Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2e824b75-3d3d-3e4e-ab6b-16a05d24e29c.roa
File:                     2e824b75-3d3d-3e4e-ab6b-16a05d24e29c.roa (raw, json)
Hash identifier:          E2m+KZI/A4nEGeAow1dsiTgOzSQDxq/Fwr5CaQE8THg=
Subject key identifier:   92:35:14:F5:3D:87:DE:20:D4:28:40:8B:29:A3:BF:E2:9E:1A:41:96
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A54A43A14434C7CEAD510
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2e824b75-3d3d-3e4e-ab6b-16a05d24e29c.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     10796
IP address blocks:        24.164.64.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:54:a4:3a:14:43:4c:7c:ea:d5:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=92aed9cb-9503-4005-9819-41756c7d2f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b3:9e:81:a1:b2:52:f3:b2:63:ac:07:1f:77:
                    0f:ff:44:20:6d:63:e1:ed:b3:68:d2:7d:31:20:fc:
                    b5:ed:bf:24:3e:c9:47:6d:d5:49:7e:5f:fb:1f:3e:
                    21:06:cf:94:90:56:9b:6c:25:ed:45:6d:de:82:6c:
                    4f:c6:1f:65:ce:40:04:a4:f1:34:08:fa:d9:d0:1d:
                    f9:a2:53:fc:b5:72:9b:6e:84:98:51:5a:43:7e:0e:
                    e5:13:a0:34:27:b2:55:1d:96:61:78:98:a2:81:e7:
                    4d:1b:25:08:32:50:4d:6a:4c:fb:aa:76:45:e1:8e:
                    e6:b0:86:65:a4:33:c8:a9:70:dc:8a:52:af:ba:d0:
                    e6:94:c5:34:95:03:bd:b2:3d:9d:12:6d:94:d0:34:
                    b2:bb:4b:b9:5c:99:ce:a7:df:6e:ff:31:08:7e:35:
                    8a:06:c6:0f:fc:3b:de:5b:bf:a4:8f:30:ad:3d:15:
                    7a:52:b2:97:45:63:60:cb:f8:14:c9:3a:1e:4c:9c:
                    79:28:7f:8b:f8:62:ad:7b:fb:bf:dd:25:9e:38:cd:
                    5b:a7:9d:cb:fb:05:ff:be:ec:47:fd:e6:de:ea:de:
                    de:15:e6:99:0e:56:a8:c0:6f:b3:52:6c:c8:6a:3a:
                    c1:06:81:09:7f:a7:02:0f:2b:89:5a:a9:e4:87:e6:
                    95:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:35:14:F5:3D:87:DE:20:D4:28:40:8B:29:A3:BF:E2:9E:1A:41:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2e824b75-3d3d-3e4e-ab6b-16a05d24e29c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.164.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:7c:bc:0e:db:c8:e6:e4:86:4f:38:c2:98:e9:bf:f0:d0:45:
         db:3a:ec:4c:4c:e0:b8:1c:ac:8f:22:0f:fc:7a:51:3a:a3:bc:
         f9:57:59:eb:23:70:6b:15:40:3e:ca:f6:5f:cb:ec:a7:46:2b:
         5d:df:40:68:a6:7a:38:de:5c:5f:84:31:9e:95:a2:dc:24:ca:
         ca:67:4d:15:8f:73:a3:ea:b2:9f:51:98:1d:62:70:5b:a1:bd:
         08:9c:2b:cf:37:fa:3a:61:73:b0:2d:3f:8e:3a:16:c1:39:28:
         94:bc:f0:2d:42:2a:5b:d3:f2:77:3b:91:a0:35:57:1e:3e:6a:
         74:31:77:16:71:67:cc:f5:85:2a:74:84:52:43:90:89:52:fe:
         64:78:80:44:40:b1:56:4a:26:e6:e2:7d:dc:a2:37:74:2b:dd:
         8a:62:d0:8b:1d:b7:69:89:e4:ca:0e:e8:03:24:31:6d:6d:c5:
         cb:ae:7f:da:4b:dc:69:ee:f3:47:c6:39:11:be:cd:ac:f9:7a:
         da:29:b2:55:a2:6b:73:a6:13:d0:56:3e:9b:dc:b9:fe:d7:89:
         4a:5a:2e:04:d5:60:e8:00:04:44:34:f8:f9:b4:8e:79:81:3a:
         79:48:b2:0f:75:08:e3:d5:05:5b:e1:12:cc:96:68:ca:39:9b:
         cf:99:ce:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:05:15 2025 by rpki-client