Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/05d9eb95-20e4-3a67-930e-c531b8efe640.roa
File:                     05d9eb95-20e4-3a67-930e-c531b8efe640.roa (raw, json)
Hash identifier:          BpY9Y/QGV9AMHFroOK3CL3PS5LZTHgvB2iEovSPQboY=
Subject key identifier:   1D:D0:70:2A:AA:85:BC:9D:EE:4F:39:36:56:F7:E7:B9:2D:F2:4D:41
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037B0C356395404F02F86100
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/05d9eb95-20e4-3a67-930e-c531b8efe640.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20001
IP address blocks:        74.87.136.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:0c:35:63:95:40:4f:02:f8:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=4262cba5-669c-4af9-853b-063e5776d13d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ab:70:47:d3:c5:65:37:26:d4:05:1d:8b:67:
                    f5:e1:a1:54:c3:32:e8:60:f2:e3:d0:10:38:8a:13:
                    21:67:77:42:f1:08:23:70:de:fd:fd:e9:c8:05:1c:
                    80:66:92:58:51:b5:71:7d:5a:3a:11:0a:d0:6d:3f:
                    18:12:8f:fa:46:3b:5c:f9:cb:46:88:d8:17:e2:74:
                    5e:93:59:2a:7c:9f:b8:75:f5:89:93:25:84:e4:bf:
                    85:94:a0:b5:ac:e0:7f:ef:1a:5e:0e:23:c4:0f:1c:
                    c9:ea:c3:63:00:c2:cd:12:5b:ad:3e:ce:83:67:09:
                    7a:1c:ed:c1:ae:ce:ed:9a:47:cc:c3:de:6d:de:4a:
                    1d:46:8d:62:cb:1d:2d:66:4b:77:e3:13:c0:9d:3f:
                    c7:ea:87:61:d8:ff:4d:51:38:92:ee:1e:04:a2:6d:
                    f1:f2:f2:f8:9e:40:2f:72:bf:2d:aa:f8:d6:f5:89:
                    57:f0:1e:ae:47:b3:4c:bd:7e:d4:75:b7:1e:e5:c9:
                    5b:aa:f5:15:eb:25:4a:cb:cd:da:3b:89:6c:37:0f:
                    b0:21:54:bc:24:37:96:53:cf:5a:04:83:fc:c7:5d:
                    37:c4:12:ec:ed:72:80:1f:ba:37:6c:87:f6:06:b0:
                    f3:c0:ac:5b:bc:50:ae:df:10:5a:6f:43:e2:2d:3e:
                    db:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D0:70:2A:AA:85:BC:9D:EE:4F:39:36:56:F7:E7:B9:2D:F2:4D:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/05d9eb95-20e4-3a67-930e-c531b8efe640.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.87.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:e2:8c:82:d5:cd:53:1c:f3:9d:7f:95:8b:c0:3e:50:ea:2c:
         cb:ee:8d:30:a8:1f:69:f9:1f:4b:ff:11:da:47:21:16:cb:f2:
         2c:f6:b9:b3:78:3a:01:98:99:80:58:b1:b9:a9:bf:a2:85:b0:
         f8:da:56:7a:67:02:16:78:b1:b3:81:23:d2:63:a3:45:1c:a5:
         61:cd:17:d7:96:05:48:aa:45:d7:e6:90:0d:f8:49:4f:d5:0c:
         f3:91:1b:b6:ee:a7:db:cc:e3:5b:7c:31:8a:8f:77:d6:6e:d2:
         4a:c5:84:ea:78:34:f7:a1:7a:5b:24:4b:b5:cc:2a:ff:56:9f:
         d2:8f:db:83:d0:cf:69:b2:88:12:c3:61:ca:73:a9:2d:54:af:
         6d:11:b6:35:96:6e:aa:7a:ae:fd:cc:e5:d4:34:37:15:31:08:
         a2:10:34:3b:df:89:e0:f4:ca:48:d2:f2:db:8d:f6:8f:8e:ab:
         de:78:ee:85:6c:49:96:27:ba:c0:6c:1f:e2:27:40:91:95:ca:
         88:6f:93:e3:a6:4d:02:0b:27:38:06:ee:c4:42:e9:80:59:2b:
         2e:4f:23:b6:4b:8e:c5:e5:da:9d:98:6e:00:b2:7c:65:8f:b4:
         e0:70:8b:f1:5e:d7:41:aa:1e:1c:84:03:2b:a7:47:2b:e2:79:
         40:1f:48:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:07:05 2025 by rpki-client