Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2d14b94d-66db-3cb6-a2db-50cdd1751ec7.roa
File:                     2d14b94d-66db-3cb6-a2db-50cdd1751ec7.roa (raw, json)
Hash identifier:          mgZZUj9WdkiLzhn8kleW658eyGFwUGZWVaDcyv7fc9Y=
Subject key identifier:   56:36:F0:67:95:AB:F3:8A:B4:B8:54:1E:64:3A:3A:CF:46:3A:1B:F5
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A5F2FE3B63148019E2D40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2d14b94d-66db-3cb6-a2db-50cdd1751ec7.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     10796
IP address blocks:        65.29.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:5f:2f:e3:b6:31:48:01:9e:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=202668bc-14fc-4453-bd75-a8ab1312c49e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2f:24:da:d3:74:ef:f3:c6:fd:ce:26:54:d3:
                    a3:86:b1:78:d3:ec:7f:53:f6:4b:44:35:13:40:aa:
                    a0:e1:f4:2d:d9:a5:ac:7f:35:aa:0f:b8:82:ec:86:
                    79:e9:b1:32:7e:70:11:8c:7b:69:ea:e0:6a:11:43:
                    36:f7:07:ff:fe:c0:fd:67:27:63:e6:aa:ec:f0:4b:
                    14:a9:e9:64:ba:76:d8:3d:49:85:fa:24:49:39:2f:
                    eb:ed:e8:5b:d7:72:21:3b:d9:c8:d4:de:7b:69:11:
                    d4:30:83:11:ac:b7:80:09:bc:ec:ff:e0:71:30:b7:
                    e8:f9:fd:d5:5f:8c:d1:43:40:ce:61:cf:8b:c4:42:
                    0c:c3:1f:14:05:38:63:af:84:86:6a:ff:f3:b3:6f:
                    89:8d:5a:1e:08:8d:d3:4a:84:12:53:ca:d3:9f:13:
                    10:ac:ae:20:df:11:7a:24:7e:c6:6d:a0:ab:78:a7:
                    68:d1:bf:c4:53:3e:00:5f:57:08:11:43:4c:93:17:
                    48:d4:11:f4:d5:41:b0:db:08:a0:e4:f2:d6:fd:c8:
                    77:a0:64:b4:61:20:fe:5c:03:57:23:41:5a:6b:bb:
                    a1:9f:06:e8:22:12:2e:16:ed:21:d4:ac:a3:03:83:
                    d0:ad:ee:8b:90:75:95:89:03:b9:30:dd:7c:d7:9f:
                    e9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:36:F0:67:95:AB:F3:8A:B4:B8:54:1E:64:3A:3A:CF:46:3A:1B:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2d14b94d-66db-3cb6-a2db-50cdd1751ec7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.29.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:8c:29:2b:45:68:5d:93:8c:a0:ca:92:f3:ed:61:70:92:b7:
         14:dd:89:64:82:28:e3:6f:50:f1:5f:72:38:70:72:3f:eb:2a:
         e6:9c:f7:be:01:fe:a0:f0:83:22:7b:b4:61:f3:12:ce:b2:84:
         3a:2c:c9:91:8c:c1:5c:83:fb:e9:27:89:9d:84:68:e7:5c:0e:
         c6:f3:17:cb:30:f3:b9:f4:ad:e4:5e:eb:25:0a:8e:9d:5d:40:
         5d:8e:a1:0f:44:cf:66:91:3d:8b:9d:c6:6a:30:de:bb:e9:66:
         59:9c:67:57:7f:26:56:35:c8:7b:a3:ed:74:d6:5e:ed:92:da:
         bd:9e:5c:14:ab:aa:1c:49:2b:24:cb:67:5e:7e:fa:b8:55:e4:
         b1:dd:34:80:27:fe:0c:cc:dd:7c:b1:0c:f4:de:f4:26:92:d1:
         ad:bf:d4:4b:56:5b:fc:02:87:49:3c:9e:21:25:e7:98:f7:11:
         34:e8:24:4c:dd:84:00:0c:0d:48:cf:4b:87:ec:09:55:ab:25:
         2e:99:c7:06:85:65:b7:54:a2:2d:08:ec:79:75:86:f0:9a:17:
         8d:e8:0c:cc:95:9a:da:1a:65:ac:e5:39:67:60:97:a0:39:0b:
         aa:0a:8d:f3:b7:9d:32:01:4a:ac:25:de:38:1a:4f:5a:dd:29:
         1f:f5:8e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 04:28:30 2025 by rpki-client