Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1c6cb189-2622-3572-90c9-04f29862fb35.roa
File:                     1c6cb189-2622-3572-90c9-04f29862fb35.roa (raw, json)
Hash identifier:          82Sm9M1xINjx5sj7NVk/NNZWkv5RNZrH61ToleUQH2c=
Subject key identifier:   39:E5:53:65:CB:7A:62:A9:E6:D1:00:8E:AC:2F:01:E3:A5:ED:FB:22
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037AEBAD9E07A48970FFDE00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1c6cb189-2622-3572-90c9-04f29862fb35.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     10796
IP address blocks:        24.209.64.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:eb:ad:9e:07:a4:89:70:ff:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=b6a500e3-417e-4397-94c9-bfc891aedf46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:92:8a:3b:9f:70:1b:b9:08:df:bc:7b:13:29:
                    91:c5:22:7f:f6:66:1f:00:ee:a3:a6:e3:43:1d:1b:
                    92:dd:33:38:06:1e:a9:f1:ae:9d:44:1c:c8:f3:0d:
                    75:2e:00:46:a2:fb:a5:30:a0:c3:33:77:b4:09:fa:
                    81:cc:c8:5a:8e:9d:20:83:8e:5b:a3:5c:b6:76:65:
                    27:3d:54:04:50:16:6d:c0:89:f2:3b:78:84:a8:e1:
                    1c:87:2c:02:20:e9:99:ae:ce:e2:59:7a:7a:14:0c:
                    a8:be:5d:bd:63:b7:55:14:1e:30:f0:db:db:c6:08:
                    51:74:56:d9:5e:10:08:30:83:59:a3:14:a3:36:c3:
                    68:66:d5:70:94:e8:06:13:c6:8d:77:3f:7d:4a:3d:
                    73:72:03:85:f1:bb:32:34:7d:7e:6e:f1:95:19:9f:
                    58:0c:8e:ed:db:ea:d0:05:46:fc:8e:68:e0:49:07:
                    68:fd:93:c5:8c:b9:5a:9f:41:46:52:c9:86:e8:ed:
                    3d:a7:f2:b1:37:05:cf:5a:63:fb:a4:0e:e5:50:a8:
                    82:7d:cc:af:c7:27:09:08:d8:8c:7d:03:7d:a5:f6:
                    2d:af:93:a1:e2:85:1c:91:1a:76:59:65:aa:4c:63:
                    7f:2c:b4:60:5c:18:a6:9b:69:ee:a6:d9:8a:04:05:
                    32:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E5:53:65:CB:7A:62:A9:E6:D1:00:8E:AC:2F:01:E3:A5:ED:FB:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1c6cb189-2622-3572-90c9-04f29862fb35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.209.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:13:f8:2c:74:df:f2:c0:dd:87:53:14:67:5e:97:82:9b:93:
         5c:e0:76:54:e9:bc:a7:ec:6a:dd:d6:c1:cc:5b:42:7b:84:29:
         bd:92:5e:40:a7:af:23:ee:f3:11:c4:2e:4f:b4:42:ac:b5:84:
         9d:7d:d6:7a:8f:90:b0:98:7d:a5:fd:9e:84:62:56:4c:53:99:
         8d:59:35:0d:4b:1b:f6:3b:05:9f:cf:d3:61:2a:a8:0c:af:cd:
         39:06:3c:11:a2:c2:d0:e2:96:43:19:d0:af:4e:79:be:13:b9:
         75:74:15:81:63:c7:ba:19:a4:89:30:c1:aa:53:2a:57:bf:72:
         11:15:4c:89:21:65:b8:31:34:e4:d2:be:c6:b3:de:60:7e:aa:
         89:68:03:b4:e3:3d:b8:88:08:ac:99:c2:ff:34:93:71:a9:4f:
         67:8a:0a:0e:3e:f4:24:14:8d:e7:c8:bc:37:d7:31:2e:0c:3e:
         18:26:8b:fa:66:c8:68:31:8b:0c:70:51:c3:71:cf:33:f4:60:
         0c:0b:f0:b5:47:09:d2:cd:7c:71:5e:57:49:68:e1:7e:68:e5:
         7d:01:1d:aa:98:d2:11:be:65:b0:02:9e:8f:77:56:c2:bb:ad:
         eb:05:b2:c9:51:47:57:06:05:16:ae:1a:52:21:3a:82:bf:26:
         4c:64:71:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:37:08 2025 by rpki-client