Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ff718470-67e1-3433-b645-d40a431dbea0.roa
File:                     ff718470-67e1-3433-b645-d40a431dbea0.roa (raw, json)
Hash identifier:          BxI54jXcJ9WNIgG4iw3XOrasDX+DOhOKAwJ5N36yvSI=
Subject key identifier:   18:33:4C:63:30:61:05:E3:24:F2:BE:CC:F6:A4:42:1C:3C:95:34:61
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1AF3C9E1D8C64FBBC4B80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ff718470-67e1-3433-b645-d40a431dbea0.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     10796
IP address blocks:        24.166.0.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:af:3c:9e:1d:8c:64:fb:bc:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=89ae929c-6b25-4474-82a9-f2630c209d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b6:2b:5c:cc:f4:92:7e:f4:ea:bb:bb:b4:e4:
                    4e:ea:9a:c0:41:5c:90:ba:9e:e7:aa:70:93:26:dd:
                    ae:79:0c:70:73:77:b9:c4:09:f0:44:0e:0e:46:11:
                    43:ad:92:ec:5c:d1:41:f0:bf:ba:dd:51:6a:52:0c:
                    a7:35:ac:8d:64:fa:1f:de:47:c3:aa:2e:e5:11:05:
                    80:44:1e:85:6c:b9:04:b7:e4:89:36:03:2e:11:50:
                    b9:47:57:4e:0a:74:62:39:2a:f0:0b:62:11:9e:f2:
                    4d:b7:d2:d7:8d:dd:5b:68:71:fb:12:39:5f:40:c7:
                    3b:e7:be:bd:34:ef:d0:88:f1:ec:45:0b:8c:b8:e3:
                    3d:55:42:52:c5:87:b5:4e:62:27:5e:bc:6f:28:67:
                    2c:4e:c2:13:d6:bb:02:5a:f1:20:e6:aa:13:c0:72:
                    10:65:09:b0:19:c2:de:fb:1e:20:fb:1d:cf:ed:ce:
                    53:a1:b9:81:10:2f:61:7f:8a:ab:df:aa:67:d6:33:
                    c9:56:08:f8:68:ed:6f:3d:72:ed:ec:dc:29:56:a0:
                    27:59:62:17:2c:e6:3a:36:72:03:04:6d:b4:25:a1:
                    e5:23:dc:81:c7:e0:b4:05:e0:08:de:79:55:40:1b:
                    2a:29:33:1e:c3:aa:af:9a:3a:87:5a:0e:ef:d5:fa:
                    a0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:33:4C:63:30:61:05:E3:24:F2:BE:CC:F6:A4:42:1C:3C:95:34:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ff718470-67e1-3433-b645-d40a431dbea0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.166.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:7a:04:48:bb:7b:a0:4b:70:01:69:26:d7:b9:62:16:59:e0:
         f4:af:01:ff:eb:98:51:02:81:64:07:ed:cf:5e:d0:3e:7f:ef:
         34:45:3d:26:0e:9d:4e:7c:ac:da:61:bc:ed:1c:1f:7e:d9:4a:
         e8:aa:04:3e:f8:24:96:f4:12:95:36:38:f7:e9:eb:b0:68:b4:
         73:77:7b:ee:41:ef:ac:c2:1e:c7:4e:d4:ed:59:ce:fd:e4:9d:
         ce:d7:25:0e:ab:93:c7:6b:95:1a:95:e0:68:07:ad:e3:12:9a:
         e1:60:9a:93:28:2d:02:e4:c1:e9:f7:be:88:bc:ee:cf:5c:a0:
         93:02:5f:24:6a:c1:f2:02:a6:d6:c4:12:83:ee:d3:2c:3c:c7:
         40:c0:97:ef:3d:9b:14:fa:21:54:69:32:da:67:0c:75:65:85:
         86:03:b5:7e:f8:5d:81:e0:63:9d:ba:30:f9:99:f2:d1:88:cb:
         3c:29:88:b0:fa:4b:dc:b0:e3:8c:49:6b:0c:9f:5c:d1:8a:d8:
         54:5a:da:c0:ff:7c:7d:0d:8a:2d:ef:af:ab:7c:e5:40:aa:88:
         b8:59:fd:4e:6b:e1:83:d0:fb:53:39:d1:9c:9b:6c:e2:09:04:
         c2:d5:8a:3e:5b:e6:9e:49:d3:d2:0f:74:c1:5e:5b:08:78:57:
         0b:76:40:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----