Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/404c471c-ba8c-3a04-9355-db95ad09263f.roa
File:                     404c471c-ba8c-3a04-9355-db95ad09263f.roa (raw, json)
Hash identifier:          EhZpoTHYk4OLbOisK3kVknqHS4KGl8xAvTCXNvwOUWA=
Subject key identifier:   70:59:1F:E1:71:9D:B2:94:BB:7B:17:3D:2F:C4:BF:7B:67:83:9C:D0
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A58CCEC97CB9326B1B8C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/404c471c-ba8c-3a04-9355-db95ad09263f.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     10796
IP address blocks:        65.26.56.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:58:cc:ec:97:cb:93:26:b1:b8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=b852dcb7-0b13-4f99-a57f-344b9d5acce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:62:a5:ae:b4:82:ba:3b:ac:bd:45:dd:d9:03:
                    4d:da:97:31:16:3f:1a:a8:0c:8d:7d:f4:8e:20:da:
                    6b:df:67:3a:e6:45:ea:f1:ce:7d:0f:d4:9f:1c:7a:
                    85:e2:30:3a:29:f4:23:3c:85:49:ab:38:ee:bc:fd:
                    fb:73:ad:76:f3:e6:6e:fc:7e:5c:63:22:f2:5f:58:
                    08:3d:5a:fc:dc:4b:e2:68:a6:1d:60:91:08:09:71:
                    55:d0:0e:57:fb:e4:58:f1:e5:02:7d:47:a7:7a:a6:
                    99:03:62:f9:05:ff:6e:82:ea:84:2b:ec:0c:a0:30:
                    fa:9a:a4:af:7d:bd:03:a9:a0:68:37:02:62:18:e7:
                    c8:4d:aa:23:97:15:3e:2d:cb:28:65:20:47:35:7e:
                    50:66:07:06:ad:58:21:3e:9e:72:5c:99:e7:0d:66:
                    4f:7d:39:4e:a8:b0:a9:72:c5:db:cd:03:15:fb:af:
                    62:10:ac:b5:20:05:73:8e:8b:89:79:54:8e:de:27:
                    44:a4:7b:0b:ce:93:42:8e:3a:ec:53:b1:43:03:5c:
                    89:b1:0e:ec:ba:01:9c:9c:29:18:99:8b:f6:4b:29:
                    3d:71:7c:91:aa:01:54:8b:da:63:6c:5c:b6:0a:31:
                    cd:d5:a6:6a:90:12:96:96:20:60:d7:59:0b:99:04:
                    aa:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:59:1F:E1:71:9D:B2:94:BB:7B:17:3D:2F:C4:BF:7B:67:83:9C:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/404c471c-ba8c-3a04-9355-db95ad09263f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.26.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:e3:ed:72:6b:a5:3a:94:e3:26:d5:0c:92:6d:a9:a2:95:b1:
         2d:b9:5c:bd:b9:87:e7:93:9a:19:74:2e:78:49:a0:14:e9:05:
         8f:b0:ba:ba:ee:6c:49:2e:36:cf:b0:d5:29:13:b2:66:88:f8:
         5c:40:35:9b:99:f3:a6:9c:d6:2c:1e:62:fb:27:e8:ff:40:60:
         d3:e7:ba:c7:85:9e:6a:4a:b4:09:68:d4:36:e6:41:e0:cd:de:
         c6:ad:af:54:3c:b2:61:60:fa:8a:f0:b4:4a:84:bc:9b:56:92:
         5f:55:46:f7:59:ac:0b:47:95:3e:cb:8c:ef:42:e5:68:08:3f:
         5f:6b:23:c0:9b:6b:d4:87:79:4c:90:be:82:d9:1a:62:eb:b2:
         1c:95:f1:cb:11:8d:02:0f:5c:25:85:58:5d:cd:ac:bc:74:d0:
         5d:9c:35:b1:8a:dc:4a:b2:8d:50:8c:38:a4:aa:51:12:cc:8b:
         25:f6:05:81:e6:59:08:99:c5:02:cb:5d:9c:e9:a2:eb:e1:b3:
         38:15:15:e1:10:d3:ab:d5:a7:ec:de:0f:86:f9:86:d0:54:34:
         59:26:6d:b3:b6:4b:62:25:f0:4c:6a:fb:42:1e:20:63:af:57:
         68:21:fc:cf:20:93:cd:a4:e2:37:ce:79:7d:a7:cc:eb:82:f8:
         8f:6a:3b:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDeljM7JfLkyaxuMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
Yjg1MmRjYjctMGIxMy00Zjk5LWE1N2YtMzQ0YjlkNWFjY2U0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12KlrrSCujusvUXd2QNN2pcxFj8aqAyNffSO
INpr32c65kXq8c59D9SfHHqF4jA6KfQjPIVJqzjuvP37c6128+Zu/H5cYyLyX1gI
PVr83EviaKYdYJEICXFV0A5X++RY8eUCfUeneqaZA2L5Bf9uguqEK+wMoDD6mqSv
fb0DqaBoNwJiGOfITaojlxU+LcsoZSBHNX5QZgcGrVghPp5yXJnnDWZPfTlOqLCp
csXbzQMV+69iEKy1IAVzjouJeVSO3idEpHsLzpNCjjrsU7FDA1yJsQ7sugGcnCkY
mYv2Syk9cXyRqgFUi9pjbFy2CjHN1aZqkBKWliBg11kLmQSqKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHBZH+FxnbKUu3sXPS/Ev3tng5zQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNDA0YzQ3MWMtYmE4Yy0z
YTA0LTkzNTUtZGI5NWFkMDkyNjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQRo4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC/j7XJrpTqU4ybVDJJtqaKVsS25XL25h+eTmhl0LnhJoBTpBY+wurru
bEkuNs+w1SkTsmaI+FxANZuZ86ac1iweYvsn6P9AYNPnuseFnmpKtAlo1DbmQeDN
3satr1Q8smFg+orwtEqEvJtWkl9VRvdZrAtHlT7LjO9C5WgIP19rI8Cba9SHeUyQ
voLZGmLrshyV8csRjQIPXCWFWF3NrLx00F2cNbGK3EqyjVCMOKSqURLMiyX2BYHm
WQiZxQLLXZzpouvhszgVFeEQ06vVp+zeD4b5htBUNFkmbbO2S2Il8Exq+0IeIGOv
V2gh/M8gk82k4jfOeX2nzOuC+I9qO1U=
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:03:10 2025 by rpki-client