Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1ee76909-9b37-3a23-a0f2-fb418303f00f.roa
File:                     1ee76909-9b37-3a23-a0f2-fb418303f00f.roa (raw, json)
Hash identifier:          Mtcst1HoMgd7GATg9s0CO4ZlDcq79n4NY1tM9dziyJA=
Subject key identifier:   46:AD:3E:A4:11:03:56:C5:41:50:78:72:94:50:46:B1:9E:EF:6B:87
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A81917452459DFBC82280
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1ee76909-9b37-3a23-a0f2-fb418303f00f.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20001
IP address blocks:        104.32.0.0/14 maxlen: 14
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:81:91:74:52:45:9d:fb:c8:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=cd1d27ac-2394-4e7c-b5ec-1f746c309da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0b:41:55:48:42:b8:e6:56:3e:82:d4:1c:f4:
                    e3:6f:ff:3a:94:7f:bd:e0:88:8d:30:5e:7f:6b:f7:
                    71:0f:75:ad:57:c5:69:15:01:c1:e7:e8:79:82:d0:
                    5a:4b:05:19:d2:5b:c9:ba:ed:1d:dc:bd:71:21:31:
                    f2:8b:05:48:0b:49:b8:75:0b:98:b5:2d:20:f6:30:
                    7a:47:ec:c3:19:dc:38:c9:0e:bf:5d:55:87:50:62:
                    f9:51:60:22:c8:f6:6d:d1:85:8a:10:bf:68:fc:12:
                    4f:d3:a1:e1:ea:1c:8c:4c:d4:3a:76:14:dd:a2:3d:
                    d0:37:bc:ae:36:d6:05:02:92:70:ea:c7:77:ee:1b:
                    18:50:8f:17:cd:84:37:8f:7e:d0:b7:67:c5:bb:db:
                    f4:5e:26:0b:90:c1:62:31:1e:c6:89:af:12:2c:bd:
                    f3:7c:e5:83:5f:ef:88:f3:99:1d:9f:38:c9:e1:2a:
                    20:45:ab:4f:9c:be:47:9c:b8:be:62:a1:0a:ec:4b:
                    4c:42:56:11:55:de:78:32:1f:42:e5:13:b5:d2:8f:
                    00:a6:dc:9d:99:20:b0:de:ad:ee:59:36:34:e4:5b:
                    d4:09:a5:1e:9a:84:b8:cb:c5:fb:ce:33:ec:b1:2f:
                    02:e6:b8:3b:a4:27:0c:34:66:a9:30:4d:68:c1:73:
                    1d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:AD:3E:A4:11:03:56:C5:41:50:78:72:94:50:46:B1:9E:EF:6B:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1ee76909-9b37-3a23-a0f2-fb418303f00f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.32.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:b3:2a:62:82:12:d3:29:25:fd:3a:18:7c:17:35:94:2e:e1:
         95:3e:54:1c:81:ef:33:b6:19:45:3d:33:c9:98:f2:0b:2a:fa:
         4c:b8:81:8e:9a:b2:cc:0f:7a:d9:29:2a:b6:a0:d8:69:22:0d:
         6e:fe:55:7d:7b:18:35:92:df:1f:0d:8d:b2:9e:b7:a7:cb:4c:
         30:c0:10:94:03:25:9b:48:29:f8:6e:e6:9e:a6:b7:ac:23:54:
         a1:b7:78:08:70:d0:1f:37:ee:8f:35:3e:30:ee:d8:61:c8:86:
         7a:d2:79:af:fd:1a:b6:a8:20:45:d8:32:2a:55:9a:93:72:8f:
         8b:ab:c2:38:b9:71:bc:58:66:83:df:4a:42:b1:1e:0c:e0:ce:
         e3:93:f3:c5:6c:c4:32:66:29:67:4a:4d:38:60:c9:f5:a5:8e:
         c3:44:97:94:62:2b:77:65:aa:41:9c:40:f7:20:f1:41:e9:7d:
         d0:7c:04:4d:30:a0:da:60:98:ed:d3:28:55:f4:58:ce:d3:8a:
         ba:cb:4b:ab:55:d7:cc:99:c3:bd:c8:1a:2f:1f:23:5a:9d:a2:
         e9:db:3b:3d:8d:a2:ef:cf:ef:ce:55:6b:a8:ac:01:03:40:66:
         7d:48:52:59:28:76:73:1f:5a:01:cb:cf:dc:af:25:60:d7:0a:
         e5:47:9d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:22:25 2025 by rpki-client