Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/43afd15c-0aa0-3e52-a178-1642176aa5aa.roa
File:                     43afd15c-0aa0-3e52-a178-1642176aa5aa.roa (raw, json)
Hash identifier:          OgJWpvUEksjn1e3c0eQINmZBcTfwYQIywD8t3ICyF9w=
Subject key identifier:   6A:FD:AE:7B:3B:FB:D0:55:10:6E:FA:CC:F7:F3:8C:D9:E6:76:A6:DF
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A81121356A86A357ECE00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/43afd15c-0aa0-3e52-a178-1642176aa5aa.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     19115
IP address blocks:        98.8.12.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:81:12:13:56:a8:6a:35:7e:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=cf8a6c8b-b6b7-4073-8f8b-ea72a7425827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:78:3c:75:01:c1:1c:68:4b:a6:a8:64:37:93:
                    3a:84:98:0f:eb:9a:bb:96:62:67:98:f1:0b:9d:e3:
                    0d:f4:19:5c:af:08:51:2d:c3:cf:6f:d2:c3:67:ea:
                    a2:83:66:4d:5e:70:ec:a5:f8:6d:2a:bc:ab:8e:28:
                    e0:ec:24:ab:12:17:b0:51:23:c0:b9:32:d3:85:a4:
                    63:0f:f6:f4:6e:35:66:06:19:23:de:38:c6:7e:d0:
                    65:42:36:31:01:b7:48:b8:6a:24:3a:95:04:76:4e:
                    a8:71:ee:5f:0f:90:e9:9f:24:0b:53:f9:35:d5:ae:
                    88:1a:8e:2f:b3:cb:25:02:60:28:9b:30:7c:97:83:
                    6a:0c:ef:ca:f6:71:8c:d1:08:ed:de:f4:63:a2:a6:
                    a0:cf:15:d7:15:0e:c1:8c:02:0b:ac:1d:a5:ee:f3:
                    e9:ae:8c:3d:74:87:6f:a4:20:7c:2a:9d:89:67:1c:
                    18:ed:57:4c:1c:dc:de:32:17:85:cc:a1:47:08:06:
                    69:bb:1f:e1:da:49:94:33:88:fb:ec:91:bb:a0:2b:
                    ca:d9:e9:ab:f3:e8:c0:8d:cd:fe:2a:2c:84:c5:22:
                    e2:2b:71:f6:a0:45:63:25:16:ad:9f:97:20:d0:e4:
                    b3:fc:2a:ed:fc:f0:1b:cf:c0:79:b4:dc:5f:1f:2a:
                    e2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:FD:AE:7B:3B:FB:D0:55:10:6E:FA:CC:F7:F3:8C:D9:E6:76:A6:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/43afd15c-0aa0-3e52-a178-1642176aa5aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.8.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:54:ba:c8:a2:a9:97:0c:96:7b:d8:61:9f:c9:a9:e8:65:6d:
         91:7e:e0:e2:74:6e:51:1e:22:73:8d:90:e3:8c:85:11:53:4e:
         03:1b:88:cc:aa:d3:a2:12:63:a6:f3:08:e1:5f:a0:a9:87:3f:
         8c:34:58:90:5a:61:01:7d:6a:ea:15:b9:c2:f7:45:9c:26:48:
         d7:ee:3c:d8:53:2f:ac:65:5b:a6:8b:13:8c:0c:99:92:b8:41:
         c0:9c:75:70:9a:06:61:d0:87:39:3a:b0:f2:17:ba:aa:a9:c9:
         d5:d7:7f:da:b0:35:91:85:ca:e5:56:64:54:22:0a:ab:bf:fd:
         37:03:76:63:83:34:a5:3e:78:47:78:ae:52:f4:24:b8:84:d5:
         f2:b8:dd:6e:cb:55:51:1a:5f:59:43:21:71:9e:0b:f2:a6:65:
         8a:f4:0b:2b:1f:da:f8:7e:12:ec:5c:68:5f:db:70:93:dd:94:
         f7:bf:b3:2f:3e:71:95:89:a6:bb:4b:d1:b8:20:bd:15:c6:58:
         40:88:dd:18:65:4f:8e:24:8b:7d:0d:3b:50:33:ce:9d:3a:50:
         c9:84:1c:d0:1d:5a:02:00:20:1e:81:e3:09:10:74:85:4c:ed:
         6a:07:c6:9b:fe:43:cf:9d:51:6b:4b:88:48:0c:94:02:94:cc:
         45:6b:40:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDeoESE1aoajV+zgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
Y2Y4YTZjOGItYjZiNy00MDczLThmOGItZWE3MmE3NDI1ODI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3g8dQHBHGhLpqhkN5M6hJgP65q7lmJnmPEL
neMN9BlcrwhRLcPPb9LDZ+qig2ZNXnDspfhtKryrjijg7CSrEhewUSPAuTLThaRj
D/b0bjVmBhkj3jjGftBlQjYxAbdIuGokOpUEdk6oce5fD5DpnyQLU/k11a6IGo4v
s8slAmAomzB8l4NqDO/K9nGM0Qjt3vRjoqagzxXXFQ7BjAILrB2l7vPprow9dIdv
pCB8Kp2JZxwY7VdMHNzeMheFzKFHCAZpux/h2kmUM4j77JG7oCvK2emr8+jAjc3+
KiyExSLiK3H2oEVjJRatn5cg0OSz/Crt/PAbz8B5tNxfHyriiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGr9rns7+9BVEG76zPfzjNnmdqbfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNDNhZmQxNWMtMGFhMC0z
ZTUyLWExNzgtMTY0MjE3NmFhNWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYggMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHtUusiiqZcMlnvYYZ/JqehlbZF+4OJ0blEeInONkOOMhRFTTgMbiMyq
06ISY6bzCOFfoKmHP4w0WJBaYQF9auoVucL3RZwmSNfuPNhTL6xlW6aLE4wMmZK4
QcCcdXCaBmHQhzk6sPIXuqqpydXXf9qwNZGFyuVWZFQiCqu//TcDdmODNKU+eEd4
rlL0JLiE1fK43W7LVVEaX1lDIXGeC/KmZYr0Cysf2vh+EuxcaF/bcJPdlPe/sy8+
cZWJprtL0bggvRXGWECI3RhlT44ki30NO1Azzp06UMmEHNAdWgIAIB6B4wkQdIVM
7WoHxpv+Q8+dUWtLiEgMlAKUzEVrQFs=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:08:51 2025 by rpki-client