Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/97efd957-6d5d-3863-804d-dcc9e1f8077c.roa
File:                     97efd957-6d5d-3863-804d-dcc9e1f8077c.roa (raw, json)
Hash identifier:          XFxhAE2PON3IVHpt3dj8vXxP9rCBOLzRYxk/37/oTc8=
Subject key identifier:   F4:0F:04:BD:07:4B:41:48:24:10:D2:24:A0:7B:B3:D4:7B:DE:37:0B
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A68E70D812FD0FA56B8E0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/97efd957-6d5d-3863-804d-dcc9e1f8077c.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     10838
IP address blocks:        67.52.218.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:68:e7:0d:81:2f:d0:fa:56:b8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=d6de0b94-c480-4e96-8c4a-e4da075dc618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ef:65:86:7c:e6:b4:e9:8f:29:f3:9a:8c:8d:
                    e5:d3:0f:63:b6:9d:b3:ad:bd:81:70:95:76:60:35:
                    e3:ca:9c:64:ff:99:59:3f:b1:b4:94:d3:f8:cb:27:
                    c2:5c:26:57:07:78:09:78:ad:d2:50:0f:c4:61:39:
                    f6:6f:6b:d5:6e:70:3e:a0:00:4e:2d:42:91:6f:44:
                    07:e2:b5:c1:47:d2:7f:7c:0c:44:98:ae:8b:36:2d:
                    74:f4:2d:90:4d:2b:66:96:b6:9a:c9:f2:67:bd:ea:
                    59:c4:32:d0:af:5f:6c:a4:53:41:0f:6c:df:b5:e5:
                    8b:90:a0:a7:2e:98:46:80:e0:09:e2:83:46:c3:3a:
                    2a:4a:a8:e3:61:54:bc:3f:c2:fd:28:e3:3c:41:51:
                    67:b4:fa:73:3d:11:0c:62:e9:f6:c8:e9:70:55:a9:
                    15:f4:f3:55:67:07:4b:5b:06:11:6a:c3:89:12:67:
                    22:3c:94:e4:0f:9c:98:d8:35:76:15:e0:23:e5:71:
                    33:27:23:cf:70:61:65:09:7f:cb:e9:7e:a9:c5:23:
                    56:25:e9:46:64:8b:b5:31:3f:53:29:fc:42:be:7a:
                    47:42:1a:c6:b3:9e:62:bf:14:b3:3b:6b:70:68:36:
                    86:eb:65:9e:5c:b5:98:94:d1:dc:82:80:9b:f9:b3:
                    4f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:0F:04:BD:07:4B:41:48:24:10:D2:24:A0:7B:B3:D4:7B:DE:37:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/97efd957-6d5d-3863-804d-dcc9e1f8077c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.52.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:5e:58:59:e1:ab:f7:d9:6e:12:08:4f:39:10:31:e0:12:37:
         87:42:c6:7b:ca:fb:1d:b9:97:5d:0f:fb:d5:1e:be:c6:6b:f1:
         ab:b4:c3:2e:18:86:c6:4b:23:05:79:4a:9e:3c:3e:f9:35:d1:
         1f:f2:9c:d5:02:94:43:51:ac:56:1d:80:8b:0b:8c:3d:e2:5b:
         28:d4:cf:9a:7b:de:96:e6:f4:ee:52:01:25:eb:af:d1:b9:60:
         d8:29:44:dd:a7:62:ca:0c:80:35:a7:61:a0:0c:21:c6:3b:13:
         7a:71:55:64:77:00:e3:fb:ec:b6:c9:ba:fc:4c:c2:91:a7:a1:
         74:4d:66:95:11:64:a1:da:f7:78:80:46:1d:bf:f0:01:6c:e5:
         46:c6:ea:e8:1c:dc:0b:e6:1b:d9:19:27:83:cd:d8:06:ed:a7:
         eb:41:85:3e:d1:28:e8:68:ee:1f:8c:0b:93:6d:ba:43:81:c3:
         69:2a:3d:b7:fe:dc:a1:68:90:c9:ef:9e:cf:e0:47:8b:c7:98:
         3b:86:b9:ab:a2:5d:23:18:d3:b8:51:1d:7f:c9:a7:44:d6:54:
         53:b4:f8:e5:11:80:8f:5d:4a:20:68:fe:2c:a7:40:a8:3a:8e:
         ec:4f:98:e5:01:fa:9b:41:1d:fe:4b:aa:d9:46:1e:c9:30:a5:
         61:1b:69:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----