Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3d096aa9-a86c-34d4-be8a-0a98358dfd8d.roa
File:                     3d096aa9-a86c-34d4-be8a-0a98358dfd8d.roa (raw, json)
Hash identifier:          VKRZSpdddusleKVDdbpZ3zlq6c2PkrIXr0GhlF8lbEc=
Subject key identifier:   FD:5C:C2:C6:E8:01:20:F0:B0:F1:C9:5F:49:15:A9:8B:DF:BC:95:C5
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037B0E0E0DB3CCC09DE2E590
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3d096aa9-a86c-34d4-be8a-0a98358dfd8d.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20001
IP address blocks:        2605:e000:ec00::/39 maxlen: 39
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:0e:0e:0d:b3:cc:c0:9d:e2:e5:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=03dd4447-d0a2-41fc-a0ec-956db1282279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:98:a2:85:0e:cd:54:0a:d1:2c:e5:c5:39:c1:
                    d0:b7:d6:12:53:7e:9f:81:2f:e5:0e:5a:37:72:a6:
                    87:83:a6:74:b4:7c:8f:f0:b0:36:d5:e5:b9:b2:d8:
                    75:83:eb:03:c8:de:a8:5d:16:e0:81:35:7d:4f:7e:
                    3e:60:49:a0:87:08:fe:84:61:42:2b:b1:91:ce:07:
                    a1:42:0a:22:99:78:79:50:b1:9f:67:44:63:be:38:
                    26:38:0a:55:92:ad:08:43:31:60:98:53:4b:32:bb:
                    5c:00:b4:bf:d5:ee:be:72:81:37:42:e5:fc:7c:db:
                    c5:47:f2:08:b1:9c:dd:cd:d4:40:41:96:68:da:2a:
                    17:e5:55:c0:9b:4d:a1:f3:83:33:52:23:b1:fc:ae:
                    7c:85:56:58:31:38:12:00:e0:41:be:c2:b0:80:9a:
                    2d:c7:54:d4:53:82:b4:50:b0:15:1a:5d:40:ce:51:
                    12:80:f8:3c:b5:b2:44:c2:5b:0e:e4:db:5d:6e:ea:
                    29:66:a4:4e:0d:21:64:92:68:ce:14:89:e2:27:66:
                    01:f0:06:ee:16:b3:f3:c4:ab:35:5f:a4:83:72:0d:
                    5e:cf:6b:3d:8e:95:fd:88:ae:96:97:34:04:ae:ea:
                    9c:ac:ca:a6:8a:37:f5:76:0a:c7:30:51:2b:0c:e5:
                    2d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5C:C2:C6:E8:01:20:F0:B0:F1:C9:5F:49:15:A9:8B:DF:BC:95:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3d096aa9-a86c-34d4-be8a-0a98358dfd8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e000:ec00::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:7b:26:33:d9:e8:34:85:d6:26:74:9c:57:64:9c:5e:1c:56:
         71:ba:d1:fe:67:f0:43:f6:17:b7:4d:fa:f1:5b:ec:10:60:9f:
         f9:06:5c:4c:0f:f6:08:95:3d:6a:2a:a7:d1:ee:99:35:b2:e1:
         b9:60:45:ed:b6:03:d5:f9:be:71:74:42:e0:4c:c0:f3:e4:25:
         3a:d5:fa:1a:6e:b3:f5:69:3a:4e:eb:85:48:f1:c2:50:34:08:
         dd:d0:67:df:ac:86:73:e8:ef:17:cc:dd:a9:12:de:12:66:b4:
         07:f5:eb:8b:04:2d:ba:00:5e:df:48:da:27:40:12:e5:2b:82:
         9b:95:f2:40:f2:4d:38:79:99:6c:c8:d8:8b:5f:b9:d7:14:ed:
         0f:bd:06:46:fd:0a:45:56:97:57:aa:d4:31:d7:0c:24:17:5f:
         e9:e2:d4:40:a7:5f:c4:06:5b:f3:eb:84:4f:96:12:7d:4c:3d:
         b8:66:e7:95:85:a3:78:49:1c:0b:ce:03:9c:41:5e:e0:48:4f:
         b8:a8:34:7c:00:5c:d6:36:c4:5d:c3:84:66:eb:dd:d3:37:65:
         5d:85:94:41:63:b5:68:05:af:e0:28:ca:5b:f6:7a:af:00:cf:
         3b:ac:e1:43:c5:06:06:f1:4d:5b:02:2a:29:df:5d:cd:c8:fd:
         6a:33:db:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----