Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11602b37-c071-3dc7-a256-44b24da1d026.roa
File:                     11602b37-c071-3dc7-a256-44b24da1d026.roa (raw, json)
Hash identifier:          7hKbS9VRVnbtIdoLhepAB58DUZXw/Vb0WSeihHVUNFw=
Subject key identifier:   98:38:3C:DD:43:EC:24:ED:7B:C3:F3:1E:CE:5D:C9:43:B9:17:92:84
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037AFF28F594D816B955AB00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11602b37-c071-3dc7-a256-44b24da1d026.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     11427
IP address blocks:        68.207.64.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:ff:28:f5:94:d8:16:b9:55:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=6180a269-7522-4113-a6c9-12e1a0a62cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0a:16:ed:5b:6d:1c:e4:c7:34:e5:e1:b0:e0:
                    6a:49:ee:67:f2:e9:ab:e6:15:7f:37:32:ef:93:57:
                    fa:37:ba:33:8e:74:67:67:84:ec:d1:58:0f:48:5b:
                    82:13:d7:e4:ad:84:84:13:55:ca:34:45:2a:bc:9d:
                    54:0c:57:4c:cf:25:d4:8a:72:d9:a4:d0:f7:53:ba:
                    3c:1e:ab:2d:5e:6d:ca:01:93:ca:b7:67:9e:9a:f0:
                    08:85:0d:5c:47:a1:25:7c:36:e4:34:43:67:d7:51:
                    c5:04:fb:da:53:e1:71:26:0a:90:ad:2e:f9:c1:46:
                    8e:b7:3e:f7:0c:26:08:da:2f:f6:c0:99:f1:40:38:
                    6f:1e:08:0d:d1:4c:91:4b:a6:d4:0e:2a:c9:ed:0a:
                    56:10:69:44:fe:c6:4e:f8:49:de:87:9b:b0:a5:da:
                    53:17:64:4a:de:c6:bf:67:db:44:50:92:8b:b7:dd:
                    ce:bd:59:aa:84:21:d5:92:7b:4e:8b:01:ff:ac:b4:
                    82:83:64:61:a2:d3:fb:43:e6:71:8a:25:d6:8e:75:
                    24:4c:85:ac:15:37:b6:77:00:7f:da:40:79:ca:66:
                    6c:2c:11:c1:f0:11:21:80:60:5c:e1:01:ab:2b:25:
                    5d:fa:47:84:83:78:4a:2b:70:ea:5b:0d:e3:5a:2d:
                    e4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:38:3C:DD:43:EC:24:ED:7B:C3:F3:1E:CE:5D:C9:43:B9:17:92:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11602b37-c071-3dc7-a256-44b24da1d026.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.207.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:f0:05:c1:b9:f0:5e:03:56:13:4c:ea:4f:49:fe:4c:73:85:
         ba:47:7a:c7:df:f9:f3:ee:53:f8:0a:23:ef:f5:e5:21:e3:94:
         8e:a4:38:4c:dc:cd:22:91:87:da:bb:b6:b3:a0:64:11:f8:c9:
         63:27:31:90:e8:c6:af:d8:07:c7:75:ab:d5:f6:63:c9:2b:2f:
         51:ac:28:c4:f5:52:85:0a:12:39:22:c6:66:26:38:ac:75:35:
         38:cc:2e:a4:2b:2c:eb:f4:06:57:27:e3:79:d6:40:09:2d:6a:
         b9:ac:24:33:f4:31:c7:d1:7e:15:7b:28:b9:17:c5:ec:6f:d7:
         dd:2c:ca:2d:7a:99:cf:94:ed:1e:6f:5a:49:dd:8f:1a:32:dd:
         e6:ac:9f:f1:b1:6d:57:05:8c:23:28:8d:fb:68:70:c8:64:91:
         5f:86:4a:98:9d:0b:4b:ff:13:f9:69:73:6f:9b:f5:a9:68:8c:
         33:a3:cf:01:13:0c:14:3c:3b:8c:76:c4:15:d7:51:ef:0e:ef:
         cd:d8:03:76:15:ea:44:e6:db:1f:74:2f:23:cb:cd:20:23:c1:
         f3:8d:62:93:c0:dc:45:4f:b5:fb:49:54:3f:5c:d8:ff:e4:18:
         c4:3e:cc:fe:ed:30:d6:ad:de:2f:19:1e:d9:d7:77:7c:94:8c:
         4c:09:a4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----