Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1540f520-251a-3143-888e-a0cb10f3aa38.roa
File:                     1540f520-251a-3143-888e-a0cb10f3aa38.roa (raw, json)
Hash identifier:          iUlet4qUFGSJko0UmVUcue3lHa+W902RwDqHePQ8Vs0=
Subject key identifier:   18:C3:4A:B2:28:16:A9:E2:E3:9F:AD:CC:CF:F8:6C:83:87:0E:E7:EF
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037B01C9B4E9224A2632A100
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1540f520-251a-3143-888e-a0cb10f3aa38.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     11427
IP address blocks:        192.154.176.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:01:c9:b4:e9:22:4a:26:32:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=e97b3f35-c5dc-45cb-a160-c4197a3ce576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:20:73:8a:ef:c4:e4:fd:33:21:c5:12:1d:39:
                    20:49:99:40:89:cb:0d:95:27:74:d3:fb:38:c0:f2:
                    f7:83:e4:2a:13:c4:6b:e1:f6:ee:5b:b3:ba:7c:cb:
                    e7:97:3c:d7:a3:da:38:fa:f9:61:0b:da:2c:0e:12:
                    e2:b8:c3:79:09:3f:52:0f:fe:a5:12:c3:db:af:c5:
                    f0:e2:5d:56:af:1a:f9:8f:95:71:8a:4e:e8:75:8d:
                    11:41:e7:c4:df:7d:78:35:67:c3:c8:61:ad:cd:c5:
                    8a:f3:c7:67:ed:2c:74:70:26:79:53:cf:ae:26:21:
                    38:1a:20:a3:fc:69:7c:64:b7:b8:cc:5e:4d:8f:b8:
                    55:ec:75:8d:e0:86:de:60:8d:01:1f:78:e3:2c:ce:
                    ef:58:fa:63:46:71:0c:d9:65:f2:6f:83:e1:67:3b:
                    f2:fa:84:1f:41:b8:b6:5b:9e:af:17:b8:c0:98:2c:
                    fa:bf:ce:cb:38:9b:22:75:fb:de:d2:79:ae:79:7a:
                    6b:32:6b:1e:38:ec:ae:3c:31:27:7f:6c:c6:42:19:
                    ea:30:ae:c4:9d:6a:e3:99:dc:8c:81:6e:05:8b:97:
                    fd:48:1d:bf:93:0f:7d:d1:59:4e:8d:88:d9:92:eb:
                    1f:47:8e:51:e1:7d:0f:d9:e9:92:c5:9d:9a:ef:cc:
                    57:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C3:4A:B2:28:16:A9:E2:E3:9F:AD:CC:CF:F8:6C:83:87:0E:E7:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1540f520-251a-3143-888e-a0cb10f3aa38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:53:8c:73:b0:de:89:e9:e8:4d:2f:cd:f7:13:06:a8:21:39:
         b7:0d:dc:28:1c:4d:c3:98:0f:c1:28:d7:29:ab:20:ec:04:ad:
         02:ff:6b:1e:89:c3:7f:70:16:a1:96:d7:ea:18:4e:5a:2e:49:
         aa:1b:43:76:68:ff:9b:b7:bc:25:e7:3d:75:2c:b9:94:fc:39:
         9f:16:93:74:4b:a7:58:3e:cc:f0:41:b4:6f:1e:3f:c6:c4:cc:
         7f:d4:66:a3:29:c9:cb:d0:18:bc:82:97:ce:09:d8:00:59:67:
         dc:5a:02:50:12:c9:ff:6f:9b:c4:1b:c8:e2:4d:7b:22:44:79:
         5e:62:4a:5e:04:dd:f6:3b:b0:85:44:79:39:13:6c:81:f5:e5:
         63:20:df:ff:95:1a:26:6c:c3:23:19:ee:f6:b6:e3:c0:23:9d:
         bf:91:dd:fb:c9:dd:70:94:5f:a5:08:ad:3a:18:58:11:20:7e:
         30:2e:4b:ca:f2:49:d2:4e:0f:ed:5b:17:71:6d:87:73:df:ee:
         50:b6:67:09:ae:fd:fa:a3:43:6a:ee:c3:fa:e4:9a:a1:2f:62:
         3a:43:53:b2:62:59:04:6f:a3:8e:5c:27:c3:5b:cf:b6:6a:c1:
         f1:05:f3:a4:18:9e:82:62:8b:01:98:b4:9c:13:b9:78:83:7b:
         95:25:ad:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----