Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2b14ef75-ec9a-3b27-8ddb-2634c1a69d62.roa
File:                     2b14ef75-ec9a-3b27-8ddb-2634c1a69d62.roa (raw, json)
Hash identifier:          5E7bjWBw6XoNZQU7yWOsip8veltDL4Vdg27h0ChwexY=
Subject key identifier:   0D:ED:0B:BC:B7:4B:8A:80:AE:13:4A:11:60:49:16:01:9D:45:19:8C
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A5A2FFF569D79C01DB9E0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2b14ef75-ec9a-3b27-8ddb-2634c1a69d62.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     10796
IP address blocks:        98.123.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:5a:2f:ff:56:9d:79:c0:1d:b9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=ecc7c92a-05f7-4f6a-8248-999087d97b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f6:70:04:e3:6a:fa:80:8a:e8:1c:22:a5:e5:
                    6f:7e:64:2e:3f:b3:6f:63:52:7c:a1:46:de:d4:45:
                    a6:4b:07:37:94:01:19:71:19:5b:c2:df:49:6d:14:
                    f6:e1:64:d4:46:96:2d:e3:21:67:af:f1:2d:8b:72:
                    99:51:6b:45:5c:69:cc:eb:eb:44:23:b8:83:20:b5:
                    1c:52:86:22:e0:6a:09:6f:27:9c:f5:fd:57:08:46:
                    2c:58:02:60:9e:36:65:23:57:bf:95:ca:b3:23:34:
                    2f:7a:c4:0d:b8:42:90:8b:da:1b:6b:9e:e2:cf:a1:
                    8d:cb:6c:d4:6a:22:80:9d:a1:5c:60:e7:0b:be:3e:
                    7f:25:86:33:c8:74:80:a1:94:c4:a7:bd:fe:25:38:
                    bd:94:ad:aa:78:c6:84:aa:ba:1c:78:fc:50:0a:c1:
                    a4:f1:0f:0c:f0:24:df:f9:af:44:bd:98:e0:04:88:
                    6c:14:ad:c9:55:ce:fa:a1:f0:e5:9b:79:6b:ed:76:
                    21:59:ba:fa:93:7a:81:a0:b2:b3:5e:b7:97:13:56:
                    42:85:34:0e:63:b9:2d:d8:d5:80:28:75:b9:81:ab:
                    dc:03:8b:a0:6c:7f:5c:f0:1d:57:db:b1:89:7d:f4:
                    65:d7:33:90:64:07:34:22:ef:64:df:74:ed:9f:5b:
                    62:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:ED:0B:BC:B7:4B:8A:80:AE:13:4A:11:60:49:16:01:9D:45:19:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2b14ef75-ec9a-3b27-8ddb-2634c1a69d62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.123.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:06:12:ff:29:fc:ef:ab:e4:a5:22:ba:ad:a8:46:06:98:53:
         07:05:60:97:d1:db:f6:a5:3f:fc:61:22:27:76:b0:bd:27:00:
         4a:8c:c6:b4:85:f5:aa:7d:35:40:40:ef:2d:26:e7:4d:89:84:
         ac:38:00:93:6c:36:25:94:fd:2a:35:9b:56:f3:ab:aa:e3:e9:
         10:33:ea:29:9a:af:41:d3:97:21:7d:cf:36:4c:ca:df:c9:50:
         46:b2:eb:f8:91:00:bc:02:09:1e:01:c2:de:52:29:35:ce:aa:
         55:34:09:f0:ff:66:40:00:ee:78:db:e9:52:9e:4f:8c:f0:1b:
         3b:97:2f:1a:98:4f:5a:c6:6a:66:6c:e0:f0:02:ea:5c:c3:45:
         bc:63:59:79:0d:b5:60:d2:8f:90:dd:83:4f:76:d9:4a:f9:2a:
         f9:3b:50:11:91:fc:05:69:68:ae:37:5e:be:54:90:71:60:f6:
         df:38:55:63:e1:47:9e:bd:61:89:71:e5:94:07:a2:a7:37:f2:
         d2:7b:74:d2:b0:3d:a5:f9:33:16:03:ff:6b:d7:f2:ff:3f:9d:
         4b:9a:18:30:a5:7e:b0:a9:5b:7d:c0:21:fa:e0:0e:6f:e8:3f:
         4c:7b:59:0f:93:38:91:4f:93:ac:62:6f:94:ca:f1:f5:64:5a:
         21:9f:31:00
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEgDelov/1adecAdueAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
ZWNjN2M5MmEtMDVmNy00ZjZhLTgyNDgtOTk5MDg3ZDk3YjI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPZwBONq+oCK6BwipeVvfmQuP7NvY1J8oUbe
1EWmSwc3lAEZcRlbwt9JbRT24WTURpYt4yFnr/Eti3KZUWtFXGnM6+tEI7iDILUc
UoYi4GoJbyec9f1XCEYsWAJgnjZlI1e/lcqzIzQvesQNuEKQi9oba57iz6GNy2zU
aiKAnaFcYOcLvj5/JYYzyHSAoZTEp73+JTi9lK2qeMaEqrocePxQCsGk8Q8M8CTf
+a9EvZjgBIhsFK3JVc76ofDlm3lr7XYhWbr6k3qBoLKzXreXE1ZChTQOY7kt2NWA
KHW5gavcA4ugbH9c8B1X27GJffRl1zOQZAc0Iu9k33Ttn1tiqQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFA3tC7y3S4qArhNKEWBJFgGdRRmMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMmIxNGVmNzUtZWM5YS0z
YjI3LThkZGItMjYzNGMxYTY5ZDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYnswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAfwYS/yn876vkpSK6rahGBphTBwVgl9Hb9qU//GEiJ3awvScASozGtIX1
qn01QEDvLSbnTYmErDgAk2w2JZT9KjWbVvOrquPpEDPqKZqvQdOXIX3PNkzK38lQ
RrLr+JEAvAIJHgHC3lIpNc6qVTQJ8P9mQADueNvpUp5PjPAbO5cvGphPWsZqZmzg
8ALqXMNFvGNZeQ21YNKPkN2DT3bZSvkq+TtQEZH8BWlorjdevlSQcWD23zhVY+FH
nr1hiXHllAeipzfy0nt00rA9pfkzFgP/a9fy/z+dS5oYMKV+sKlbfcAh+uAOb+g/
THtZD5M4kU+TrGJvlMrx9WRaIZ8xAA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:06:08 2025 by rpki-client