Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3ece9fca-6af3-3495-a348-f647182491a0.roa
File:                     3ece9fca-6af3-3495-a348-f647182491a0.roa (raw, json)
Hash identifier:          HJs3wD5rt+UTPoPDg3iHhQam7yiPY79l3kWZgvueTQk=
Subject key identifier:   68:B3:97:4E:95:EE:16:C5:4C:FE:56:C3:D7:20:E6:08:C3:CD:11:68
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037AF8057DD08F22D471C9C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3ece9fca-6af3-3495-a348-f647182491a0.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     11351
IP address blocks:        67.242.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:f8:05:7d:d0:8f:22:d4:71:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=1e341147-2611-403a-a87a-ac01861e1fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a6:c7:17:a2:af:4d:31:fb:fc:19:0b:51:5f:
                    e7:cc:4d:72:94:15:00:e1:25:08:ab:fd:99:9b:fa:
                    1f:7b:c6:9c:b8:c1:01:5e:8e:75:2d:b6:28:b0:74:
                    50:34:08:df:c8:5e:5f:b1:01:d4:0a:50:96:0e:e6:
                    0f:bd:88:41:61:2e:4e:88:c0:06:19:58:24:19:aa:
                    ce:5e:4d:24:d5:d2:d1:3d:5b:86:5e:1a:50:b7:69:
                    d3:12:7f:ff:5d:67:d2:da:99:0a:0d:29:4b:6b:a1:
                    d9:18:f4:c2:bc:db:e0:71:73:76:fb:76:f1:f2:d5:
                    e9:d0:dd:1f:2d:7e:ec:4c:7a:d0:79:ea:b4:e7:59:
                    3c:d1:d3:da:1d:17:bd:c5:0b:cf:9c:4f:2b:9e:35:
                    a3:76:d0:e7:c7:c7:4f:35:7c:67:1d:10:3f:43:72:
                    a1:c0:21:03:a3:ac:3e:a0:42:e1:4c:6c:56:93:18:
                    74:b5:f7:ba:68:f1:3f:64:53:34:0f:09:e2:5a:22:
                    a6:a9:02:fb:af:5a:39:0b:0a:53:20:87:26:ba:61:
                    a2:23:e4:6b:14:08:05:16:c1:9f:cc:14:e1:22:67:
                    6d:78:2d:ce:80:d1:a0:00:f8:99:ac:2e:65:fe:a1:
                    5e:5d:ca:b7:c4:0f:bc:79:cd:8e:4c:e7:66:85:aa:
                    5f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:B3:97:4E:95:EE:16:C5:4C:FE:56:C3:D7:20:E6:08:C3:CD:11:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3ece9fca-6af3-3495-a348-f647182491a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.242.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:26:9c:de:5d:2c:a9:00:7b:f1:16:2d:1d:79:a6:23:3c:01:
         47:ef:00:ee:1d:19:58:6b:f6:18:17:84:9a:91:b9:27:36:e8:
         17:38:59:02:59:21:20:74:88:8b:08:6d:53:57:99:3b:b8:b4:
         0d:6c:9a:b5:80:d4:41:be:39:11:2f:ad:b5:f2:3e:fb:f8:63:
         66:37:fd:d9:d1:2a:ab:10:7a:2c:99:a7:d6:83:e6:0d:cf:0b:
         11:7d:6a:a6:23:c6:73:57:1c:ef:c1:f2:e9:9c:c3:9f:7f:fa:
         ce:5d:bc:bc:74:ba:93:9c:53:3a:25:56:38:fd:e9:8c:67:52:
         d6:e4:2b:f5:b0:1e:75:d3:54:90:5d:90:3d:5d:c8:b6:c7:bd:
         40:16:ea:d8:70:a0:bc:83:0f:ff:4c:c2:5e:80:ad:41:9a:d0:
         31:fa:f3:9e:f0:c2:58:57:cd:52:1d:50:7f:8a:53:98:96:d9:
         d4:26:20:60:87:19:30:ad:30:c0:6f:f5:6f:3a:57:93:db:a0:
         86:62:99:9e:a1:d6:a6:40:63:d8:45:1b:f2:bb:0b:18:90:fd:
         c9:7f:0a:12:a8:fb:f8:94:02:40:f3:64:72:1b:dd:15:5e:eb:
         bf:32:2b:77:eb:96:58:c0:05:d0:d0:c3:ab:dc:25:f7:de:ae:
         c0:c3:ef:82
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEgDevgFfdCPItRxycAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
MWUzNDExNDctMjYxMS00MDNhLWE4N2EtYWMwMTg2MWUxZmM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKbHF6KvTTH7/BkLUV/nzE1ylBUA4SUIq/2Z
m/ofe8acuMEBXo51LbYosHRQNAjfyF5fsQHUClCWDuYPvYhBYS5OiMAGGVgkGarO
Xk0k1dLRPVuGXhpQt2nTEn//XWfS2pkKDSlLa6HZGPTCvNvgcXN2+3bx8tXp0N0f
LX7sTHrQeeq051k80dPaHRe9xQvPnE8rnjWjdtDnx8dPNXxnHRA/Q3KhwCEDo6w+
oELhTGxWkxh0tfe6aPE/ZFM0DwniWiKmqQL7r1o5CwpTIIcmumGiI+RrFAgFFsGf
zBThImdteC3OgNGgAPiZrC5l/qFeXcq3xA+8ec2OTOdmhapfeQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGizl06V7hbFTP5Ww9cg5gjDzRFoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvM2VjZTlmY2EtNmFmMy0z
NDk1LWEzNDgtZjY0NzE4MjQ5MWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQ/IwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEABiac3l0sqQB78RYtHXmmIzwBR+8A7h0ZWGv2GBeEmpG5JzboFzhZAlkh
IHSIiwhtU1eZO7i0DWyatYDUQb45ES+ttfI++/hjZjf92dEqqxB6LJmn1oPmDc8L
EX1qpiPGc1cc78Hy6ZzDn3/6zl28vHS6k5xTOiVWOP3pjGdS1uQr9bAeddNUkF2Q
PV3Itse9QBbq2HCgvIMP/0zCXoCtQZrQMfrznvDCWFfNUh1Qf4pTmJbZ1CYgYIcZ
MK0wwG/1bzpXk9ughmKZnqHWpkBj2EUb8rsLGJD9yX8KEqj7+JQCQPNkchvdFV7r
vzIrd+uWWMAF0NDDq9wl996uwMPvgg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:10:50 2025 by rpki-client