Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5785239b-e251-38f9-8782-205b265f7fd9.roa
File:                     5785239b-e251-38f9-8782-205b265f7fd9.roa (raw, json)
Hash identifier:          8rkgpb5LORf9KRdExBiH4fD+9dnkIOBaskehmZ11Mrw=
Subject key identifier:   27:D9:3B:AB:C8:75:30:F0:31:CC:73:37:20:3F:0B:C5:02:7E:3B:EF
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037B01BDC1C9D8230B3B1380
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5785239b-e251-38f9-8782-205b265f7fd9.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     11427
IP address blocks:        24.106.8.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:01:bd:c1:c9:d8:23:0b:3b:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=9da974d4-9e9c-4515-b963-c204e92ae064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2c:3d:15:38:43:97:73:cc:5c:ac:d3:56:00:
                    da:26:5f:fd:e8:af:f2:65:45:19:f6:5c:b3:a8:6c:
                    0c:2a:27:d3:f0:45:cb:84:0f:01:31:ce:87:da:67:
                    a8:db:be:23:bf:77:08:93:dc:20:9f:64:49:c3:de:
                    ed:40:fc:a1:10:f9:15:1c:8f:b7:ef:74:06:23:7d:
                    1a:b5:c6:6e:c3:7d:4a:95:78:e3:36:cc:08:ee:cf:
                    00:cf:e7:d1:ed:30:49:b1:c8:0b:1e:12:10:64:b5:
                    10:ac:3b:b5:ae:83:24:ed:56:62:2d:80:36:9c:98:
                    be:fc:96:7f:65:55:d7:0b:e8:3f:35:ea:39:f6:57:
                    5f:ba:92:b8:5f:5b:52:cb:ea:b8:91:bb:c8:cd:52:
                    f1:36:ed:dc:80:7f:42:d7:68:c5:8b:20:aa:42:29:
                    93:12:71:ad:23:78:01:a3:1c:6a:5a:2d:a0:c3:49:
                    a6:a5:fd:0e:3d:07:01:51:1a:80:2d:3f:9f:28:3d:
                    19:cb:62:69:4a:3d:d2:ee:32:f8:8e:f0:8a:00:85:
                    3f:29:f3:cd:66:e8:f9:65:1d:f0:83:0c:1a:34:6e:
                    20:3b:f0:be:9c:65:63:03:82:8f:9b:f0:72:5d:91:
                    5c:8c:43:99:b7:7b:af:d0:4f:fd:43:31:20:0e:ae:
                    20:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D9:3B:AB:C8:75:30:F0:31:CC:73:37:20:3F:0B:C5:02:7E:3B:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5785239b-e251-38f9-8782-205b265f7fd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.106.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:32:35:29:b7:14:91:71:ff:4e:95:7a:26:54:3f:57:5f:03:
         16:76:92:9d:b0:f2:57:d2:bd:44:94:f1:93:8a:e1:f9:bd:1d:
         21:85:bf:be:79:04:32:3c:a0:29:8c:55:16:0d:6e:51:bb:e2:
         5e:ca:7c:74:f6:2a:2d:39:e2:2b:9e:f9:95:44:da:fe:01:31:
         f3:a2:9f:0b:2c:65:fa:87:91:0e:be:6e:d3:e7:e1:d6:cb:4d:
         91:0e:69:fc:8e:91:42:97:40:67:d0:06:fe:e9:67:5a:b0:a5:
         26:77:aa:f1:79:86:10:5b:99:62:29:9a:84:88:90:ed:62:a8:
         dd:b1:10:0e:7a:25:57:bb:02:37:ae:50:41:23:5e:13:6c:a0:
         3f:e0:a1:2d:58:8f:90:55:a8:b8:4d:0c:0d:69:72:1e:83:31:
         34:65:3f:ce:41:79:48:5d:41:66:63:84:6a:e6:54:db:41:bb:
         8e:32:d5:b3:7a:95:33:a3:1f:ca:a0:0c:78:99:0e:0d:f3:f1:
         ef:ed:18:aa:e5:a4:64:ac:0f:7d:3f:26:68:ec:e1:eb:83:cb:
         61:2e:ab:87:d7:c6:10:08:9c:2c:b8:4b:2b:8d:63:51:dc:3f:
         03:5a:a0:d8:51:38:17:64:9c:8c:41:b4:f1:e2:33:23:01:91:
         03:43:94:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:36:10 2025 by rpki-client