Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6cf62fe2-360a-39dd-bbaf-cd4751b90fd9.roa
File:                     6cf62fe2-360a-39dd-bbaf-cd4751b90fd9.roa (raw, json)
Hash identifier:          scUaX3oqnHFsBwjyT4LRic8/EZ27VpSlSz/UlSyN3K4=
Subject key identifier:   FB:45:90:14:87:A0:22:F8:26:A8:C7:41:47:54:13:50:56:64:03:D9
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A5FE46D06139E48E3B1C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6cf62fe2-360a-39dd-bbaf-cd4751b90fd9.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     10796
IP address blocks:        70.61.128.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:5f:e4:6d:06:13:9e:48:e3:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=ccb3d973-aae7-4595-a227-107ce908c9c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:10:16:44:10:9b:17:4a:4f:d2:bc:07:06:79:
                    17:11:45:31:41:39:9f:1c:1a:c3:c5:9a:54:b3:f6:
                    7a:bb:d1:c8:d4:ec:5f:67:69:46:4f:67:fb:c5:8c:
                    c0:c5:07:37:e9:96:ed:21:ea:eb:d8:d3:3f:e6:9f:
                    5a:09:67:e3:4e:e0:c9:c2:5f:23:e1:19:28:05:9f:
                    5b:06:e5:65:da:6f:e3:80:a3:5c:cb:db:56:f3:65:
                    79:1e:60:15:05:4e:17:3e:06:87:4c:ba:9e:e8:fe:
                    e7:46:30:70:75:be:56:06:46:58:7a:62:97:55:90:
                    87:fd:68:f6:32:f9:a8:f1:43:f3:e7:ea:0b:4a:f1:
                    49:88:8c:28:a7:04:c8:16:c6:11:17:b3:ad:7a:76:
                    37:3e:84:5c:d1:b2:f8:05:4f:cc:84:42:61:e5:8d:
                    9f:47:2c:fb:01:80:af:78:87:72:81:75:70:9e:4a:
                    55:9e:07:1d:1f:08:4f:63:0e:80:b3:ec:84:74:35:
                    8d:6e:f1:83:c8:06:33:83:61:34:b1:c7:ee:26:db:
                    1e:ae:a3:55:b5:67:e0:e5:26:b3:8a:51:d1:51:5c:
                    5e:5e:0b:1c:3d:94:2d:47:e6:c9:f9:d2:08:ab:9b:
                    bf:43:9c:5a:94:e3:d4:98:a0:c4:b1:4c:f3:db:40:
                    e2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:45:90:14:87:A0:22:F8:26:A8:C7:41:47:54:13:50:56:64:03:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6cf62fe2-360a-39dd-bbaf-cd4751b90fd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.61.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:5a:4b:8e:21:16:2e:88:e9:ac:2e:f2:58:14:30:29:49:4f:
         67:2c:ee:43:38:cf:4e:14:25:e4:7c:c2:50:bf:42:6c:e9:82:
         85:35:69:76:b6:dd:25:0b:34:2b:91:d7:35:8c:db:29:e1:a1:
         c9:9e:1e:6b:15:91:b5:35:9a:d7:ef:6c:6c:7f:71:ac:18:bb:
         b7:20:89:34:80:e9:cb:e9:80:05:86:22:08:eb:4b:70:fe:ba:
         84:12:33:01:e8:80:30:a5:2a:ff:90:d4:ed:a4:39:b9:11:28:
         14:63:12:a2:eb:b7:4f:ed:9b:28:02:7b:24:d7:df:53:45:74:
         6e:69:f1:a6:1e:85:96:77:24:21:bc:4c:78:96:97:f1:84:79:
         24:1d:5c:f7:e4:90:b1:fd:2f:17:ea:df:1c:83:3b:bb:51:99:
         ea:18:0f:1a:29:3b:9e:34:a3:9c:94:55:c1:89:85:0e:e3:93:
         72:c8:d6:b4:1c:ed:a1:19:15:1c:20:b0:88:85:84:59:9c:ca:
         67:a4:4e:57:77:c3:ba:6a:75:13:f8:6d:ba:ab:ef:94:fa:b6:
         91:97:cf:c0:e9:05:60:a6:84:e0:de:3c:7a:c6:b1:19:3f:a9:
         84:9c:2c:71:c4:a5:c4:7e:01:e8:4d:ba:72:d0:bc:0b:56:8f:
         25:a1:e1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:23:10 2025 by rpki-client