:77:71:DE:E5:A7:AF:F2
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1BBCC5CC9337263768100
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b434cb18-a989-3b44-9a64-7e6fe913a894.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     10838
IP address blocks:        2606:6000:4000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:bb:cc:5c:c9:33:72:63:76:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=1a6f4481-bb72-4430-b0b5-b20dc66477d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:68:e9:6c:34:a5:c3:2a:6e:92:86:50:50:e2:
                    60:28:fd:68:15:93:63:e3:e6:91:1c:18:7b:ee:3d:
                    cf:18:eb:87:f2:62:68:e3:e5:b4:58:83:17:8b:ac:
                    ab:8b:aa:29:67:ac:d4:4a:4c:a1:30:97:49:22:da:
                    b7:40:35:e8:4e:f3:1f:01:32:6c:ad:bd:84:c9:b4:
                    2e:9d:74:fc:7a:e1:7b:19:61:9c:06:d4:73:7b:5c:
                    94:00:45:6d:1a:d2:90:65:72:0d:eb:4f:3f:37:c9:
                    03:c0:26:71:93:69:23:16:a5:fd:26:12:cb:dc:e4:
                    77:96:0c:c5:a3:44:f1:9f:5e:b6:bc:2a:32:11:f6:
                    08:71:ad:54:55:4e:b3:42:3f:63:91:49:d1:60:cb:
                    80:f2:8a:ba:d4:e5:f8:ae:f5:82:dc:39:9a:a1:1c:
                    9f:23:3a:53:48:4e:94:b2:b7:79:44:a5:94:29:1f:
                    e2:67:c0:78:bc:11:69:54:eb:27:17:15:2f:8a:25:
                    17:85:28:07:b9:0d:9b:f6:55:41:74:7d:e9:38:b1:
                    61:e3:d1:8a:62:72:ba:7b:65:a7:a5:50:a0:10:47:
                    8e:fe:37:94:eb:b5:90:e1:b2:c5:ea:ac:a1:9e:7e:
                    d7:33:b4:00:08:e9:12:95:7e:7b:06:c5:d1:e7:df:
                    94:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:40:49:B4:C6:9B:46:3A:F2:86:2D:D7:06:77:71:DE:E5:A7:AF:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b434cb18-a989-3b44-9a64-7e6fe913a894.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6000:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ca:ee:16:88:1b:58:5e:e8:53:f2:56:ad:37:4b:54:b2:a3:
         90:ea:0f:3c:18:a0:d6:f2:67:ed:c1:29:b6:c3:06:da:d8:5b:
         1a:02:cb:2d:a9:00:4f:9f:4b:65:49:66:82:33:10:34:11:19:
         8d:bf:ec:00:f9:d1:3e:cd:98:84:bf:e4:0e:47:21:60:b4:f7:
         5b:c4:6a:15:c7:d0:7e:6f:07:c9:c7:c0:ec:e4:d6:1f:10:da:
         83:14:0e:9a:53:02:33:b4:6c:c4:27:08:d8:28:ba:4f:7f:72:
         31:0e:bc:98:95:aa:46:ea:ad:a1:6d:b0:b5:83:c1:97:6c:d9:
         66:b5:46:dd:2b:7f:fa:11:1b:72:25:d0:39:0b:68:27:f0:70:
         54:49:9a:55:68:54:b9:eb:ac:8d:a2:3e:47:9b:b6:49:ac:92:
         64:23:6b:21:a8:ee:1c:d3:20:a4:ba:08:e7:e1:bb:f8:b7:7f:
         84:68:a2:ea:dc:d3:e8:ed:c5:dc:98:75:39:2c:f2:e9:58:30:
         3c:6c:6d:a7:0e:31:9e:b0:80:e3:3b:35:d3:bf:ce:57:37:cd:
         d3:8a:44:85:97:24:c9:8e:4c:7e:7d:53:0b:3e:2e:bf:fb:2d:
         b2:52:39:66:59:75:2c:36:ca:04:18:62:e6:91:44:ba:f6:88:
         f0:a4:64:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----