Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3fce0d43-4e0c-373f-82f8-7e8d84dce221.roa
File:                     3fce0d43-4e0c-373f-82f8-7e8d84dce221.roa (raw, json)
Hash identifier:          sZgMnLBLBN8Zk8krK7qvpRj4f7KlOEWg2t673Duvpw4=
Subject key identifier:   D0:C7:5A:73:F7:68:43:A2:04:8F:6A:D8:BA:5C:DB:CA:53:21:1F:A9
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A7C46C13C9DD585699CC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3fce0d43-4e0c-373f-82f8-7e8d84dce221.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     12271
IP address blocks:        67.250.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:7c:46:c1:3c:9d:d5:85:69:9c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=37325122-ce3e-449a-8f5f-e051ccfdca79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f6:28:08:ad:1e:58:2d:1b:a8:21:5d:c0:4d:
                    08:fa:b5:d6:e6:80:dd:7a:0f:f7:68:6d:ce:bb:50:
                    1b:83:41:ef:fc:c9:73:24:c0:59:77:f1:c9:94:78:
                    2a:94:05:60:b6:0c:d7:a6:b1:a8:83:7f:dc:15:9c:
                    ad:41:be:07:29:ae:4d:ae:f1:14:66:3f:a7:f8:0e:
                    62:92:9b:20:d1:9b:80:ab:27:cd:88:d3:45:db:99:
                    e0:cf:5c:e4:a5:43:9c:63:22:98:85:36:bb:b9:2b:
                    34:f6:32:c9:20:8d:2f:5b:ba:8a:ae:fa:d4:28:45:
                    cf:fe:fd:a0:d6:be:f7:fa:81:af:5d:ba:c4:4b:5a:
                    b3:61:83:ff:c1:f6:17:d6:ef:b7:67:48:b5:17:4a:
                    72:58:38:bc:99:57:70:74:63:63:a4:99:4c:67:39:
                    20:e6:35:fa:20:05:ae:9c:f1:14:2d:7f:d8:97:90:
                    e1:32:99:bc:ea:c5:48:ed:9d:00:a1:7a:4f:6f:cd:
                    47:f5:14:52:e1:a8:d9:38:23:07:3d:fc:7f:bd:e6:
                    c8:6a:33:e0:6f:7f:74:2f:9e:84:5e:09:d9:e5:b9:
                    f2:7b:3f:10:74:f2:9c:dc:83:22:ef:14:71:9f:9f:
                    79:99:7b:80:12:d9:e5:8f:f4:30:c7:e0:cc:60:9c:
                    b5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C7:5A:73:F7:68:43:A2:04:8F:6A:D8:BA:5C:DB:CA:53:21:1F:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3fce0d43-4e0c-373f-82f8-7e8d84dce221.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.250.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:ec:fa:64:09:a6:2d:7b:9c:26:8d:c7:54:3f:fa:18:32:81:
         29:44:60:6f:7f:64:2e:a4:f7:13:ba:4b:b5:92:08:58:20:eb:
         46:ab:30:25:ff:14:ab:09:03:4b:58:91:39:93:f1:2b:3f:55:
         f6:06:be:c0:60:58:9f:6f:67:23:ab:0e:9c:20:98:ce:e8:2e:
         67:23:53:25:08:2d:68:3a:63:06:1f:24:ee:1e:b5:e1:48:39:
         75:89:4a:43:2b:37:f7:a0:49:20:81:8b:3d:15:3f:35:c5:18:
         65:31:87:c7:47:ef:74:c2:41:21:c2:20:b2:6f:3b:cd:64:ec:
         f6:9f:46:14:b6:5f:c5:69:7d:73:09:11:c7:b3:58:c0:04:fa:
         d9:c2:ee:5a:98:ae:69:76:e7:5a:9c:04:80:60:8d:88:c8:66:
         38:4e:25:e1:b8:3a:6d:cb:81:61:54:04:ad:12:8a:9e:78:04:
         7a:8d:6b:c6:cf:70:5b:e0:6d:e2:8c:72:a8:f3:27:d4:94:07:
         3e:ce:c4:2d:bd:d2:09:41:aa:03:f5:47:a4:f7:a3:d8:9a:86:
         ca:f8:8e:8d:0b:df:3c:55:36:16:8a:94:37:b6:b9:60:e3:26:
         1a:c2:9f:70:e1:71:23:bb:ef:6a:37:b1:eb:5e:4c:83:57:ca:
         92:49:a1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:10:37 2025 by rpki-client