Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fa8a26f6-2b91-3e1b-8f2e-0ca55b7444fc.roa
File:                     fa8a26f6-2b91-3e1b-8f2e-0ca55b7444fc.roa (raw, json)
Hash identifier:          zkxjxHBYaTBNX5lderlwTcswpw738pw1muJSKTd3EAA=
Subject key identifier:   18:E9:72:C2:1A:9E:5B:37:61:73:AD:C8:30:75:E7:C2:BB:E3:C9:7B
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1C5AA8FFF61D8F7725D80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fa8a26f6-2b91-3e1b-8f2e-0ca55b7444fc.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     11427
IP address blocks:        70.119.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:c5:aa:8f:ff:61:d8:f7:72:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=e47b20ad-a37e-4de9-94bf-3e61722a5f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b0:7d:33:65:94:b7:c4:1a:53:ac:98:7d:74:
                    f4:7a:f7:f6:5d:82:15:83:62:c2:a1:09:ca:29:9e:
                    f1:fa:f0:cb:2a:6a:4a:bd:49:a8:8e:78:1f:5b:ba:
                    53:bc:fc:d6:f0:bb:67:db:6c:cb:95:13:26:4c:e1:
                    e3:81:22:25:14:8e:58:df:26:cb:85:09:cd:86:60:
                    c2:2e:fd:da:58:ef:16:b5:fd:49:45:24:1b:c9:3e:
                    fe:5c:00:76:d5:25:ce:c2:32:99:75:f0:77:16:fc:
                    45:c7:bc:b8:41:f6:17:54:ce:3d:f4:eb:eb:f9:22:
                    d0:22:86:91:cf:e6:4a:e9:57:cb:47:f9:48:8c:7b:
                    30:3b:a6:3a:af:38:2d:df:1d:d3:d1:49:a9:b3:d4:
                    01:84:32:a3:9a:aa:4f:64:17:99:ba:31:85:8b:60:
                    6d:d8:7f:f0:49:c5:c5:ab:ae:bd:f6:ae:f7:9b:8b:
                    d5:29:a4:59:d9:2f:eb:3f:93:be:56:31:a4:9d:52:
                    9e:fa:f9:d3:d1:15:af:40:14:20:46:7c:9e:cf:f7:
                    07:b2:75:9a:a4:f3:89:41:8f:4e:c6:0d:79:39:35:
                    75:dd:11:a6:b3:d1:f1:86:d0:e1:ad:57:83:10:7e:
                    a7:e5:29:0c:0d:ce:88:f1:fa:af:e8:b2:2c:3d:2b:
                    45:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E9:72:C2:1A:9E:5B:37:61:73:AD:C8:30:75:E7:C2:BB:E3:C9:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fa8a26f6-2b91-3e1b-8f2e-0ca55b7444fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.119.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:35:50:65:02:61:7b:65:02:84:3c:92:cb:c2:ea:55:5b:99:
         67:a1:c5:f7:bc:f9:7d:84:69:4a:92:bc:ec:90:bc:9d:39:78:
         b8:a7:b8:77:31:b5:1e:ed:56:9a:32:51:d5:c7:08:0d:81:db:
         3f:21:55:a4:90:ad:93:20:e4:d6:ef:ba:d6:e7:aa:06:28:d5:
         f8:fd:6f:51:72:45:36:58:ee:23:46:9f:51:10:86:b1:b4:ec:
         48:8b:2c:32:be:2d:9a:6f:d5:4f:f7:9e:7f:e5:66:ac:57:2e:
         48:5e:e2:66:ad:48:7e:b4:27:85:df:86:1a:a2:b5:9f:ec:32:
         ad:00:16:e6:e2:e1:95:6f:a3:bb:ad:0f:d9:7b:08:3f:29:d0:
         dc:39:75:99:6b:28:a3:25:39:ba:2a:c9:ce:4e:d0:da:ea:37:
         20:c0:c4:19:ca:8d:83:08:be:f0:37:61:27:38:41:55:88:a6:
         42:9e:ee:ac:a2:f4:6a:e3:b4:8f:60:e8:e8:f2:6a:71:66:5f:
         5f:fc:5a:0d:9a:a5:dc:91:bc:23:57:64:de:f7:dc:a3:9a:9a:
         06:37:c9:e5:5c:27:0d:0d:28:b4:a0:32:d0:c2:f5:d1:0e:81:
         ce:54:f9:72:c3:50:3e:58:aa:06:e0:11:dc:de:96:5e:36:04:
         b9:ea:fe:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----