Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3f989cf4-3dc9-383d-b06e-c11ec85e5742.roa
File:                     3f989cf4-3dc9-383d-b06e-c11ec85e5742.roa (raw, json)
Hash identifier:          do2kVDCUpMaFAEDV+BOIn37cGO+ACdKeev3SUcnuNaQ=
Subject key identifier:   6C:F7:A8:74:C7:61:EC:39:EC:CA:73:8E:00:01:36:26:ED:71:6B:8B
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A8F8CF0D354DF48153F40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3f989cf4-3dc9-383d-b06e-c11ec85e5742.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     33363
IP address blocks:        24.199.36.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:8f:8c:f0:d3:54:df:48:15:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=a08cbe23-2a12-4597-b3ee-d564e4d9a97a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ce:a7:6b:e9:52:26:92:b0:4e:a4:24:22:56:
                    2b:b9:cd:f8:94:da:b1:5b:ef:7e:f5:93:0e:3a:24:
                    52:bb:89:e1:1c:ef:bf:84:42:f7:46:18:e7:cd:c4:
                    e0:7c:b8:82:d4:2d:bb:3c:fc:a5:bd:13:4c:09:b6:
                    1c:56:b2:26:76:a8:67:12:b8:0e:8f:25:86:59:b8:
                    ac:e9:bf:fb:96:b0:92:a0:18:ed:1d:b5:2e:4a:3a:
                    2d:33:d8:aa:f9:45:18:ec:24:11:d7:58:44:b3:6c:
                    a4:e1:2e:2b:46:a2:7e:24:ec:1b:a5:0e:d9:6e:08:
                    a5:11:1f:e9:3a:98:4b:58:76:62:b7:ab:b8:33:d6:
                    b2:01:fc:a4:8b:df:6f:bc:0f:d6:e0:aa:2e:d3:ce:
                    e1:9e:0b:03:87:54:e5:5f:4c:71:61:5c:b0:1a:ad:
                    d0:43:74:9b:bb:c8:23:75:aa:70:b1:45:cb:5e:43:
                    69:96:74:b6:f8:84:1d:04:ce:00:0a:e1:ab:63:f0:
                    58:35:32:4a:d1:d8:5c:cf:5f:d1:cb:70:3d:88:fc:
                    b7:cd:36:d6:e3:c6:c9:85:63:2a:55:cc:4e:8a:e7:
                    bf:bf:41:ef:2f:08:1c:88:ab:3b:24:b9:29:d3:37:
                    22:ee:78:81:8c:5e:60:f8:af:50:21:e4:50:01:95:
                    ce:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F7:A8:74:C7:61:EC:39:EC:CA:73:8E:00:01:36:26:ED:71:6B:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3f989cf4-3dc9-383d-b06e-c11ec85e5742.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.199.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:e1:d5:93:bd:63:fb:62:69:40:f1:6e:04:a0:9e:ab:bd:65:
         a6:84:37:3c:bc:d8:84:22:f5:40:a3:7e:a5:83:74:6b:d3:c0:
         2d:f2:8a:b1:07:a3:7f:12:c1:80:56:a6:35:f8:18:d9:ed:d0:
         c0:54:e7:41:64:24:fe:1d:ee:de:ca:a0:d8:ed:03:85:20:04:
         ed:c6:33:08:bc:f4:1d:eb:74:4f:72:8d:c4:2d:3d:96:95:a7:
         20:16:de:6f:5d:3b:00:b7:41:31:b8:e7:c7:46:ad:54:5a:a9:
         46:1d:7a:bf:7f:98:70:d0:64:b8:2b:c7:46:8a:f4:df:1f:76:
         6a:ad:56:49:b5:42:87:76:21:e3:02:e3:1c:f8:0a:70:fb:1f:
         4b:fa:d9:8d:18:d4:64:9b:0f:90:7b:fb:12:15:54:9b:31:a5:
         6f:d9:72:a9:b2:ef:74:3c:20:12:2e:95:94:43:c0:c5:da:b9:
         5c:a9:1f:44:37:4c:0e:78:f0:08:ed:14:4b:f5:ab:e8:18:c1:
         0d:60:7f:b2:26:ef:cf:69:d0:35:d3:d7:42:4e:7d:3a:91:e2:
         29:aa:9e:f1:8b:40:98:c3:16:37:4d:c1:26:9e:b3:10:f1:95:
         be:e4:33:32:8a:2f:f4:a4:4f:4b:33:3f:9b:64:46:b0:85:33:
         08:d5:ba:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:11:00 2025 by rpki-client