Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/51b3d0db-1f09-3642-b19f-0e067ec9e89e.roa
File:                     51b3d0db-1f09-3642-b19f-0e067ec9e89e.roa (raw, json)
Hash identifier:          mgwtUA+7qDI7O51Q9xCnnz6XG4ljvibLJmMq4p4ZWXE=
Subject key identifier:   81:20:F7:B0:A6:12:59:BC:37:0B:AB:85:AF:C1:69:83:A0:EC:D4:2E
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037B049543FC94DAE8A79580
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/51b3d0db-1f09-3642-b19f-0e067ec9e89e.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     11955
IP address blocks:        76.89.40.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:04:95:43:fc:94:da:e8:a7:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=7bced077-1c89-4a5f-95bf-83875b7d7e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:30:6f:1e:9e:c3:fc:7d:e9:69:26:43:78:73:
                    a3:b7:f4:8d:23:6e:85:8b:60:7c:52:c1:21:47:44:
                    8d:5c:f9:20:17:65:fb:b5:23:40:a2:88:70:35:a9:
                    21:87:cd:8f:01:a4:1e:8d:a7:3a:d8:5b:7d:4e:90:
                    13:77:39:0c:2b:35:db:4d:b9:cd:ef:82:98:d9:64:
                    a3:3a:af:0a:cd:89:6a:59:50:6a:8c:ed:1b:be:e8:
                    4b:f5:d1:79:b5:cb:48:10:cf:cc:70:9c:84:6b:aa:
                    85:55:c7:c9:36:86:cb:0d:34:ab:9f:6d:4e:9c:f6:
                    79:c7:b9:ec:55:4f:df:dd:ba:34:92:f7:34:9e:39:
                    b2:b2:63:60:6e:38:36:80:42:9f:18:40:3b:84:09:
                    38:4d:c9:6b:00:a2:1f:40:bf:22:cd:2f:65:ac:97:
                    73:5e:05:4f:42:bd:4a:c1:0d:96:2b:fe:89:c0:f8:
                    92:a6:b1:e2:9a:c8:dd:52:42:56:23:6f:2f:cb:f8:
                    4a:87:ee:81:f3:1c:9f:b1:40:bf:4b:81:07:1e:3d:
                    02:70:6a:b5:54:59:4c:7c:1b:3b:c1:36:0b:ea:c1:
                    6b:1a:ca:56:55:53:ec:31:d2:fd:24:22:1a:1a:3a:
                    c9:b2:f7:93:38:21:22:fe:a7:11:08:ef:94:65:de:
                    61:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:20:F7:B0:A6:12:59:BC:37:0B:AB:85:AF:C1:69:83:A0:EC:D4:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/51b3d0db-1f09-3642-b19f-0e067ec9e89e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.89.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:33:e5:b3:9d:2f:f1:ae:b4:55:31:bd:97:42:29:2c:92:d1:
         f2:fb:c0:32:12:26:86:9c:3d:ae:5f:90:2c:e0:7f:97:fd:69:
         d9:85:a5:d7:03:ac:96:b5:fd:30:78:1c:8e:6e:aa:2a:37:66:
         b3:74:06:54:00:1a:35:c7:b2:d1:22:43:28:59:ce:a7:a0:dd:
         f4:57:61:0b:49:16:57:40:5f:ad:d7:5d:34:e9:39:b0:9c:db:
         fb:9c:d5:37:85:8f:2c:ae:61:d4:f4:80:ed:b5:4d:a1:97:2d:
         5c:eb:8e:2c:b4:95:19:8d:7b:3b:fd:ef:3a:1f:32:fb:87:86:
         c5:bd:39:dc:04:4c:8b:9a:99:90:8f:b0:8a:27:5d:a9:7f:15:
         44:90:b5:0e:9e:8c:87:77:b6:78:f9:2e:63:cc:6f:7a:bc:9d:
         10:60:77:ef:ab:3b:32:b2:ff:4b:83:c3:44:98:7c:68:88:2e:
         a5:8b:95:4d:58:81:4c:53:f6:7d:76:8f:8c:ee:40:f9:9e:6a:
         32:4a:70:0b:30:28:2a:f1:59:e1:a2:2b:aa:fd:5c:ec:fd:73:
         5f:87:35:48:72:29:88:1e:69:24:34:07:f8:a7:01:56:30:22:
         76:b8:56:54:90:93:f9:ab:a6:f4:72:ee:d2:8a:0c:e1:28:31:
         20:b2:f5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:49:01 2025 by rpki-client