Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/560fc5ca-77b9-3400-a667-bb6a5d8cb960.roa
File:                     560fc5ca-77b9-3400-a667-bb6a5d8cb960.roa (raw, json)
Hash identifier:          BOyBo6fW+Z1H+VUjyeJnyRr2DR2CqVQ0jrJmNpUtD0g=
Subject key identifier:   50:87:4F:D4:37:67:9E:25:C4:A3:A8:3E:D4:A9:E3:DA:5F:94:34:52
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A5471D77E0DC61329B300
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/560fc5ca-77b9-3400-a667-bb6a5d8cb960.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     10796
IP address blocks:        24.160.216.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:54:71:d7:7e:0d:c6:13:29:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=c9f65191-1725-4d0c-9278-75ad94fccc76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c1:45:2a:f1:3a:5a:62:20:b1:a2:38:77:07:
                    6a:f6:da:5e:10:75:7f:b1:7e:d3:bc:90:d4:00:01:
                    40:3b:68:84:1f:fb:20:f6:61:3b:ad:cb:05:77:2d:
                    ff:5b:82:77:4f:03:cb:44:ea:62:2c:cd:1e:2d:3d:
                    2b:b6:b7:d6:3d:d5:e1:c3:4b:42:8e:3c:fb:7b:c0:
                    ad:b3:0f:ec:e9:64:09:93:08:7e:81:21:e8:21:db:
                    9b:f8:f9:25:1c:66:63:b9:f2:61:3c:77:c6:15:ba:
                    2d:3e:77:28:2c:5d:21:e3:5e:0f:b0:af:bc:d6:a5:
                    56:fb:fa:c1:01:52:bb:96:77:20:85:34:90:f2:7f:
                    e9:9a:59:0e:6a:b9:28:c1:8b:bd:64:ef:9c:5f:c5:
                    a1:7a:fc:6b:d3:84:15:68:54:39:a2:00:f9:7f:33:
                    b9:b3:96:50:26:85:bf:59:c2:73:f5:f1:fe:7b:a8:
                    e5:33:e6:6e:6d:cf:b2:9d:47:fe:a2:42:5f:92:97:
                    b6:e0:a4:bf:fb:c1:a1:bb:47:7d:38:2e:a4:2a:38:
                    d0:62:2f:5e:0f:73:5c:25:6a:51:c8:1c:19:0d:78:
                    8b:a0:8b:28:4b:aa:63:fc:9d:85:76:2d:7b:2b:f8:
                    29:9a:b3:bf:ad:a0:e7:9c:f2:24:7b:93:2e:5b:84:
                    a1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:87:4F:D4:37:67:9E:25:C4:A3:A8:3E:D4:A9:E3:DA:5F:94:34:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/560fc5ca-77b9-3400-a667-bb6a5d8cb960.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.160.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:23:a1:fc:b4:e6:a0:a1:8b:d0:73:a8:4f:54:7d:cf:20:3d:
         e3:32:72:79:0d:21:81:1b:38:6b:99:f6:12:04:b4:19:53:c0:
         f9:dc:15:93:46:ae:38:ad:02:4e:8b:42:ba:16:d8:2e:a4:44:
         3b:8d:8c:d0:65:bc:71:b4:76:83:71:7c:dd:0c:8e:ea:2b:d6:
         26:cd:ff:af:6c:2a:1e:49:a9:cd:39:cc:8a:70:d5:52:55:01:
         e1:a3:3f:d7:74:6c:eb:12:b4:ec:b6:c3:82:43:b1:65:e4:47:
         41:88:ad:9f:1e:0d:91:92:65:b3:e2:fd:69:33:13:45:50:ba:
         f3:0c:d3:c1:5a:f7:d1:24:a5:68:79:65:e9:08:9d:6e:c3:eb:
         d0:1d:0c:b0:8a:b8:ac:03:65:7a:10:69:07:b7:c9:f1:f6:ad:
         1b:1e:d0:ad:39:e7:16:da:cd:83:0a:7a:5e:44:ea:52:85:33:
         bf:9e:75:dd:2e:26:45:df:73:76:27:2a:5f:d7:40:9e:a1:16:
         a4:b1:df:5b:79:8f:cb:01:0e:c5:dc:d6:8b:57:6b:1d:06:ba:
         a4:a7:81:12:cc:60:7d:5b:36:3e:9a:67:3e:3a:eb:80:1a:c5:
         6e:fa:d1:56:2a:f0:9d:3b:c3:c4:fe:2f:1e:e6:14:0a:8b:78:
         39:ed:1c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:27:34 2025 by rpki-client