Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4a06d743-e932-3714-b564-6de15185a11a.roa
File:                     4a06d743-e932-3714-b564-6de15185a11a.roa (raw, json)
Hash identifier:          Miu9Ku/ZaeVONE6UrXFq1DdjjTG7tkrqS+hsNQN0S4M=
Subject key identifier:   33:A4:B1:92:AD:E4:D2:31:1E:F6:CE:72:39:94:C2:09:47:98:6F:BC
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A81F27D0C26531259EB00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4a06d743-e932-3714-b564-6de15185a11a.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20001
IP address blocks:        76.166.0.0/15 maxlen: 15
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:81:f2:7d:0c:26:53:12:59:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=37cc551e-2389-49ea-9a11-4d53cddbf5b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c1:3d:2b:de:11:d1:73:39:06:a7:3c:8f:80:
                    c6:c0:02:3a:25:d8:b7:e9:c1:96:04:e5:c0:42:58:
                    d2:ab:de:e6:ce:8e:a6:35:fb:39:a1:d9:77:b0:b7:
                    63:23:3d:17:5c:ad:a0:4f:98:dc:5b:87:a6:dd:fd:
                    59:aa:89:39:64:e3:4e:c1:a9:fb:8a:91:ee:97:45:
                    c3:26:12:c2:b3:b8:64:7f:b3:0e:10:4a:45:3e:64:
                    d3:9c:9d:5e:cf:56:4b:d4:a5:95:c5:91:eb:bd:06:
                    0e:2e:06:49:4c:56:cb:86:a2:20:76:07:ae:34:c3:
                    4c:f1:8f:31:47:26:11:19:30:a1:2d:d8:91:bf:a4:
                    48:74:83:51:db:3f:b8:01:33:ba:e5:83:a7:44:7a:
                    ba:af:ce:f2:83:35:9c:83:91:ce:60:58:5b:ba:39:
                    14:0a:24:59:52:85:27:27:30:f8:cb:60:df:03:b5:
                    f1:22:7d:ab:1a:ff:97:12:1e:c7:e3:ce:05:fa:b4:
                    8d:7e:ec:b7:f2:a7:fc:13:43:85:5d:11:27:d7:e9:
                    f3:c5:bf:d1:2a:95:6e:cd:fa:90:b9:22:a8:77:07:
                    88:ae:fd:9f:d9:12:07:1d:f1:90:24:5c:1a:85:eb:
                    6f:15:bd:46:f9:33:a0:5e:ed:b9:bf:fe:b1:4a:7a:
                    94:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A4:B1:92:AD:E4:D2:31:1E:F6:CE:72:39:94:C2:09:47:98:6F:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4a06d743-e932-3714-b564-6de15185a11a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.166.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:ce:c5:da:dd:79:b5:6c:21:ce:88:f5:7a:67:e6:a8:60:3c:
         ed:bb:94:be:70:95:db:e9:e2:f4:d7:fa:af:f9:9d:9b:01:14:
         e9:99:51:15:df:fa:90:d7:67:b1:3e:af:ec:46:99:4a:be:ba:
         62:dd:b6:bc:66:d7:16:97:38:90:d2:87:69:5e:2f:dd:0b:34:
         77:9a:f1:89:ba:3c:5a:28:94:14:0f:9b:73:89:8b:8f:66:da:
         52:c6:35:2d:32:5c:9a:76:fe:78:da:69:9d:48:f1:da:ac:02:
         b6:7c:bc:7f:1e:8d:3f:31:8d:2e:2d:7a:25:a3:c7:95:95:88:
         7b:2f:f9:bc:13:54:15:25:1d:25:27:b2:c3:6b:1a:96:cb:92:
         39:9e:cf:17:72:d9:92:5e:31:66:85:5a:aa:45:80:76:19:6b:
         bc:03:8a:ca:ba:1d:6a:92:a2:1d:c5:34:a0:ac:f7:65:ce:ea:
         10:a1:09:b3:29:8e:63:3a:a0:57:9e:37:5b:c6:63:6e:72:38:
         f0:a8:06:cf:ca:8f:ab:2c:e0:3c:62:57:97:ab:91:e4:97:cb:
         33:e1:50:57:b3:96:17:bb:6f:f1:36:b9:19:b1:41:85:28:9b:
         8c:9c:20:b6:da:c8:6a:70:25:08:0d:8e:85:75:e5:20:67:ea:
         65:b4:99:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:26:37 2025 by rpki-client