Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3c890c67-5e58-3394-babe-c529d6e867f0.roa
File:                     3c890c67-5e58-3394-babe-c529d6e867f0.roa (raw, json)
Hash identifier:          8qh5dU2+m6AtJaqVyZHvWLaEjd2unjdkAe0wSdZucu4=
Subject key identifier:   2F:14:2D:BF:36:A9:76:0A:49:F2:57:B7:C6:51:C1:95:BA:F9:78:74
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037AFA734D1B6F3FAB49C680
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3c890c67-5e58-3394-babe-c529d6e867f0.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     11426
IP address blocks:        98.157.0.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:fa:73:4d:1b:6f:3f:ab:49:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=f67c6d60-130a-43a5-94e0-4579c1a56207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e4:79:4a:85:24:7f:9c:b9:2d:4a:25:1e:67:
                    9f:17:25:8b:27:85:28:79:75:72:8a:32:d7:95:7c:
                    87:3a:62:ae:2d:45:cb:04:2d:7c:c6:62:0f:59:da:
                    2b:ce:91:ad:5c:09:8b:4a:4a:a1:50:d5:45:6b:26:
                    02:d4:3c:d4:73:91:ff:92:75:65:43:dd:75:52:93:
                    ca:79:d3:57:89:03:76:f3:33:a8:36:37:ea:8e:2e:
                    4d:25:91:57:6f:b5:1b:ce:a7:46:e2:52:dd:80:7b:
                    07:d9:07:b5:1e:5e:0c:ee:cb:54:88:39:41:43:fc:
                    fd:ba:f0:bb:01:2e:83:e7:d5:ae:c2:53:ef:c5:93:
                    35:96:2e:67:7a:a3:54:41:8d:7d:dc:56:7d:b6:19:
                    c9:e0:72:ac:ae:41:ff:62:90:5a:b0:58:b8:7c:8b:
                    da:ce:a5:c3:70:be:9f:1b:cd:d5:32:b5:cb:f0:dd:
                    68:d3:d1:32:8b:6c:78:6d:97:73:8f:40:e1:5a:0b:
                    04:25:ea:ff:da:29:3f:98:fa:7d:db:1c:76:fe:ff:
                    69:83:d7:18:02:ab:65:5a:ac:8a:ae:7a:c7:2e:da:
                    9f:06:1b:81:d3:dc:7d:cb:f2:56:4e:4f:51:55:c7:
                    95:c7:01:f1:8b:7b:e0:15:8d:67:6d:b2:c8:8c:bb:
                    e9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:14:2D:BF:36:A9:76:0A:49:F2:57:B7:C6:51:C1:95:BA:F9:78:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3c890c67-5e58-3394-babe-c529d6e867f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.157.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:7b:ff:68:b3:71:7b:ff:a0:ac:aa:77:12:3a:27:3b:98:76:
         6e:9b:da:36:ff:30:ba:24:10:54:a8:c9:41:b5:06:7a:32:25:
         9a:c4:15:a2:c5:0a:0b:53:60:0b:2f:9f:3a:da:7c:81:af:73:
         e6:d8:ac:0c:9f:cb:84:d8:b0:79:52:19:d1:2b:a1:4a:bc:bf:
         fd:b6:be:28:67:93:7f:5f:18:a5:43:38:da:e8:e6:31:6f:f3:
         01:a9:b3:08:cc:ae:2c:86:a9:ae:f3:03:10:ba:1d:8c:e1:36:
         ef:6b:bc:07:99:7f:f9:c8:8e:ee:ab:e0:f5:47:2e:09:26:a3:
         56:21:43:0c:ad:fc:f0:de:af:06:bd:9c:81:e1:b1:7f:83:59:
         03:54:fc:04:80:98:b6:ab:97:02:be:1b:c2:d0:97:61:c3:2e:
         44:42:fc:f0:d7:78:a5:78:a1:c1:e6:4f:07:20:7f:5b:4d:99:
         03:57:63:64:66:10:85:e9:93:dd:c1:db:53:71:aa:61:0c:90:
         47:a2:1c:16:06:da:3d:5a:0b:63:46:6b:be:00:46:88:74:0f:
         64:80:2a:6d:3d:f5:11:74:2d:a4:32:0d:a2:84:24:b8:21:70:
         c6:d8:80:78:a7:12:f2:78:d7:14:2a:ea:65:ed:22:43:63:ac:
         f2:46:1f:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDevpzTRtvP6tJxoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
ZjY3YzZkNjAtMTMwYS00M2E1LTk0ZTAtNDU3OWMxYTU2MjA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeR5SoUkf5y5LUolHmefFyWLJ4UoeXVyijLX
lXyHOmKuLUXLBC18xmIPWdorzpGtXAmLSkqhUNVFayYC1DzUc5H/knVlQ911UpPK
edNXiQN28zOoNjfqji5NJZFXb7UbzqdG4lLdgHsH2Qe1Hl4M7stUiDlBQ/z9uvC7
AS6D59WuwlPvxZM1li5neqNUQY193FZ9thnJ4HKsrkH/YpBasFi4fIvazqXDcL6f
G83VMrXL8N1o09Eyi2x4bZdzj0DhWgsEJer/2ik/mPp92xx2/v9pg9cYAqtlWqyK
rnrHLtqfBhuB09x9y/JWTk9RVceVxwHxi3vgFY1nbbLIjLvppwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC8ULb82qXYKSfJXt8ZRwZW6+Xh0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvM2M4OTBjNjctNWU1OC0z
Mzk0LWJhYmUtYzUyOWQ2ZTg2N2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYp0AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADB7/2izcXv/oKyqdxI6JzuYdm6b2jb/MLokEFSoyUG1BnoyJZrEFaLF
CgtTYAsvnzrafIGvc+bYrAyfy4TYsHlSGdEroUq8v/22vihnk39fGKVDONro5jFv
8wGpswjMriyGqa7zAxC6HYzhNu9rvAeZf/nIju6r4PVHLgkmo1YhQwyt/PDerwa9
nIHhsX+DWQNU/ASAmLarlwK+G8LQl2HDLkRC/PDXeKV4ocHmTwcgf1tNmQNXY2Rm
EIXpk93B21NxqmEMkEeiHBYG2j1aC2NGa74ARoh0D2SAKm099RF0LaQyDaKEJLgh
cMbYgHinEvJ41xQq6mXtIkNjrPJGH90=
-----END CERTIFICATE-----
Generated at Fri Apr 25 15:25:04 2025 by rpki-client