Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3b8e67ea-8b3a-3e31-b352-24420ae916ec.roa
File:                     3b8e67ea-8b3a-3e31-b352-24420ae916ec.roa (raw, json)
Hash identifier:          2n9P5eI2/5pLP5e/sSzLY6tP0iXo4slaj3+o30GS+XI=
Subject key identifier:   72:13:D3:A5:6E:58:69:E4:3B:B7:6E:3B:5D:7B:CD:FC:02:D5:93:AF
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A7DE9C6535CF1AAAA4950
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3b8e67ea-8b3a-3e31-b352-24420ae916ec.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     12271
IP address blocks:        24.213.174.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:7d:e9:c6:53:5c:f1:aa:aa:49:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=0365c52d-6aab-4f3c-a25f-ae1b5f77c0ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5c:56:8b:12:50:16:61:f2:99:a5:91:2e:2e:
                    20:f2:b8:70:40:37:53:1c:69:95:c4:f2:66:4c:3b:
                    f6:37:c1:d6:a0:6a:93:fd:5f:56:dc:b6:fd:18:fa:
                    84:84:83:56:c8:b3:e6:a7:dc:af:05:84:7b:b4:09:
                    e0:46:30:59:47:77:f5:ae:9b:7e:fe:cb:ec:ca:25:
                    fb:1e:b2:97:5f:45:4e:aa:14:69:4e:5e:bf:41:b0:
                    ba:65:69:7d:74:e7:bc:91:f2:f1:40:56:3f:bc:0b:
                    c5:82:fa:76:33:11:21:78:2d:b5:db:84:4f:9c:8f:
                    30:ec:f8:59:76:46:eb:61:f5:b4:fa:69:2b:90:92:
                    1c:bb:99:29:ca:6c:13:2a:75:76:40:d2:9e:79:23:
                    fd:91:74:6f:7b:6f:7d:76:c8:7e:92:cd:8f:38:b8:
                    73:7d:18:4b:60:70:69:ff:ef:61:33:53:a7:94:40:
                    81:be:87:56:2a:c1:ff:7b:a5:9a:9a:76:0a:25:eb:
                    88:c7:c1:56:04:e7:ac:29:5e:ad:c8:5f:58:d4:f4:
                    39:ab:02:8b:9f:ad:9e:8c:03:56:1a:e7:a2:d3:6f:
                    36:e0:55:e3:e8:6d:4e:b4:81:0a:23:f0:70:49:54:
                    94:4e:0e:20:3a:0d:7c:b8:a1:6c:e0:3c:98:61:32:
                    ce:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:13:D3:A5:6E:58:69:E4:3B:B7:6E:3B:5D:7B:CD:FC:02:D5:93:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3b8e67ea-8b3a-3e31-b352-24420ae916ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.213.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:8d:7d:69:33:4b:ae:4b:e7:78:1d:a4:31:48:83:6a:cd:51:
         fa:87:9f:40:54:4c:ea:8f:82:22:6f:7a:2e:bc:92:8c:f5:83:
         a5:13:0b:b2:82:b2:7e:7f:b2:26:9f:b5:7b:cd:d3:37:60:f2:
         5b:bb:92:b9:24:99:be:d1:63:ce:10:24:f9:65:34:40:06:8a:
         7d:b0:96:4e:6f:13:7f:6c:fb:1c:94:6a:ba:c5:28:c3:d5:a4:
         8b:92:fd:bb:3a:89:5e:06:62:ef:1b:d8:83:76:cc:44:d1:09:
         a5:d5:bc:92:bf:d9:3e:b9:71:dd:25:e5:29:6e:c1:3f:2b:81:
         a5:17:54:83:c2:75:2e:d9:1d:a2:c8:f9:c5:42:95:d3:20:98:
         ea:eb:3f:6f:b8:09:95:69:8e:0e:ee:4d:86:cf:02:ac:ee:60:
         e7:8f:0c:bc:29:39:62:55:68:60:b8:2a:93:2f:35:8c:52:7a:
         98:a8:78:08:78:27:9b:2d:fc:d9:d4:9e:3b:d1:07:b1:66:ca:
         53:d2:6e:ad:ef:cc:e4:eb:0e:2e:34:32:39:39:62:e7:64:95:
         75:47:70:02:cd:2e:18:e8:2d:ac:75:3d:1b:d2:19:e8:31:7d:
         57:9c:92:ed:9e:7b:2d:29:a8:57:e2:78:81:77:7c:29:44:c9:
         fa:bf:8b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:29:00 2025 by rpki-client