Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1982ae15-17be-35b9-aa73-4c1d0e9f888b.roa
File:                     1982ae15-17be-35b9-aa73-4c1d0e9f888b.roa (raw, json)
Hash identifier:          RqvfSYcMrdmIcHxU4MLtvoTZb3yIKUiPEEAmHeGuQi0=
Subject key identifier:   FD:46:40:D8:BE:5A:77:F1:29:4A:4C:AA:D8:A3:EF:C0:A5:3E:B8:4E
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037AF9573E10A20443692980
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1982ae15-17be-35b9-aa73-4c1d0e9f888b.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     11351
IP address blocks:        2600:6000:fcfd::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:f9:57:3e:10:a2:04:43:69:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=7c6fbdd8-0acf-43a0-ae5b-3b52e1423ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:75:9b:1c:be:58:ae:66:0c:d6:e5:71:7d:45:
                    23:08:f3:17:f1:bf:fb:4b:28:c0:f5:f9:8c:04:ff:
                    56:91:9d:0b:9d:6c:2e:a3:3d:80:b5:2a:df:88:44:
                    07:f7:9a:01:9a:00:f2:35:d7:8e:74:0e:38:e6:4c:
                    9b:4c:d2:ee:4f:e3:b0:26:28:64:ab:58:ea:e6:c0:
                    f2:8a:d6:ca:5a:3a:c8:87:12:27:97:e9:1e:ff:87:
                    e3:89:30:c6:75:98:20:1b:cd:f3:46:b1:8c:59:b6:
                    13:36:8d:cc:44:56:51:7a:a1:a1:de:23:f8:27:d2:
                    26:84:fa:f2:f8:bf:99:00:d2:0e:63:b1:23:70:02:
                    c1:cd:51:e0:22:c2:73:33:f5:de:f9:e9:a0:84:9e:
                    d4:f3:90:22:50:23:62:87:a4:15:63:83:cd:75:8b:
                    61:d7:57:67:eb:a2:cf:af:1f:a5:96:93:a9:af:3e:
                    a0:4c:7a:7e:43:ac:eb:15:8c:fb:c8:d8:0d:9b:c2:
                    36:68:7c:6b:ca:c7:4b:c3:b2:b3:2d:7f:1e:78:46:
                    f4:e9:ce:f4:97:2b:df:9a:bd:63:41:b0:e2:ac:92:
                    a8:fd:d0:0e:2a:b7:c3:af:75:13:d6:b4:dc:25:6a:
                    fe:cc:7f:31:6d:f6:9e:49:49:c0:fa:ad:84:f4:5a:
                    6c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:46:40:D8:BE:5A:77:F1:29:4A:4C:AA:D8:A3:EF:C0:A5:3E:B8:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1982ae15-17be-35b9-aa73-4c1d0e9f888b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6000:fcfd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:4f:8d:af:1c:b6:37:02:e7:c4:b3:f1:0a:fa:d4:d7:6d:31:
         6b:53:1d:3c:2e:81:8a:1b:ec:3e:6c:06:5e:e2:6d:61:ea:8c:
         50:1f:ed:d9:08:ee:0d:12:d5:24:db:1a:70:8a:0c:a1:5a:9d:
         2d:17:bc:6a:f9:98:14:e3:62:3e:78:d6:fa:0a:a1:77:ef:d5:
         17:2a:56:d3:fc:3a:ae:fd:2e:de:09:80:44:92:95:02:73:fd:
         e8:a0:68:cc:48:cf:8c:8f:3f:94:0b:0b:67:e4:5f:13:bf:df:
         da:9a:83:53:ed:b3:2e:e9:38:ef:f3:29:22:a9:67:19:be:41:
         87:7b:d4:66:ad:96:3d:ad:45:ff:a3:89:2b:9f:57:b0:b7:96:
         e6:08:eb:ea:f1:7c:93:ba:55:9b:21:6d:bd:11:5e:58:a9:4f:
         ca:9e:18:26:8e:72:79:cf:7f:60:af:b8:6c:96:3f:46:28:6a:
         ab:fe:32:e1:a0:a6:fd:f2:39:fd:96:5b:d3:0f:28:0a:15:03:
         0f:2b:a8:eb:f4:a8:9b:b3:3e:19:8c:7d:38:2f:15:af:ed:bd:
         bc:5c:f7:9e:49:ce:c8:fe:55:41:bc:14:a3:94:86:37:13:5d:
         a6:d8:bf:70:dd:e2:d5:10:d5:74:c8:52:03:22:b2:ea:9d:00:
         e2:83:06:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----