Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/42aa7be4-5f1b-3966-aec0-26f0c662799e.roa
File:                     42aa7be4-5f1b-3966-aec0-26f0c662799e.roa (raw, json)
Hash identifier:          F7lP3GUz+FBDNu8p7dWXMZ5d5HMbCIrLJCbU/MEWjoU=
Subject key identifier:   1E:8F:D3:89:1F:4C:5D:3D:09:4A:D9:EF:AE:71:2C:3D:C2:8C:DC:67
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A7690B1B114229E8C5F00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/42aa7be4-5f1b-3966-aec0-26f0c662799e.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     11427
IP address blocks:        24.173.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:76:90:b1:b1:14:22:9e:8c:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=1be51ced-c5be-4b6b-8f52-f40fc25f01b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3d:e5:3c:ca:e2:e4:a6:d5:88:ae:f0:c7:88:
                    ac:c4:e3:81:24:35:c6:4f:27:2c:6e:ff:cc:4e:30:
                    bc:f4:a6:71:6e:eb:4a:8f:f3:b9:8e:16:60:e7:bf:
                    58:d2:a4:92:c9:88:43:8a:97:76:af:bc:9b:bc:c2:
                    dd:63:3e:7e:72:ec:72:c4:bb:37:62:a1:4c:0d:41:
                    74:c8:3a:15:a0:dc:31:d1:86:df:86:ce:72:10:bd:
                    e0:45:25:c5:de:fc:33:35:d0:88:db:8e:ad:96:92:
                    51:b8:5f:62:b0:86:27:0d:fa:2d:09:a2:11:df:d6:
                    d0:a3:64:f2:98:24:26:c1:59:b4:d8:a8:d1:1f:c3:
                    44:47:b0:ed:ba:72:4c:1f:89:6c:95:5e:f5:f6:e5:
                    5e:d6:6b:19:58:d4:b8:25:b9:a8:e0:7d:9e:65:ec:
                    1d:3b:4f:35:81:55:8c:53:a2:00:4f:24:f0:82:c8:
                    52:73:a2:1d:4d:b3:e0:51:f0:61:cc:5f:1f:d7:de:
                    48:61:78:63:37:04:22:d8:29:63:7e:0c:89:f4:6f:
                    ca:c7:8c:fb:0c:d6:60:a0:04:94:69:7b:ef:66:fb:
                    01:7c:2b:66:6d:d9:81:d4:2c:d2:43:4d:d3:7a:80:
                    bb:78:7a:d0:49:a0:c2:d7:8c:85:e8:be:96:27:f2:
                    8a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:8F:D3:89:1F:4C:5D:3D:09:4A:D9:EF:AE:71:2C:3D:C2:8C:DC:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/42aa7be4-5f1b-3966-aec0-26f0c662799e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.173.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:04:f6:a1:6b:04:71:bf:4f:19:7d:d1:b8:aa:5c:64:7f:e8:
         79:69:ee:1f:4e:99:cb:cb:06:b7:07:43:75:81:8f:7c:11:8c:
         78:01:2e:a9:92:a9:2d:d8:0a:e2:72:63:e7:b9:9f:91:da:f0:
         2c:21:0b:52:06:b8:07:be:59:d9:7f:db:94:33:fe:20:aa:89:
         f1:3b:3e:5e:f8:fc:f4:00:b1:0c:0a:cc:85:b4:17:59:5f:d6:
         07:8a:87:ca:44:a3:d3:35:21:3e:eb:36:c3:57:e0:c1:19:24:
         16:2b:6c:ea:08:26:75:5f:19:63:01:51:fe:35:e4:10:1f:c0:
         e3:39:86:e4:bb:3e:40:67:57:64:82:bd:75:60:0d:5b:f1:fa:
         b7:f4:5e:41:27:ea:e8:63:0b:a4:80:c6:a8:e4:ec:6e:22:0f:
         0d:eb:09:cc:a1:6f:3e:6f:19:be:1f:26:98:49:5e:82:1c:38:
         82:9e:3b:a7:1c:6b:72:ad:5e:60:5f:78:d6:7e:91:e7:de:20:
         15:6e:95:89:5b:cd:0a:2c:e9:17:6d:eb:30:a0:bc:bd:ca:cd:
         ec:f8:63:a3:d9:55:88:dc:a7:25:04:65:11:b8:53:3d:66:e9:
         d2:b0:2e:b3:a2:63:2c:17:8c:94:ed:a1:c0:eb:2c:db:13:78:
         70:05:11:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----