Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3e89b3bc-df17-308c-865d-409667599b0a.roa
File:                     3e89b3bc-df17-308c-865d-409667599b0a.roa (raw, json)
Hash identifier:          0aXhj1JsbZYVYEuEILpAZSGkZHNNoMlgy7zbVXyLyrw=
Subject key identifier:   D6:67:99:DF:7A:3C:D2:A2:D3:B0:E7:A9:80:04:7A:02:B8:57:BF:F2
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037B00106583C729ABD7A7E0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3e89b3bc-df17-308c-865d-409667599b0a.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     11427
IP address blocks:        72.129.224.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:00:10:65:83:c7:29:ab:d7:a7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=728022a8-fd91-483e-95dc-cafb0d08ebd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:26:30:a1:23:16:b7:02:1f:2d:cb:ca:49:8e:
                    ff:2a:ef:16:32:2a:95:81:40:57:56:96:48:b8:28:
                    75:94:a6:0c:71:f1:49:10:a4:8e:0a:86:13:0c:5b:
                    55:3e:1e:d0:be:a4:53:8e:52:63:a3:1b:28:91:88:
                    5d:9b:f6:f9:69:3c:c1:1f:6d:68:50:c8:c4:25:8f:
                    ab:99:d3:5d:d0:72:f0:8d:e3:a2:09:10:2a:6b:87:
                    35:b8:a6:c5:32:61:2e:6f:46:fc:e7:70:b4:e3:c4:
                    1b:29:a3:32:22:98:6c:8e:2b:ac:97:83:61:79:e2:
                    8f:3f:3b:2c:fa:b1:e4:a4:73:15:90:2d:03:68:40:
                    8f:85:9e:22:e5:f0:37:45:2a:e0:59:0f:8f:39:df:
                    10:98:1f:be:03:de:2e:55:07:6a:21:61:a4:4c:5e:
                    a4:ef:8a:9b:d1:ac:2f:ee:f9:4b:bf:6b:9b:ad:0e:
                    12:b0:78:2f:3a:26:6a:d6:a2:d0:a2:d0:17:08:94:
                    5e:f8:95:6b:ac:87:ee:6b:6f:a7:35:50:91:38:19:
                    8f:31:35:d4:9d:c7:6f:71:47:d7:dd:0d:91:61:d5:
                    71:3d:0d:75:2e:da:30:10:b2:25:b6:81:3d:0e:38:
                    da:78:a3:c3:c6:aa:47:e3:f4:52:00:d8:a0:9f:36:
                    3d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:67:99:DF:7A:3C:D2:A2:D3:B0:E7:A9:80:04:7A:02:B8:57:BF:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3e89b3bc-df17-308c-865d-409667599b0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.129.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:28:35:b8:5c:2e:f9:6f:e9:50:4a:8a:d8:9e:72:5a:67:f9:
         31:a1:9c:29:5b:ed:eb:23:d7:23:77:04:cd:5c:ac:38:a8:da:
         65:86:11:15:47:8b:59:96:e6:8f:49:aa:74:ac:3d:a1:ae:7e:
         83:e9:f5:b2:5b:72:7f:d8:5f:f1:8f:d3:62:7a:ed:5e:84:aa:
         58:0a:a6:fa:d0:50:c1:9b:62:f2:2f:6a:9f:48:e9:3f:7e:cd:
         6e:49:27:2a:9c:fc:e2:af:6c:c2:76:a6:2f:83:fe:58:52:6d:
         e9:8a:44:e3:9d:cb:9f:2d:50:ad:62:96:74:b8:9d:2f:e1:21:
         6c:fc:9f:95:6f:56:ac:e8:72:73:8c:ff:f1:0a:fe:02:fa:56:
         5d:79:cc:2b:8e:4b:8c:dd:ae:c5:f7:c8:55:d7:38:e1:c2:06:
         76:31:7f:97:2f:9e:b6:dd:87:51:6f:3e:23:8f:74:d5:dc:dd:
         e6:dc:d3:7f:16:cc:33:64:40:ba:21:0a:a9:35:8d:e6:f7:88:
         3d:93:33:0a:30:7e:62:15:76:ca:6c:6c:2e:7f:35:d3:21:82:
         de:01:00:71:39:67:a2:52:17:9b:77:85:9a:bd:52:42:41:a4:
         a7:d2:43:d7:a8:10:91:84:79:2c:9a:30:63:66:3f:5f:e1:b5:
         e0:a4:a3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:09:30 2025 by rpki-client