Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/003eaa96-301c-372c-a5a5-8afb06d3539d.roa
File:                     003eaa96-301c-372c-a5a5-8afb06d3539d.roa (raw, json)
Hash identifier:          OZrxYmSETJW5tpvcQllWtDaXpb8gcm+pE5tSLEjCBf8=
Subject key identifier:   55:1F:3C:64:E1:C6:BA:87:71:18:07:D7:D3:F0:D7:93:44:90:A0:21
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037AFB825E62B9EC49A7EA80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/003eaa96-301c-372c-a5a5-8afb06d3539d.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     11426
IP address blocks:        76.92.96.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:fb:82:5e:62:b9:ec:49:a7:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=8a86602c-5bed-4fbf-9c80-c33f7a480215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:68:aa:b2:96:b6:01:91:eb:c8:77:e0:5a:63:
                    0f:10:3e:37:13:96:8b:26:ef:87:e3:75:fb:60:aa:
                    67:8d:8f:b9:28:8b:39:8c:d6:ed:07:50:96:d9:d6:
                    5c:eb:4c:9e:ab:33:32:19:47:ea:73:26:db:bd:74:
                    31:fb:38:1a:0e:d8:d3:ce:dd:14:c4:92:69:55:7a:
                    88:63:64:44:81:f5:69:19:16:f7:d9:0f:6e:23:99:
                    2f:2a:4d:b2:a0:29:4d:9c:8a:f1:71:03:ae:f4:69:
                    c9:52:a8:7b:4e:bd:d4:89:09:89:b8:bc:64:e4:41:
                    13:0a:07:64:36:55:ae:85:2a:17:f1:bf:e7:1f:42:
                    e7:4d:b5:cc:2e:37:63:7b:2e:75:e6:a2:cd:2b:2b:
                    74:fb:14:01:ab:e3:fd:a0:ee:cd:fc:39:c1:f0:1e:
                    e4:80:7c:4f:7d:23:71:a8:b4:6e:d4:9b:06:80:ef:
                    8d:de:fd:29:5e:2f:ee:8b:ec:c0:15:d1:e8:6f:06:
                    91:f2:10:26:bc:15:08:2f:e7:c1:05:30:c0:3d:96:
                    cf:3b:24:45:32:4c:41:aa:61:60:bd:69:4d:db:ca:
                    ac:e4:c3:41:cf:73:93:35:62:6c:29:7b:cf:b7:2c:
                    2f:99:03:84:5a:1a:fa:7d:9a:56:ed:12:f9:72:1d:
                    c7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1F:3C:64:E1:C6:BA:87:71:18:07:D7:D3:F0:D7:93:44:90:A0:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/003eaa96-301c-372c-a5a5-8afb06d3539d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.92.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:7a:3f:5b:b0:77:9c:ca:0c:3f:b5:29:d0:20:95:30:d2:31:
         20:cf:bb:48:00:c2:82:f1:5d:21:85:a6:e1:10:51:55:05:82:
         eb:c7:ae:4a:b9:e4:fb:1b:6e:11:eb:63:1d:8b:8e:0e:ea:ea:
         6c:e8:73:46:80:e4:ce:a4:61:e5:dc:d6:3e:ad:ee:29:a0:48:
         eb:55:3e:2d:d8:2c:22:ec:08:d2:ed:64:6d:a8:1f:38:42:a6:
         31:5f:73:4b:a4:87:89:e5:88:fe:49:d6:e8:62:34:3b:79:99:
         48:0c:5e:42:40:8c:bc:27:77:26:74:c0:de:d6:da:2d:2a:a7:
         f8:7f:ff:15:e6:d7:47:c5:1b:af:18:72:05:e5:ef:26:96:19:
         b9:4c:69:d7:38:de:e4:0a:6c:c5:18:37:b5:76:48:52:99:7c:
         7c:40:de:4f:93:31:7e:87:e5:60:95:00:eb:1d:e1:94:8b:5c:
         cd:d5:b7:b2:a0:0a:47:72:e3:a1:5f:35:f8:2b:38:30:ba:68:
         ee:ea:01:1b:e8:4d:74:ff:ad:97:ed:63:f2:b1:63:95:2c:17:
         ef:40:b6:3b:3d:ed:cb:e6:4f:c0:6b:59:a2:78:8d:dd:6a:9a:
         05:27:25:ea:99:4f:e6:6f:ec:bc:20:c4:af:64:4a:79:10:64:
         6d:ce:6d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----