Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4df121de-5f47-3793-9de8-91f282ca54c6.roa
File:                     4df121de-5f47-3793-9de8-91f282ca54c6.roa (raw, json)
Hash identifier:          dERaIQIdLGfZKN6yY6d60O9yxdY4mX4LVftOi5WyEq8=
Subject key identifier:   E5:73:0F:6F:50:6A:E1:67:56:84:E2:C4:B2:13:B2:CE:6F:89:9A:F9
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A8DC7C552E0CF8EF10980
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4df121de-5f47-3793-9de8-91f282ca54c6.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     33363
IP address blocks:        24.94.96.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:8d:c7:c5:52:e0:cf:8e:f1:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=a48aa639-dfe7-4277-a758-7123319a5bf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:39:56:09:11:a4:a3:b3:a6:f4:04:6d:30:e9:
                    a5:50:11:fe:03:6c:04:f9:7c:7d:17:6e:b1:0e:e0:
                    38:e1:46:82:2a:dc:75:7d:a8:e4:5d:c4:87:10:04:
                    4d:88:07:53:6f:4f:7f:28:9d:4d:d5:3f:85:e5:cf:
                    65:d3:5e:ba:31:9c:2d:54:46:ad:e2:a1:55:27:49:
                    af:7d:b5:fd:77:8b:b7:c1:8f:76:09:7f:c2:09:70:
                    39:94:5c:47:22:40:2f:a0:a1:5e:98:ed:f4:9b:9c:
                    e7:e0:ce:32:50:df:1f:26:f2:47:95:ba:10:93:38:
                    33:db:72:cf:7d:70:6b:0c:2a:2f:f8:78:85:02:55:
                    f3:14:b8:10:b8:eb:57:4c:06:df:90:f4:38:18:19:
                    06:17:96:7c:4b:5a:68:33:90:a7:25:dd:46:a6:3b:
                    41:53:b7:7c:ac:19:c6:1b:e1:e0:9e:ba:f2:69:c9:
                    eb:5c:de:2f:b7:a7:58:56:f6:d8:0e:a7:31:16:d7:
                    d2:15:b1:89:0d:5e:1a:18:1a:54:c0:6e:93:a3:4a:
                    a9:51:ed:5c:51:e5:a3:0a:aa:1b:fb:23:19:62:f8:
                    fb:d8:b1:ab:d1:f8:f9:90:e6:35:e9:20:d9:46:5f:
                    37:ac:c9:04:1b:6b:08:16:c0:33:3a:7c:c2:d6:20:
                    92:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:73:0F:6F:50:6A:E1:67:56:84:E2:C4:B2:13:B2:CE:6F:89:9A:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4df121de-5f47-3793-9de8-91f282ca54c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.94.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:08:86:ab:63:cc:28:e7:eb:05:56:ed:06:1e:ce:9c:53:f2:
         9a:60:17:ae:ce:39:e1:56:4a:b0:b9:7f:91:31:9a:8a:87:a3:
         e3:06:68:20:d3:0f:f1:82:15:5e:c4:f0:17:94:60:5a:08:31:
         b6:dd:26:1f:a9:79:f6:88:aa:71:dc:93:44:3c:30:08:bf:e5:
         87:91:c7:ff:3f:9d:59:b9:28:06:e1:8b:30:97:3b:4d:1d:d6:
         d4:0b:00:9a:7a:08:04:db:6e:ed:0d:aa:b4:17:73:f1:61:4e:
         3b:2a:36:c0:cd:7f:1a:4a:91:57:c2:b9:3b:ec:9c:6c:81:e1:
         1e:ab:cf:4d:53:0e:c4:95:f6:87:56:a5:ba:42:db:35:ad:7b:
         7c:11:a2:7a:48:9d:0d:9a:15:fc:fd:bf:cb:31:c6:94:77:5a:
         54:ee:11:26:03:52:4c:6c:86:6e:ca:07:a2:7a:9c:37:a3:a0:
         66:f7:b2:7f:ba:69:bc:f6:15:4c:93:e8:ea:b2:9a:44:95:2a:
         4e:a4:d3:d2:1a:22:ee:6b:ba:ba:44:c3:7d:23:2d:bd:87:01:
         d9:41:5f:39:51:dc:00:fa:2b:b6:f8:da:f2:33:de:4c:7f:30:
         e1:5d:a9:1f:6d:25:95:f8:48:a6:4f:2a:1b:e0:5f:2a:da:5e:
         5e:f0:d4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:35:14 2025 by rpki-client