Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f2cad4a1-20fd-3adf-b202-c935377eec1a.roa
File:                     f2cad4a1-20fd-3adf-b202-c935377eec1a.roa (raw, json)
Hash identifier:          Uhm6nnmTcL+pl4JEpHep8XnGA2gyBS9hj4NpifXMkvE=
Subject key identifier:   27:EA:5C:36:22:1E:73:B5:E7:49:86:F6:3C:F3:60:C0:1F:32:67:45
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D12988541094B32678BEE0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f2cad4a1-20fd-3adf-b202-c935377eec1a.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     10796
IP address blocks:        98.29.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:29:88:54:10:94:b3:26:78:be:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=75bd9e28-a7e0-4d01-818e-439fce38d2d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ca:02:66:fa:d8:a2:61:d1:87:4d:b1:17:f2:
                    0b:f6:ed:be:98:f1:3d:bd:4b:18:4c:9e:48:b7:25:
                    c4:f3:d9:81:16:aa:d6:38:08:da:cd:3b:46:7b:43:
                    a5:16:6f:ff:9c:dc:ae:e1:44:d5:bc:4e:62:58:09:
                    94:b4:5e:c3:a5:fc:e6:e6:79:60:f0:26:5f:0a:aa:
                    92:6d:49:9a:06:6f:f1:e6:7d:f1:d1:95:de:74:3e:
                    1f:d2:70:8c:c7:28:5a:63:07:94:85:c0:0e:f4:a3:
                    9f:5d:05:68:9c:31:10:7a:fb:58:8a:63:ab:ec:d5:
                    25:60:e8:47:29:5a:d4:0f:7c:bb:24:d8:6d:86:6f:
                    62:db:77:f9:e3:81:14:bf:0e:2f:a9:51:f6:d5:9e:
                    55:e8:b7:1b:31:d3:2e:03:27:f9:b8:e7:b0:f5:6b:
                    f9:39:92:24:85:f4:59:4c:b3:0b:56:c0:7d:fb:eb:
                    b7:bb:82:46:0a:35:28:86:3f:a7:66:95:e4:e1:05:
                    92:91:23:05:1a:44:2c:df:90:69:45:f5:ea:2f:78:
                    71:40:01:fb:ac:f0:68:83:af:fa:11:b8:32:dd:fa:
                    22:53:b3:c9:f3:11:dc:36:f4:be:b5:2d:91:30:29:
                    95:01:57:15:c0:fe:3b:21:a3:4f:b4:1d:01:4c:46:
                    b8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EA:5C:36:22:1E:73:B5:E7:49:86:F6:3C:F3:60:C0:1F:32:67:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f2cad4a1-20fd-3adf-b202-c935377eec1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.29.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:9f:fe:4c:03:e1:c6:10:76:ee:f3:a1:22:e7:1d:48:5c:7d:
         ac:5d:c3:58:8c:43:11:d2:6c:0f:c2:9d:59:ac:56:91:23:e8:
         2c:76:f9:79:84:55:ba:a2:d8:81:08:7c:0f:ba:6b:b2:34:7d:
         f9:34:d8:35:9e:57:1c:a1:8c:87:b0:98:f5:93:9a:13:e4:f9:
         fe:04:a7:6c:1f:4d:20:b4:bb:35:e4:66:6a:bf:04:8e:9e:92:
         59:42:37:6b:67:60:48:62:7d:04:b0:a3:56:a6:5f:19:56:61:
         69:5e:15:d8:12:c5:7f:b1:78:27:71:f5:4e:71:26:2b:4a:5f:
         c4:82:7b:fd:26:19:77:38:74:4a:27:12:fa:43:13:a5:4f:0d:
         7f:ef:eb:53:1c:6e:09:78:cc:7a:a6:d5:1b:7d:b8:93:aa:e0:
         78:7e:ba:a0:90:f1:81:84:8a:bc:6d:07:91:39:f7:3d:73:d6:
         90:f8:ac:6f:f0:75:29:35:9f:6a:18:f7:6d:54:3e:df:b7:e6:
         28:41:b6:03:54:42:38:32:a6:5a:94:30:d2:88:7d:47:1e:55:
         5f:67:e6:13:29:13:5f:a9:1e:31:84:e1:0d:36:cd:89:cf:da:
         45:8e:56:47:e7:b8:1e:d6:49:5d:92:37:4b:49:04:8e:5e:0c:
         6f:92:1e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----