Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ed3eccf7-7275-3d96-b8cd-a4f416492a64.roa
File:                     ed3eccf7-7275-3d96-b8cd-a4f416492a64.roa (raw, json)
Hash identifier:          /cRItFRj1dKZYD29TtLaDaDjo8kHuBY5Ho4kgmlfJyQ=
Subject key identifier:   35:5E:49:73:78:F9:E9:5F:F4:21:FE:7E:EA:CF:4D:01:1B:F4:3A:10
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848F92691A542BBD51516DE9400
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ed3eccf7-7275-3d96-b8cd-a4f416492a64.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     11426
IP address blocks:        174.106.0.0/15 maxlen: 15

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:91:a5:42:bb:d5:15:16:de:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=3c73d25d-55e0-46cf-b262-d2aeeda4d7cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:71:c0:e7:a2:21:b8:d6:19:e8:b6:86:1f:a4:
                    5c:90:43:b5:49:a6:69:21:dd:49:0d:17:bd:83:9d:
                    68:f7:d6:0a:97:a6:ae:5e:a0:5c:66:0d:5c:13:2d:
                    52:9b:a4:da:e8:d0:e7:01:66:6d:30:dc:b8:3e:26:
                    b5:90:43:ba:83:b8:05:67:24:72:23:fb:1a:c8:58:
                    c4:f5:62:fb:22:da:46:6b:e7:63:bb:3d:c7:48:42:
                    c5:4a:f0:e3:27:87:d5:90:fa:67:f9:f3:34:d4:09:
                    a6:ea:df:c9:04:ed:ae:b8:e1:fa:c8:d6:7d:c2:47:
                    31:2d:11:61:e0:c2:20:59:09:9d:df:7c:b2:d5:ea:
                    98:83:8e:9b:10:fe:74:52:2a:d1:04:81:c4:0e:c8:
                    94:3a:9a:4c:9b:bf:40:58:5c:29:ab:40:25:58:52:
                    f6:7d:97:1c:64:bf:c5:08:24:75:de:69:86:23:e6:
                    b9:96:72:27:4e:11:6c:3c:89:29:4c:70:93:cc:e4:
                    db:2b:1b:15:28:67:f0:c2:37:8f:82:5e:18:4d:ba:
                    54:06:df:e0:f8:7e:1b:3d:57:07:bb:74:3a:54:3d:
                    bb:b6:ac:0e:56:68:19:b7:53:bf:09:18:65:40:c2:
                    27:7f:3c:0a:75:bf:68:6e:07:02:e2:2f:cf:13:c0:
                    96:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5E:49:73:78:F9:E9:5F:F4:21:FE:7E:EA:CF:4D:01:1B:F4:3A:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ed3eccf7-7275-3d96-b8cd-a4f416492a64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.106.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:ee:4f:6d:29:81:8e:95:04:e1:fa:bc:1d:0f:f5:b8:d5:26:
         18:42:55:be:c8:32:94:77:98:8b:8a:95:bb:e4:28:c3:14:65:
         38:25:5c:d0:33:43:e1:2a:b2:dc:3f:d9:0f:d5:8c:5a:35:3f:
         a0:c7:6b:d8:e9:cb:f4:c0:19:06:31:6b:36:1a:a7:23:d2:6c:
         29:2d:24:54:9d:52:bf:38:fe:49:2b:a9:7b:e7:09:d4:0f:00:
         55:b2:d4:b3:b7:da:a8:63:a2:be:4b:d6:57:cc:23:f2:03:7a:
         d6:cf:56:c2:8f:49:67:c4:b0:46:7c:ae:3e:f2:02:e0:ec:0d:
         58:46:db:92:8f:48:50:73:c2:da:f5:ef:13:4d:7a:dc:49:ee:
         d9:14:46:72:9b:7f:92:8c:ab:41:e8:b0:5c:17:85:37:75:c0:
         5f:df:49:62:48:1b:e9:77:01:0b:5f:b9:f7:12:49:7a:1e:02:
         f7:5d:a5:e8:5e:7f:bf:73:0d:d6:ac:3a:66:dc:e5:fa:29:62:
         4c:5d:c6:5f:d8:1c:92:95:be:34:d4:7b:3a:d2:ee:0d:9d:14:
         07:82:6e:88:10:a4:49:2b:36:84:ba:6e:68:bd:d3:bb:07:08:
         ab:9c:59:07:0a:3c:02:10:2d:29:ea:e0:2d:0b:b3:0c:e0:81:
         10:46:90:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----