Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/33f05fb6-0310-3b53-8954-fea45fc8d88e.roa
File:                     33f05fb6-0310-3b53-8954-fea45fc8d88e.roa (raw, json)
Hash identifier:          h7p2lJgekvuNWNHU825W30wrb3mWuWx323vuy8uaBwk=
Subject key identifier:   F9:47:70:41:8D:22:76:B9:1A:EB:22:7C:22:A0:B7:42:4F:5B:50:1C
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037B02113BDBFEF4AEBCA6C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/33f05fb6-0310-3b53-8954-fea45fc8d88e.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     11427
IP address blocks:        65.31.192.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:02:11:3b:db:fe:f4:ae:bc:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=668fbc39-6d18-4771-8ca2-3c1824a80517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1c:06:db:41:87:f2:2f:e8:e8:02:6c:f1:f7:
                    bc:66:fb:8b:aa:97:51:0e:24:8b:46:c4:7c:79:1b:
                    78:93:b9:f5:d2:d6:92:f8:d8:aa:ed:68:70:fb:32:
                    60:c6:37:6d:9b:44:1a:a9:c5:6d:3c:07:07:bf:64:
                    3d:79:d1:bc:54:67:0b:0d:28:1d:cc:b2:6f:e8:20:
                    26:63:52:1d:fe:4c:1e:0d:6f:74:cb:22:a1:85:5f:
                    26:3e:34:85:8c:54:1f:b4:f3:95:0f:59:f5:0b:57:
                    e9:a3:44:31:a1:36:ee:c1:57:df:b8:a5:a8:dd:e3:
                    2b:83:10:36:37:16:b5:fc:0c:1d:e8:98:f9:76:f3:
                    40:1f:a7:44:80:e4:4b:41:37:2e:31:94:0d:b2:c4:
                    6e:bd:6a:05:98:c1:15:76:9f:46:79:21:87:dd:f1:
                    e9:be:ed:fd:f1:6d:e1:50:22:df:24:aa:44:05:b0:
                    31:60:03:39:1b:5d:a7:8d:95:a2:83:5b:87:e6:2b:
                    ae:c4:6d:42:0b:69:24:32:8c:ba:3a:a5:a7:a6:43:
                    c2:8f:ff:de:16:ee:56:0c:42:18:06:5f:4d:98:10:
                    5d:80:01:7a:de:0c:ff:e4:11:c6:95:05:2c:8d:7c:
                    d3:b4:96:ff:ca:e3:7b:a2:d0:d4:ef:ca:cd:dd:1c:
                    f4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:47:70:41:8D:22:76:B9:1A:EB:22:7C:22:A0:B7:42:4F:5B:50:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/33f05fb6-0310-3b53-8954-fea45fc8d88e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.31.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:a3:25:a8:85:96:37:cd:58:1c:31:34:40:56:d4:8b:1c:02:
         51:af:4a:7a:9a:c1:89:c5:07:86:ae:20:23:75:04:7c:63:9f:
         f7:99:38:eb:e4:4b:22:9c:49:dd:e7:43:04:1c:63:74:bd:ba:
         c0:1c:66:f4:00:14:23:93:0f:64:8c:e7:30:e5:f2:42:64:6b:
         ec:d7:29:6c:51:2b:f7:d3:b9:a1:23:df:fe:08:49:44:67:ea:
         55:43:ff:ec:41:b1:0a:18:ce:ec:de:58:cb:07:95:72:18:4d:
         c1:3b:2d:f5:b2:33:58:60:0e:72:b5:88:6a:47:f6:f0:c0:b3:
         f1:0d:2e:fc:2e:21:56:b5:0f:38:38:5f:fd:5d:a4:d3:da:55:
         d7:5e:9e:0b:66:da:b3:bd:65:7e:db:8e:3e:de:69:09:78:5c:
         3a:b0:d1:07:76:46:a4:24:a9:23:57:97:1f:76:9c:3e:da:1f:
         68:35:00:e9:22:66:09:a9:70:30:4e:7c:42:de:4d:77:9c:ce:
         5d:8d:9f:ff:28:24:90:93:d4:1b:ca:a9:81:a8:13:a6:ef:48:
         5d:91:99:28:6f:78:dd:d2:33:38:58:d6:05:1b:09:99:65:d0:
         42:df:b0:be:5a:4e:4f:d3:31:91:86:87:54:51:d3:95:34:c0:
         98:20:52:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDewIRO9v+9K68psAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
NjY4ZmJjMzktNmQxOC00NzcxLThjYTItM2MxODI0YTgwNTE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRwG20GH8i/o6AJs8fe8ZvuLqpdRDiSLRsR8
eRt4k7n10taS+Niq7Whw+zJgxjdtm0QaqcVtPAcHv2Q9edG8VGcLDSgdzLJv6CAm
Y1Id/kweDW90yyKhhV8mPjSFjFQftPOVD1n1C1fpo0QxoTbuwVffuKWo3eMrgxA2
Nxa1/Awd6Jj5dvNAH6dEgORLQTcuMZQNssRuvWoFmMEVdp9GeSGH3fHpvu398W3h
UCLfJKpEBbAxYAM5G12njZWig1uH5iuuxG1CC2kkMoy6OqWnpkPCj//eFu5WDEIY
Bl9NmBBdgAF63gz/5BHGlQUsjXzTtJb/yuN7otDU78rN3Rz03QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPlHcEGNIna5GusifCKgt0JPW1AcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMzNmMDVmYjYtMDMxMC0z
YjUzLTg5NTQtZmVhNDVmYzhkODhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQR/AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA2jJaiFljfNWBwxNEBW1IscAlGvSnqawYnFB4auICN1BHxjn/eZOOvk
SyKcSd3nQwQcY3S9usAcZvQAFCOTD2SM5zDl8kJka+zXKWxRK/fTuaEj3/4ISURn
6lVD/+xBsQoYzuzeWMsHlXIYTcE7LfWyM1hgDnK1iGpH9vDAs/ENLvwuIVa1Dzg4
X/1dpNPaVddengtm2rO9ZX7bjj7eaQl4XDqw0Qd2RqQkqSNXlx92nD7aH2g1AOki
ZgmpcDBOfELeTXeczl2Nn/8oJJCT1BvKqYGoE6bvSF2RmShveN3SMzhY1gUbCZll
0ELfsL5aTk/TMZGGh1RR05U0wJggUpE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:05:54 2025 by rpki-client