Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/18152cb2-4ad6-3b83-8d6d-b12ec4321605.roa
File:                     18152cb2-4ad6-3b83-8d6d-b12ec4321605.roa (raw, json)
Hash identifier:          mHgTCk6KPAsAjHUIWMTuuy9vv0TM1XsMyeZumChU0+U=
Subject key identifier:   E2:D5:07:78:B7:E4:22:03:59:3E:29:B9:29:59:F8:22:80:CE:9F:57
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A6A195ADE57650D2FE040
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/18152cb2-4ad6-3b83-8d6d-b12ec4321605.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     11351
IP address blocks:        66.24.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:6a:19:5a:de:57:65:0d:2f:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=2596c67e-426c-46d9-a62b-5a02a320723d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:72:18:a1:ce:df:db:46:d7:95:75:1f:04:f2:
                    fd:b1:bf:5c:b0:36:98:6c:1c:95:1c:40:57:73:39:
                    31:98:98:be:cf:6c:bd:95:3d:5a:cf:6c:5f:24:22:
                    3c:5d:d5:a1:ce:96:43:29:c8:3e:dd:48:9f:ae:73:
                    56:5b:1b:61:fa:fe:ed:82:5d:05:b6:c4:59:0a:62:
                    29:75:aa:a4:88:b3:3c:67:3f:57:6e:b6:cc:41:39:
                    f9:bd:15:c9:23:00:57:10:30:8a:68:49:17:d3:47:
                    45:2b:06:36:84:95:22:85:9b:ba:cf:25:31:14:b6:
                    b4:62:5c:18:6f:2e:61:1e:f3:fa:6f:b6:71:07:cd:
                    98:9b:82:0d:5b:28:42:dd:eb:07:ce:bf:e6:eb:59:
                    2a:ad:25:82:e9:1d:ac:1d:42:f9:77:fb:0e:81:38:
                    31:42:55:9d:bb:de:b4:00:ea:49:92:5c:b3:eb:c8:
                    35:fa:22:22:c1:17:28:22:7c:96:41:2f:bb:9d:24:
                    65:7d:d6:78:ea:8a:20:ab:ab:67:21:08:5e:3a:16:
                    d1:56:58:07:0c:27:da:d9:e8:7f:19:c2:6a:c9:9d:
                    f3:d4:ec:f3:11:c1:03:b2:e6:41:ca:7c:96:96:ae:
                    b8:f7:15:50:e8:d1:1f:dd:f8:97:7c:40:64:d2:43:
                    60:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D5:07:78:B7:E4:22:03:59:3E:29:B9:29:59:F8:22:80:CE:9F:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/18152cb2-4ad6-3b83-8d6d-b12ec4321605.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.24.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:c5:bb:d0:d5:24:48:4d:f9:5c:95:68:ce:7d:83:16:40:04:
         7d:e7:63:4a:e4:d4:40:40:59:ae:26:06:35:9f:ba:e0:7a:a6:
         d2:36:1a:1f:7a:b4:88:67:e4:bd:7a:2c:9d:b2:dd:86:98:ca:
         a8:85:f9:f4:51:9e:ae:82:31:b9:76:91:9d:1a:2e:be:2f:8d:
         43:7f:b5:49:fd:74:b6:29:06:8c:74:39:80:d8:9f:80:be:1d:
         aa:93:92:09:c3:a7:ce:9f:c2:ef:3d:df:14:2e:15:e2:a0:c6:
         ce:86:c9:36:90:8b:13:55:8e:2f:05:55:61:67:f5:dd:02:d0:
         b6:49:19:d2:83:fc:ea:4c:e3:c9:51:ef:c5:a5:2c:8b:55:d7:
         1c:ff:32:ee:01:9b:2e:0e:d5:82:e0:ff:50:d9:e6:ba:6c:1c:
         75:18:70:b1:fa:40:4e:c9:ac:8e:57:8a:93:55:32:34:f7:7b:
         91:2d:fe:14:db:50:df:41:a5:b0:3d:23:2e:74:91:09:34:91:
         e3:17:a3:1a:95:73:96:0a:89:08:df:6a:a8:2a:74:66:63:a6:
         83:a3:ee:c0:6d:02:c0:8b:87:09:d3:19:27:a8:9f:2f:d0:40:
         9d:fe:97:98:10:62:22:e3:17:d7:7c:f9:14:a1:de:18:61:4e:
         68:99:7d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:11:34 2025 by rpki-client