Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0b01ce4e-e931-3582-b87f-1a414be977b1.roa
File:                     0b01ce4e-e931-3582-b87f-1a414be977b1.roa (raw, json)
Hash identifier:          QNd86z16mOtxp+Q4bWcm/YgZj30WE7hporr6+cKLPXA=
Subject key identifier:   DD:A7:71:6F:99:7C:98:D4:04:E9:35:AF:FE:83:7D:52:D6:71:BC:86
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A6C94AD3549CFE25E75A8
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0b01ce4e-e931-3582-b87f-1a414be977b1.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     11351
IP address blocks:        24.39.96.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:6c:94:ad:35:49:cf:e2:5e:75:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=a4e0a458-0c15-4880-bc50-34edd7c29255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c6:d7:6e:4e:8a:8e:97:0f:08:4f:2f:91:a5:
                    f9:74:cb:98:15:e6:a1:92:d0:10:6b:f6:58:e5:e1:
                    2f:37:b9:f1:a9:e9:02:37:fc:91:06:ac:38:f2:bc:
                    2c:99:7f:73:0b:62:11:71:7d:99:87:ff:30:e4:fc:
                    83:52:b8:e1:8a:4f:0c:0b:13:6e:73:b3:e4:f6:ab:
                    a2:f3:a1:fe:2b:72:a5:78:e1:e3:03:77:34:50:77:
                    fd:a9:75:48:c3:1f:b0:a0:54:2a:d2:38:e0:72:a4:
                    eb:d2:04:3b:c1:dd:43:58:b7:cc:69:7f:6e:0a:62:
                    11:b4:8e:66:98:93:5c:d5:74:d3:ae:73:3c:b5:18:
                    d2:9a:c7:37:35:5e:5f:b7:5f:c1:b4:7a:80:6e:ce:
                    0e:13:02:1a:ea:56:8f:5c:97:7a:bf:67:8e:18:10:
                    57:9b:5e:11:22:48:2a:03:3d:80:5e:17:b9:8a:7d:
                    57:6b:07:97:8a:47:42:19:f4:77:25:80:be:a8:d7:
                    1a:2d:2f:4e:d5:bb:2e:4b:16:91:3b:a1:af:a8:f6:
                    57:54:18:53:fc:40:26:85:dd:64:9c:55:1a:06:f0:
                    3c:69:c6:f8:74:d0:10:2b:20:64:f4:fc:23:73:07:
                    ce:71:ce:df:0b:01:e3:62:3b:ed:3d:c2:2f:7b:b0:
                    59:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A7:71:6F:99:7C:98:D4:04:E9:35:AF:FE:83:7D:52:D6:71:BC:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0b01ce4e-e931-3582-b87f-1a414be977b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.39.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:9b:1e:70:d8:21:2b:ff:98:78:c5:3d:40:f0:36:cd:0b:a7:
         3c:5d:1f:d2:5b:c4:89:3f:6d:b7:0c:6c:8c:bf:9a:fa:34:10:
         7f:f0:0f:42:e1:39:85:11:ca:86:2f:a1:ff:15:99:f1:9f:97:
         0d:3f:8c:3f:da:a5:4b:b3:c6:6e:48:67:3c:52:fc:af:c8:9b:
         f9:98:96:d5:62:cd:a0:e7:36:82:c2:fe:2c:2b:87:f2:a9:1b:
         a9:41:a1:a6:75:3b:63:c4:66:cd:8e:85:7d:47:ff:fd:e1:1d:
         91:d5:c0:df:dd:6a:2a:5b:b1:cd:de:e7:c7:86:16:40:d2:a1:
         9d:bd:32:6b:ea:a5:d4:81:9b:13:33:99:f6:01:48:36:25:27:
         97:8b:32:b4:5a:6e:82:0f:03:52:91:31:de:0c:81:fb:c0:32:
         e1:86:65:2f:3e:79:d8:26:cf:40:0a:a4:4c:82:3d:30:9b:44:
         98:19:76:d2:2d:8e:33:d4:7a:16:81:32:5b:7f:96:c8:39:a0:
         44:09:3d:6c:83:27:d2:8f:eb:40:97:01:57:83:52:87:1a:15:
         9b:2a:e1:f3:61:9d:6b:af:61:8b:39:9f:1c:d1:d2:3a:ba:1b:
         45:da:e5:20:8f:0a:67:6c:ee:40:7b:0d:a5:c8:a9:22:e7:b6:
         7c:ca:12:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:57:33 2025 by rpki-client