Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/36ef084c-7c22-3d05-94b1-49ccd561fd95.roa
File:                     36ef084c-7c22-3d05-94b1-49ccd561fd95.roa (raw, json)
Hash identifier:          fIZmERyJVHsWRAKmZiclGz7pN85SJjqPbWq3BGdjcq8=
Subject key identifier:   17:E0:A6:EC:36:AA:B7:B1:BC:1B:C4:D0:D8:24:23:A9:01:4E:5E:D3
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A94584C7BF08F81D3F800
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/36ef084c-7c22-3d05-94b1-49ccd561fd95.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     53657
IP address blocks:        24.213.247.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:94:58:4c:7b:f0:8f:81:d3:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=ca3af5c1-3d8d-4384-988d-2ed2cf9ba75e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:55:6d:5e:46:6c:de:28:dc:d8:e4:10:d2:93:
                    4b:c0:e0:4e:60:c6:85:47:f0:34:0f:f7:8e:7f:2a:
                    88:35:f9:6c:c5:b7:98:25:04:d9:74:1b:1d:8a:1e:
                    8b:72:41:d6:04:cf:f5:9b:57:b0:7a:50:68:46:5e:
                    20:2c:4c:c2:86:66:45:46:c2:05:ce:5c:fc:03:f9:
                    3d:d0:db:66:ff:7d:fa:89:85:01:07:99:25:fd:66:
                    2c:d0:1a:a8:ad:64:cb:2a:e8:ec:b2:e0:1d:2b:b9:
                    3b:d3:7e:5b:f4:f3:d9:74:2e:50:84:6e:55:d1:3e:
                    e3:80:9c:7f:2c:9b:62:46:04:b7:9c:48:81:10:49:
                    b0:49:7c:db:b4:e8:0e:45:cf:20:b2:0d:6b:eb:90:
                    d6:ff:03:ee:2e:26:6d:fd:03:1b:fc:ad:5d:8b:68:
                    e2:d4:a5:7f:c1:38:ee:5d:61:7d:ec:48:f0:18:50:
                    b1:9e:8a:a0:d1:6b:8b:73:7b:67:39:da:c3:cb:3e:
                    44:38:95:d3:90:43:e4:f1:95:04:ca:7f:6b:2b:ec:
                    17:dd:3b:d0:70:39:f3:5b:6f:cf:9e:60:57:e5:2b:
                    bd:ee:e7:08:ee:09:dd:74:96:1f:e8:55:4d:a4:fa:
                    4a:62:69:5c:9f:32:a4:95:53:23:e7:f4:97:2d:03:
                    6d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E0:A6:EC:36:AA:B7:B1:BC:1B:C4:D0:D8:24:23:A9:01:4E:5E:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/36ef084c-7c22-3d05-94b1-49ccd561fd95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.213.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:03:7f:15:cf:c5:ba:3e:08:47:df:7b:bc:fe:18:70:aa:07:
         11:b5:f1:6f:fe:78:8f:46:69:9c:b4:a1:f5:34:a1:f2:64:4d:
         21:ce:22:b7:cc:5f:87:6c:05:e1:3d:d1:95:b9:68:77:2c:71:
         ff:df:49:4e:c9:d8:7b:a4:8a:e6:14:72:74:10:b6:af:32:72:
         52:36:df:55:f8:77:16:d6:f2:78:6e:aa:2e:56:b3:26:45:0b:
         d4:8e:c8:14:ec:42:c8:1c:6c:ee:af:5a:69:bf:e7:da:d5:d1:
         4b:28:ca:80:3c:b5:cf:25:56:d5:bf:fe:d7:1f:36:2b:88:f0:
         26:f0:ee:85:0d:ca:ec:69:d2:51:7d:12:71:c6:be:54:e7:2c:
         23:25:fd:ab:34:24:d1:62:df:38:ee:3c:b3:07:72:ca:2b:36:
         19:6a:e4:c4:3d:84:9b:50:a3:49:69:a8:25:9b:35:ac:cb:c9:
         0d:c4:3d:63:d2:64:d6:c2:c5:69:6a:46:c5:98:b2:b7:83:47:
         c4:dd:60:c7:ab:a6:f8:08:74:02:b8:44:1e:c0:af:03:d8:d8:
         54:a1:6a:91:f8:f8:2e:1c:0c:f1:37:be:7a:17:23:07:59:6b:
         5f:18:f3:ee:c9:2b:92:0e:cc:4f:e4:c9:51:20:95:71:ef:fc:
         43:85:68:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:41:11 2025 by rpki-client