Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1bfbea76-7e58-36c0-b987-89a1b4617f2f.roa
File:                     1bfbea76-7e58-36c0-b987-89a1b4617f2f.roa (raw, json)
Hash identifier:          QmMEC1KahV2my5wW2P+lVplZbMC+YUxwq4RvcCrl/9w=
Subject key identifier:   B0:60:FB:54:03:1D:09:3F:E3:19:F6:1A:94:D5:85:C1:41:98:68:E4
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A7220FE5D518572035240
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1bfbea76-7e58-36c0-b987-89a1b4617f2f.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     11426
IP address blocks:        2603:60bd::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:72:20:fe:5d:51:85:72:03:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=83bb7549-6557-49f7-9b28-c858cf34842b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c0:99:04:45:52:03:1f:b5:dd:72:10:bc:81:
                    24:ad:28:bc:66:34:9a:3b:50:75:89:34:3a:38:9e:
                    e2:92:dc:6f:50:ae:a1:6a:78:b1:96:83:ce:a2:cd:
                    1e:4a:bb:f4:73:37:60:a8:97:7f:9e:49:df:41:ce:
                    60:33:db:aa:ad:2f:98:5b:11:9a:e7:60:21:46:e0:
                    75:1f:ad:1a:f7:ee:0b:fa:df:3c:38:5d:aa:e2:de:
                    da:db:a1:c1:8f:90:40:04:3b:c3:2f:7e:92:7f:39:
                    dc:8d:48:38:17:d4:7f:78:09:16:26:77:70:41:20:
                    17:f2:1c:bb:69:43:36:7a:d5:ba:5e:f3:d0:96:ce:
                    b4:35:35:f4:ed:78:c0:21:42:84:69:ea:9e:9b:82:
                    20:c7:7d:e8:8e:9e:d6:b8:0e:38:5f:2b:1b:50:52:
                    da:57:23:63:92:82:f7:46:05:e6:dc:7e:ec:6b:58:
                    aa:3e:9b:e7:89:cf:aa:5c:f6:9b:4c:cb:fe:e6:8d:
                    95:20:ef:33:ec:40:51:43:de:3a:43:84:dc:00:9e:
                    06:a7:a5:13:6f:7c:a5:63:85:12:f9:3b:05:61:4b:
                    8c:3e:d3:ad:4e:d7:c9:02:4d:9a:b5:18:5b:9b:e1:
                    eb:c5:8b:43:ca:be:79:35:73:ea:f1:92:cd:6a:0c:
                    1c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:60:FB:54:03:1D:09:3F:E3:19:F6:1A:94:D5:85:C1:41:98:68:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1bfbea76-7e58-36c0-b987-89a1b4617f2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:60bd::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:1c:12:a5:cf:fb:c3:7c:5a:9f:c2:85:65:b2:f0:fc:dc:8b:
         98:8d:e8:b5:4a:36:8b:b5:6c:70:c4:20:0b:a6:1d:ed:4e:74:
         67:40:c8:21:72:9b:23:f6:42:3d:f3:8b:7b:c2:de:8c:3d:76:
         06:ca:94:59:9c:18:c6:3c:6d:bc:58:14:97:d3:bd:cf:5f:c8:
         6d:c0:71:38:90:d2:1a:91:57:18:84:ab:31:e2:91:c0:f6:c3:
         35:72:41:5a:5b:f8:74:87:00:00:03:bd:ba:21:98:f3:fc:84:
         23:8d:97:9d:c0:77:5a:ae:c7:36:28:9c:5a:7b:09:19:19:58:
         83:94:e7:ac:5e:2a:fe:6d:fe:52:33:6c:7f:b9:c1:9e:c1:59:
         49:d6:12:fd:33:13:d9:46:41:f4:14:6a:d3:a2:a8:72:9c:e5:
         61:55:98:d5:a1:1d:b0:fe:75:5e:e6:17:27:ba:6a:ae:3c:88:
         2d:25:a7:f2:e7:4c:42:71:fd:ea:27:a9:10:7c:12:a7:ef:5a:
         f0:a0:b2:aa:0d:1a:00:f1:56:94:58:ff:ef:61:f5:99:62:30:
         44:45:b8:8d:2c:82:b6:dd:2a:a0:ee:e3:1e:7f:75:5d:7d:22:
         53:09:87:fb:92:1b:0c:43:1c:80:8e:b0:fb:ea:1b:9c:47:e8:
         13:a6:f6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----