Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/41a39b5a-572e-3bc9-bf00-93fd0cd126ba.roa
File:                     41a39b5a-572e-3bc9-bf00-93fd0cd126ba.roa (raw, json)
Hash identifier:          Qk7iXH0JwlkQ6y44Vmb6HupkyHz28Ks9pPfRJjf/9mw=
Subject key identifier:   73:73:6E:DB:10:67:92:5C:E7:4B:C5:D9:FA:94:86:ED:7B:8B:05:5D
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A95DE051FA49D22457594
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/41a39b5a-572e-3bc9-bf00-93fd0cd126ba.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     396066
IP address blocks:        71.41.46.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:95:de:05:1f:a4:9d:22:45:75:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=c9993c76-a640-46ad-92b2-d633f549afc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8e:11:83:33:3d:86:37:86:9c:c5:3e:0b:87:
                    14:52:f5:92:88:78:ed:e5:eb:3e:fd:c1:43:ef:67:
                    67:72:a1:4f:95:0a:76:95:6e:87:de:61:fa:95:e8:
                    73:3c:b8:9d:61:4e:88:d4:d6:50:75:f9:82:0b:3a:
                    9d:d4:2a:ca:e9:20:2b:9d:39:16:6e:4a:68:da:a5:
                    bb:4f:cc:95:65:c4:14:40:95:80:ec:36:34:b3:a0:
                    0b:05:b2:75:2e:79:b6:ca:83:6a:cf:00:05:f8:c4:
                    10:4c:ed:16:22:5e:cd:97:f5:9d:15:7c:7a:59:be:
                    01:fe:95:ba:ea:c0:ad:05:6d:33:48:ae:bb:b5:b4:
                    10:ce:68:72:d8:1a:c9:8a:4b:a5:d4:1f:60:f7:b6:
                    da:71:0c:6d:95:48:45:2a:6a:35:f3:b1:a9:88:6a:
                    77:1c:70:55:41:53:0c:a4:01:4b:bb:65:95:36:e5:
                    af:e4:84:ae:5a:b0:2b:8f:11:c1:4e:68:74:97:2d:
                    93:db:3e:7b:fc:63:c3:c7:42:c1:68:db:54:16:9a:
                    b3:51:07:69:a0:80:d1:39:cf:ba:dc:5c:b1:00:85:
                    74:4d:dd:f7:19:84:e1:5b:5d:9c:ce:25:55:57:ff:
                    f7:87:8d:6d:97:21:be:93:50:00:18:6c:52:1e:ce:
                    18:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:73:6E:DB:10:67:92:5C:E7:4B:C5:D9:FA:94:86:ED:7B:8B:05:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/41a39b5a-572e-3bc9-bf00-93fd0cd126ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.41.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:2e:1e:f8:0b:eb:31:ab:65:2b:c2:71:d8:de:88:86:e4:f3:
         bb:72:1d:23:f3:79:45:8d:6a:f4:7f:27:af:e4:9c:cd:ec:af:
         c8:b2:b6:3c:a9:d3:3b:91:60:df:d6:da:98:71:e2:e0:e1:4f:
         a3:72:b6:98:3f:aa:7d:01:d8:1e:da:f2:64:1d:91:d8:97:62:
         f1:0d:7e:f2:6c:49:d8:25:92:80:01:fb:76:68:4a:7f:4e:e3:
         47:20:eb:69:e3:b9:f1:88:81:76:e7:90:da:35:3e:3e:9a:35:
         4a:4e:bd:48:32:c7:c2:79:b5:8d:a2:6a:a2:cd:15:ee:50:3b:
         ac:ef:c1:83:83:1b:ff:65:24:a4:07:69:ad:97:7e:c2:01:5d:
         58:3c:f7:6b:ad:49:8e:81:68:07:5f:ab:46:a6:14:0c:47:4f:
         f8:c7:b8:b2:3d:10:f9:b7:07:4d:f9:58:be:f7:0b:56:35:08:
         c1:b7:04:04:bb:b3:88:65:a6:39:e6:24:52:ec:72:eb:e8:08:
         04:b3:e4:c0:5e:4e:67:b6:5b:ff:69:da:58:52:fc:ad:d0:d3:
         56:73:41:0f:ad:ee:0d:91:a4:d7:34:a3:78:2d:06:71:e9:82:
         ea:a7:5d:47:e1:4c:32:fe:b1:90:7f:49:55:7d:a7:07:e3:91:
         00:b8:b2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:24:29 2025 by rpki-client