Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1bc14be0-ddaa-3435-b468-d91885b3ada4.roa
File:                     1bc14be0-ddaa-3435-b468-d91885b3ada4.roa (raw, json)
Hash identifier:          TVPFf3oskX9PWntKDo15B7ktZQQEIWJN7g/OYmw6Cmk=
Subject key identifier:   57:66:03:6A:0A:3C:6E:B2:43:E2:49:6C:9C:E7:F8:10:B4:AC:2B:3F
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037AEDA5C93D0349751F4200
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1bc14be0-ddaa-3435-b468-d91885b3ada4.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     10796
IP address blocks:        72.128.192.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:ed:a5:c9:3d:03:49:75:1f:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=1f20b7a1-a0f9-4f6d-8b59-3cad8ce4b577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8a:5d:d5:be:8a:92:4f:18:5b:5c:e7:2e:76:
                    0b:d9:7d:1c:50:29:91:e1:32:be:44:38:d7:37:a1:
                    49:5e:1f:70:9a:2d:f8:d0:a5:b1:9c:97:5d:d4:6e:
                    19:67:f8:e7:60:3c:2f:d4:38:a1:59:f9:c8:58:dd:
                    61:11:5d:4d:a7:aa:81:9b:82:59:51:ac:26:ef:2d:
                    d3:71:c2:a0:78:7f:6d:5b:a6:6e:f7:59:70:1f:c9:
                    0c:cb:ca:35:ac:98:92:3a:43:bd:00:8b:62:71:b8:
                    d4:2f:d1:80:e5:26:cf:11:3a:c1:29:57:70:9c:74:
                    f4:19:2b:8d:2c:31:cf:e6:e2:09:41:9d:a5:b8:26:
                    b3:06:55:10:88:a4:9e:8a:d1:c5:6d:fa:84:75:77:
                    38:36:3e:d7:4e:06:51:15:28:dd:3e:89:4e:29:bc:
                    b3:08:f1:f4:ff:d6:f8:df:bc:ef:24:d8:f4:f4:b6:
                    04:4d:8a:43:b9:05:37:bf:32:73:11:31:fd:e7:ec:
                    b9:8b:56:cb:b0:f0:fd:ea:38:f2:b9:66:1d:98:66:
                    a5:c2:ad:d9:c5:36:a0:c0:79:c5:b3:77:e4:73:0f:
                    07:da:dc:28:f8:1b:c5:c1:1e:ee:04:e7:34:c7:12:
                    ac:14:2c:ed:f3:4e:a9:ad:65:ba:ea:15:f7:4f:a4:
                    c1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:66:03:6A:0A:3C:6E:B2:43:E2:49:6C:9C:E7:F8:10:B4:AC:2B:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1bc14be0-ddaa-3435-b468-d91885b3ada4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.128.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:fb:5e:4f:4b:7a:4b:bb:d6:6e:16:08:67:64:2b:2c:ee:6f:
         1b:c6:81:0b:c9:6d:f0:17:83:24:48:8b:89:af:1f:98:a4:ba:
         3c:2b:cf:59:d2:e7:ca:81:27:e2:14:aa:fc:47:54:58:15:b7:
         dd:6f:d2:ad:ae:9e:93:43:aa:31:75:d3:1c:b7:dd:66:d7:f2:
         c9:73:7c:b4:3b:ac:b2:4a:f5:e3:04:df:b7:a3:4b:f9:be:b3:
         75:b2:af:0f:3c:a3:c0:f3:fa:97:58:fc:b0:7b:75:63:5c:02:
         71:ab:bf:4f:58:1c:a8:80:20:e8:50:7c:33:f5:7d:3e:76:71:
         c0:db:13:3b:31:1c:32:0f:e0:df:fe:cf:f5:46:a4:6b:e3:ce:
         d7:90:6a:de:8e:23:ca:f9:ca:c2:f9:9d:16:53:94:ea:75:b9:
         11:3c:77:e4:1b:f1:a2:72:54:13:28:f2:38:9b:35:a8:ea:d5:
         46:48:b2:88:49:a9:7f:16:a9:3c:5f:eb:2f:25:a7:e4:ce:ff:
         da:f2:b1:6a:b5:26:8b:99:61:5a:58:11:d6:21:db:f6:25:f9:
         9d:8b:6c:01:0c:d6:cd:9e:25:99:ff:2b:0b:c6:9f:8e:c8:e0:
         19:fa:59:6f:0c:76:ae:57:10:7c:40:80:2b:29:68:11:1d:10:
         50:bd:c1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:30:11 2025 by rpki-client