Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f42216e8-83be-390e-947c-fb509b0bc090.roa
File:                     f42216e8-83be-390e-947c-fb509b0bc090.roa (raw, json)
Hash identifier:          oAASPVCMpZqEo/t3FyNxdp79+na0EOgA6s0AjkL/zHI=
Subject key identifier:   BB:3B:C7:EA:D9:73:1A:0B:A0:35:9E:04:06:CB:A8:33:8A:C2:B4:87
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584953C41376DFE2668247DBEEC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f42216e8-83be-390e-947c-fb509b0bc090.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     16787
IP address blocks:        107.14.98.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:13:76:df:e2:66:82:47:db:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=7a26aaf3-478d-4bb4-bbbb-e05221835f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c6:f2:0c:5d:09:9a:34:89:3f:20:5d:0b:7e:
                    f4:2d:c0:14:8a:9b:96:23:02:25:5c:99:2e:2e:2e:
                    ec:e6:44:6e:6e:18:97:b4:e8:3c:2f:6c:e9:2c:1f:
                    88:be:bd:39:81:92:cc:56:46:76:29:e0:6c:59:bd:
                    6d:0c:81:c2:25:48:68:b9:f7:44:0b:5d:bd:0b:63:
                    91:9a:14:17:00:7c:0a:cc:92:e1:78:62:fa:d2:27:
                    2d:d2:55:4d:0d:f1:99:1a:bc:d7:87:80:9e:e6:13:
                    52:71:e0:03:23:bb:a9:e5:5e:7a:70:2b:ad:c0:49:
                    86:b7:d3:f3:bb:0d:99:a7:f6:cb:2c:fd:b5:0e:7e:
                    40:68:54:8d:7f:2c:41:f7:ba:36:8a:48:fb:75:a0:
                    c0:28:f1:c8:53:a3:c9:6e:29:19:4c:9d:3d:dd:c0:
                    5a:96:75:60:43:4d:fd:c2:70:bf:39:f1:7c:38:85:
                    08:f2:7f:48:cf:7b:f3:e5:74:d0:a1:d5:4c:f6:27:
                    1c:09:c0:d6:76:33:e3:f2:a7:08:b1:f0:cb:64:47:
                    e9:36:41:91:85:53:8c:41:10:ad:7a:d5:fa:1a:97:
                    be:eb:71:05:77:51:a9:2d:3c:db:d5:5f:d6:f4:4f:
                    14:5a:ab:16:be:04:97:b1:e8:f1:4f:6c:f3:a6:ec:
                    f9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:3B:C7:EA:D9:73:1A:0B:A0:35:9E:04:06:CB:A8:33:8A:C2:B4:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f42216e8-83be-390e-947c-fb509b0bc090.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.14.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:45:8b:8f:d8:06:fd:52:c8:e0:8c:6b:93:0e:04:f0:99:d1:
         4d:d8:f4:37:7e:54:3f:28:d4:2d:8e:a1:ec:78:89:8d:2a:b5:
         a5:e2:f0:d3:61:5d:78:3b:70:6c:f0:e5:ed:05:67:95:a3:a2:
         12:52:5b:48:e5:da:82:28:c9:5a:f6:2d:82:64:36:a8:12:4d:
         41:bb:c6:d9:43:e1:ef:8a:20:89:8c:a2:ef:f8:2c:c9:18:75:
         7c:19:d3:cc:a8:ad:eb:73:39:6c:d6:3d:b7:fa:26:08:51:24:
         14:0a:03:5c:49:ce:1f:ac:ff:5e:9b:30:3a:8b:d5:fb:fb:6b:
         b2:f0:e1:46:19:0a:1a:f7:34:aa:e2:af:39:e7:1d:07:f9:9e:
         78:ad:4d:35:13:a9:de:28:90:91:b0:fb:f5:0d:5f:dd:b9:e5:
         3d:b9:bf:24:b2:32:80:4c:db:b3:c2:25:60:21:bf:3a:2a:d3:
         50:c3:90:b2:31:27:37:2a:ab:01:12:0b:0c:f6:71:e1:25:82:
         5e:ea:ea:98:9a:b2:c5:2e:ed:e2:ee:a9:2a:d0:34:1a:6a:da:
         cd:35:98:33:eb:ac:d7:35:bd:22:79:28:23:66:99:74:c3:fc:
         58:5f:88:4a:12:70:51:c0:cc:e1:a8:d0:0a:40:96:0c:66:10:
         6f:86:cb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----