Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/007a9913-caa7-3b5b-be48-8c97ebc52b17.roa
File:                     007a9913-caa7-3b5b-be48-8c97ebc52b17.roa (raw, json)
Hash identifier:          LFk4y56Z0nZjOg8rRycaV7ZCQ2P7X+7SIaaP4NXXQC4=
Subject key identifier:   36:D0:AA:0B:1D:8D:C8:AD:8A:83:F4:AC:69:3C:6B:CD:1B:7C:A3:40
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A7C39BB10E68B891C6EE0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/007a9913-caa7-3b5b-be48-8c97ebc52b17.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     12271
IP address blocks:        67.243.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:7c:39:bb:10:e6:8b:89:1c:6e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=17dc8b31-a6b8-49ff-b578-0e253c410495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8b:7c:5e:2b:2a:9d:74:68:c8:26:5c:9b:47:
                    ee:ba:f4:6e:35:3f:43:7e:74:d0:57:78:70:7b:66:
                    94:82:e5:e2:0e:c6:fd:56:7f:7b:7c:7b:ab:c0:17:
                    df:7a:ea:2e:fa:b9:9d:ea:fe:ea:fe:0d:66:74:3b:
                    24:da:26:9f:d0:2b:09:41:0a:f1:a1:d3:e7:74:28:
                    06:86:dd:b3:c0:21:d1:fe:33:10:1a:86:75:3c:5f:
                    39:90:be:55:c0:03:89:5a:24:3b:4d:ab:ed:0a:37:
                    65:0c:d9:5c:6f:be:2b:25:e0:73:41:5e:19:79:52:
                    19:17:8b:01:f1:05:66:14:21:b3:af:81:21:c9:29:
                    28:7d:d5:22:ba:b7:1b:09:19:1d:d6:1f:7c:d6:3f:
                    8b:31:d0:73:61:f3:67:94:1e:e9:20:83:f7:a0:c5:
                    5d:b8:3c:27:cd:fd:28:21:64:d6:5a:dc:22:f9:18:
                    00:2c:3a:41:27:c1:b7:61:6e:b9:b2:fd:d9:d1:b0:
                    5b:1d:78:0e:5f:ad:c0:b6:cf:9a:43:d7:42:ad:03:
                    aa:fc:b3:50:ec:fd:f2:18:9f:c6:6e:a2:f9:13:2e:
                    89:cb:4c:44:37:22:3e:fd:ce:5a:cf:b1:ea:28:c2:
                    1a:67:6a:18:f6:e1:09:aa:29:80:76:c1:42:6e:56:
                    74:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D0:AA:0B:1D:8D:C8:AD:8A:83:F4:AC:69:3C:6B:CD:1B:7C:A3:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/007a9913-caa7-3b5b-be48-8c97ebc52b17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.243.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:08:f8:b3:26:db:e7:60:aa:26:4b:59:d7:f4:31:9e:7c:b7:
         51:07:20:56:3e:09:3a:a2:8d:47:0d:a9:08:da:be:c3:f6:7c:
         91:cc:2c:7b:ff:a3:49:a9:2d:65:a5:3d:d5:30:4c:f9:2a:83:
         52:7b:a7:52:20:df:64:9a:ed:b4:69:47:82:d8:d4:03:97:33:
         af:91:86:fe:67:fa:33:a8:62:99:3d:18:a7:7c:39:4c:3a:03:
         13:f4:bd:08:17:6b:c9:de:83:c6:fe:25:50:fd:90:43:43:32:
         31:ad:96:31:64:33:c0:ee:09:6c:46:54:14:0a:20:06:91:be:
         37:26:7b:87:be:ad:20:4c:b0:98:ef:9f:3a:da:a0:4e:08:d6:
         f9:9e:a4:fa:7a:56:a6:a6:fc:cb:21:1e:40:b9:fa:5a:d7:fd:
         05:42:7e:fc:43:99:f0:4b:1b:16:ed:bf:0d:54:c9:74:15:e9:
         71:19:78:f7:19:ac:72:51:f4:2f:96:ea:8e:d6:81:bf:16:53:
         74:46:3c:c1:08:7f:76:fd:5b:b7:8c:85:7a:1e:49:c6:fe:d6:
         fb:36:e7:c7:c7:d9:2f:29:51:d0:2f:fd:59:45:62:ec:8a:f6:
         0f:7e:c8:27:d6:04:55:8a:de:14:3b:fb:2b:a5:73:24:fd:7c:
         93:42:9f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:24:00 2025 by rpki-client