Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/185f0351-e12d-3b4c-b584-a0c8cb9aeefc.roa
File:                     185f0351-e12d-3b4c-b584-a0c8cb9aeefc.roa (raw, json)
Hash identifier:          qDIPnyalJU00/dis2p+MA4H//4GiNxf7TZxpv1JOIlg=
Subject key identifier:   B5:9C:18:EA:DB:94:DE:7B:10:F4:10:BA:F6:77:47:BD:87:56:2E:2E
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A7D0C1817B2FD4525F200
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/185f0351-e12d-3b4c-b584-a0c8cb9aeefc.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     12271
IP address blocks:        24.97.200.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:7d:0c:18:17:b2:fd:45:25:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=978edffd-6e99-443d-bddf-9dc21e457233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:28:68:e7:9f:e5:2c:b8:1f:75:c0:36:be:64:
                    fa:78:45:cb:df:ee:e4:eb:81:17:1f:9c:a3:89:b7:
                    b0:d6:20:eb:21:30:ce:2f:c5:be:6c:61:26:b3:72:
                    b4:50:e8:41:66:81:69:40:e9:28:1e:9a:a6:32:1f:
                    6f:59:03:30:a8:b5:c1:55:58:82:e0:b2:f8:96:4f:
                    91:e0:3e:75:25:c8:51:24:1f:b9:23:05:95:6f:ac:
                    16:71:24:46:de:e0:65:32:72:ef:43:0e:42:f0:d2:
                    16:2d:19:9a:07:5c:7f:b0:03:61:74:fe:a1:f1:ba:
                    0c:85:40:42:9f:45:1d:97:0d:48:1f:c1:b5:33:cc:
                    c6:df:1e:c8:90:94:d8:92:a2:80:71:9e:60:5b:52:
                    42:17:fd:6a:d1:09:18:f5:50:34:d6:c0:00:07:54:
                    a0:ce:33:ef:f8:41:ba:22:c8:20:c8:7a:19:50:bd:
                    8c:e8:44:19:de:20:71:ef:2d:1e:c5:7f:c3:72:3a:
                    89:5d:45:47:bb:27:fe:a8:b7:4d:b7:5e:95:90:ec:
                    52:f6:de:98:f6:00:09:92:fb:5e:3b:fd:77:d8:dc:
                    e0:95:ed:ba:02:5b:ce:1c:d6:fd:9c:50:33:e5:d0:
                    fc:16:21:3c:e1:a0:22:59:94:84:2a:50:64:ec:ab:
                    aa:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:9C:18:EA:DB:94:DE:7B:10:F4:10:BA:F6:77:47:BD:87:56:2E:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/185f0351-e12d-3b4c-b584-a0c8cb9aeefc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.97.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:56:76:7a:77:8c:ab:90:10:a6:33:a5:be:06:03:45:03:e3:
         6e:fa:3e:4a:61:13:d2:59:fc:0c:cc:d3:c2:90:56:c0:e1:25:
         cc:4b:be:26:3f:74:b6:8d:22:51:2e:7b:72:6a:57:16:a9:68:
         9f:81:1e:96:45:16:60:50:ae:80:2c:90:5b:58:1c:94:02:03:
         19:eb:97:c1:de:27:1c:4f:a8:e6:28:34:f1:67:ec:e8:c2:f3:
         ee:b5:7e:49:66:49:3e:8d:87:38:36:6c:98:86:5d:dd:5e:a3:
         7a:38:e3:2c:6c:e9:66:06:11:7a:c3:8f:8d:1d:e1:52:81:22:
         f0:2b:b1:34:70:5b:93:31:91:01:67:c8:14:9d:cb:74:09:54:
         e0:16:ce:1c:a1:1e:dd:d6:23:1c:51:ce:e4:31:1e:60:7f:6d:
         47:10:90:03:47:60:de:72:76:f5:89:d3:69:19:5d:92:9e:1d:
         e3:b6:a9:c8:e3:ef:bf:c6:3f:47:a3:ba:58:ad:85:99:29:2d:
         d9:20:f6:7e:96:b1:ae:f2:10:b8:b2:8b:37:7a:00:29:36:15:
         e6:7e:00:e1:74:d6:8c:1a:71:70:69:e2:04:1b:c0:09:66:a7:
         29:ed:8f:96:96:c1:17:dc:3d:89:3f:12:e2:9e:57:ed:83:cf:
         f3:4a:33:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDen0MGBey/UUl8gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
OTc4ZWRmZmQtNmU5OS00NDNkLWJkZGYtOWRjMjFlNDU3MjMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSho55/lLLgfdcA2vmT6eEXL3+7k64EXH5yj
ibew1iDrITDOL8W+bGEms3K0UOhBZoFpQOkoHpqmMh9vWQMwqLXBVViC4LL4lk+R
4D51JchRJB+5IwWVb6wWcSRG3uBlMnLvQw5C8NIWLRmaB1x/sANhdP6h8boMhUBC
n0Udlw1IH8G1M8zG3x7IkJTYkqKAcZ5gW1JCF/1q0QkY9VA01sAAB1SgzjPv+EG6
IsggyHoZUL2M6EQZ3iBx7y0exX/DcjqJXUVHuyf+qLdNt16VkOxS9t6Y9gAJkvte
O/132Nzgle26AlvOHNb9nFAz5dD8FiE84aAiWZSEKlBk7KuqGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLWcGOrblN57EPQQuvZ3R72HVi4uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMTg1ZjAzNTEtZTEyZC0z
YjRjLWI1ODQtYTBjOGNiOWFlZWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGGHIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAApWdnp3jKuQEKYzpb4GA0UD4276PkphE9JZ/AzM08KQVsDhJcxLviY/
dLaNIlEue3JqVxapaJ+BHpZFFmBQroAskFtYHJQCAxnrl8HeJxxPqOYoNPFn7OjC
8+61fklmST6Nhzg2bJiGXd1eo3o44yxs6WYGEXrDj40d4VKBIvArsTRwW5MxkQFn
yBSdy3QJVOAWzhyhHt3WIxxRzuQxHmB/bUcQkANHYN5ydvWJ02kZXZKeHeO2qcjj
77/GP0ejulithZkpLdkg9n6Wsa7yELiyizd6ACk2FeZ+AOF01owacXBp4gQbwAlm
pyntj5aWwRfcPYk/EuKeV+2Dz/NKM7U=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:06:40 2025 by rpki-client