Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3060b17b-fa75-3114-8287-9271a4896296.roa
File:                     3060b17b-fa75-3114-8287-9271a4896296.roa (raw, json)
Hash identifier:          3Ria6984ty4aXF/9qlJ5N7i6Px+Tegn3Q0++qPLyGj8=
Subject key identifier:   3C:52:82:F1:57:F3:0D:87:6F:3A:F4:A9:D4:0E:3F:6E:88:F6:50:AC
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A8649411B3CAE075BA8C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3060b17b-fa75-3114-8287-9271a4896296.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20001
IP address blocks:        64.183.152.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:86:49:41:1b:3c:ae:07:5b:a8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=9b360b16-17ae-45ef-826c-f478fce51de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5a:7f:45:11:c1:c3:54:2b:f3:2c:82:66:83:
                    2f:51:65:78:df:be:35:ce:d3:5b:53:96:29:cd:08:
                    28:be:52:3e:61:d0:34:4f:b6:05:20:f5:98:26:4d:
                    b2:bc:8f:71:3a:2c:36:a3:66:3e:b6:6f:cf:2b:94:
                    16:36:0b:6d:19:12:fe:df:df:2a:93:12:b7:aa:ab:
                    70:2d:d0:5d:d4:01:7a:a5:b7:a0:0a:cf:9c:a1:c6:
                    bb:e5:95:d4:a4:62:19:87:cc:be:08:56:01:95:3a:
                    74:c9:8f:13:f7:7f:40:6f:d3:ff:8e:02:3e:9d:75:
                    83:0e:90:a6:a6:b6:15:97:dd:b3:53:8b:3f:fd:27:
                    a5:1c:ef:d2:7e:e2:2c:97:e4:c5:60:0b:32:9c:42:
                    2a:57:9a:a1:ab:a3:b5:fb:13:87:76:52:e2:1a:85:
                    5b:85:83:3d:32:04:d6:19:14:52:4d:18:5a:2a:fc:
                    c0:00:a4:8c:96:23:17:8a:73:29:1a:de:f3:7c:31:
                    1e:59:fc:a1:ec:97:ca:2b:23:16:94:34:82:14:1f:
                    99:54:43:f4:df:f6:69:d4:d7:c0:5c:97:c8:9c:c2:
                    71:b3:d3:10:3f:fb:bf:36:a2:e2:54:ef:01:20:c7:
                    99:fd:db:b3:98:9f:4e:6a:06:1e:df:aa:ec:90:38:
                    67:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:52:82:F1:57:F3:0D:87:6F:3A:F4:A9:D4:0E:3F:6E:88:F6:50:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3060b17b-fa75-3114-8287-9271a4896296.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.183.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:e1:80:b7:9f:8a:c4:75:17:e9:56:29:84:64:be:ff:ad:9c:
         53:31:39:ee:4d:2a:c5:4d:9e:bc:9a:92:38:ca:f4:8e:0e:0e:
         6b:d6:5a:21:49:f0:1d:b0:74:5f:48:0c:5e:ac:29:fc:7f:af:
         67:01:be:31:25:5f:70:80:d3:4f:cc:c9:28:f3:ec:1d:74:da:
         81:b8:bf:cc:c4:d6:56:60:ef:67:e6:04:30:69:cd:93:4a:9f:
         c6:64:8c:2e:f8:61:fa:ab:cb:68:bc:16:f8:59:f6:f4:6b:3c:
         81:6d:b8:73:04:38:0b:b1:7a:fe:02:6e:06:85:19:1c:1a:be:
         d8:b1:e2:19:5f:79:32:af:bb:b8:96:81:43:b2:a5:b0:3d:aa:
         a4:6b:7f:7c:cf:95:e2:d0:b7:3d:72:45:c8:f1:7f:ef:4c:ca:
         c5:14:05:44:14:c5:5c:db:90:5c:e5:c5:af:d4:b2:71:a2:d8:
         5f:06:08:74:19:33:1c:54:1f:3a:34:f6:4d:56:41:ce:40:e7:
         5f:10:fa:30:ab:d7:01:67:64:a5:93:2e:65:5b:4c:43:14:2a:
         b8:b8:15:21:07:7c:96:ed:b2:ae:5d:1d:eb:d8:fb:09:2c:c9:
         69:ee:01:5a:11:70:41:4e:a1:0b:6f:78:9e:48:49:9a:e1:41:
         fa:71:0d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:37:16 2025 by rpki-client