Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b6a80224-d488-4712-8f22-4b27aaeb45a0/a5babb5d-d8c9-3ebe-b61d-44c5c987a464.roa
File:                     a5babb5d-d8c9-3ebe-b61d-44c5c987a464.roa (raw, json)
Hash identifier:          kFz4HB16nebI86NOeEYjjvRTsuWQRluCUUyh+8xW4g0=
Subject key identifier:   A6:9B:91:21:39:5E:8B:AA:EC:C6:1B:02:DB:98:CC:7C:54:E8:31:60
Certificate issuer:       /CN=b6a80224-d488-4712-8f22-4b27aaeb45a0
Certificate serial:       010D0C9F43285847E78F6B51C7FF6A679F597400
Authority key identifier: 44:B2:40:AB:A9:63:62:93:C3:F6:D2:9B:B8:A4:02:CF:30:12:B5:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b6a80224-d488-4712-8f22-4b27aaeb45a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b6a80224-d488-4712-8f22-4b27aaeb45a0/a5babb5d-d8c9-3ebe-b61d-44c5c987a464.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     33419
IP address blocks:        204.11.110.0/24 maxlen: 24
                          204.11.111.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:6b:51:c7:ff:6a:67:9f:59:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6a80224-d488-4712-8f22-4b27aaeb45a0
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=a11b7243-17ba-4075-a1dc-f275ab639d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:68:3c:b6:4e:38:25:00:d2:79:f0:fd:05:49:
                    21:48:ff:18:86:1d:7b:12:1c:61:19:1d:9e:e1:6f:
                    7b:c2:d0:48:62:f9:a9:b6:91:34:cb:33:59:b7:d9:
                    a6:29:ec:6d:fb:7e:fc:d3:d2:e4:ce:e0:df:af:e9:
                    6a:d9:6a:17:16:b2:ff:62:0b:87:2c:0a:76:50:d9:
                    98:0d:4c:da:7c:f2:d8:0e:b4:74:aa:50:18:ee:b5:
                    bc:c8:86:3b:09:ba:73:db:76:58:09:bf:23:cf:8c:
                    f0:be:c0:e8:f7:fe:e5:51:61:de:81:f1:1a:c3:70:
                    29:db:37:5e:14:44:67:c9:77:4c:21:c0:be:bd:04:
                    85:a1:7a:6a:7e:77:72:36:60:d4:e9:31:0f:03:17:
                    f4:44:af:02:54:20:7d:26:63:03:6c:ce:4d:42:eb:
                    fc:96:13:6d:b7:37:6c:9f:df:6f:6e:58:f5:5a:b4:
                    8c:6a:05:45:1d:5a:c4:af:cc:49:62:4a:a8:a9:2a:
                    a1:bf:67:a2:23:f7:0e:a0:0c:47:fd:99:44:ad:ab:
                    cd:26:c3:0a:d6:ff:d2:fe:93:34:be:84:fc:db:88:
                    ae:26:4e:23:1f:a5:3c:d0:dc:80:58:57:3b:64:94:
                    46:1f:b4:ad:e4:c5:f3:f1:4e:cd:c6:53:fa:59:58:
                    77:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9B:91:21:39:5E:8B:AA:EC:C6:1B:02:DB:98:CC:7C:54:E8:31:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b6a80224-d488-4712-8f22-4b27aaeb45a0/a5babb5d-d8c9-3ebe-b61d-44c5c987a464.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b6a80224-d488-4712-8f22-4b27aaeb45a0/b6a80224-d488-4712-8f22-4b27aaeb45a0.crl

            X509v3 Authority Key Identifier:
                keyid:44:B2:40:AB:A9:63:62:93:C3:F6:D2:9B:B8:A4:02:CF:30:12:B5:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b6a80224-d488-4712-8f22-4b27aaeb45a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.11.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:be:1c:49:20:fb:c2:6a:62:c3:27:e7:18:16:34:d7:38:4c:
         b5:d8:e0:df:4a:7c:e6:6e:0d:d1:91:05:d0:72:08:93:ae:92:
         eb:32:5f:95:6b:f1:fe:94:6d:bc:9b:90:a1:fa:9a:04:35:df:
         e6:64:cb:12:e4:cf:01:d5:22:75:53:ab:da:ef:91:25:7a:fc:
         8f:1a:46:b5:a7:ac:f2:d1:ec:82:6d:73:5d:82:42:ac:9d:87:
         6d:32:f2:6d:17:d4:45:ba:c7:12:a3:f9:5b:28:55:4a:f1:3f:
         71:4f:4b:74:ff:aa:4b:79:c1:ba:72:70:ca:52:e9:b0:13:2d:
         f3:2a:23:c0:0a:e3:25:7f:cf:b8:9d:86:31:66:44:28:bc:3c:
         fd:65:61:f1:f0:12:ec:46:e7:ce:99:e9:ae:65:a1:f8:91:bd:
         46:a8:56:90:5d:d5:24:44:55:91:b1:df:b7:6d:68:ab:fc:c9:
         ba:0b:25:84:4d:51:6d:8c:a1:c7:e8:ba:c4:eb:48:e3:28:77:
         99:05:a0:3b:77:81:01:a7:fa:4a:a9:dc:0b:49:e3:03:bd:ce:
         77:b3:a7:98:39:ee:4b:6e:29:17:f9:25:34:c8:79:5d:f8:d2:
         c9:dd:52:be:73:7c:60:60:2b:d7:d4:ea:d9:29:6d:4b:ea:76:
         90:c1:15:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:42:14 2025 by rpki-client