Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/70c560dc-eeb7-3eb9-8f48-df9d04b754f0.roa
File:                     70c560dc-eeb7-3eb9-8f48-df9d04b754f0.roa (raw, json)
Hash identifier:          ga5cVU46o9gyKinqOzvC7EofoaKFHf8lDr7J4vQyD5g=
Subject key identifier:   00:61:36:6A:5F:E7:85:82:A4:EE:A6:9D:C4:F6:DD:EC:65:D2:A0:58
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037B122110817302FBD25940
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/70c560dc-eeb7-3eb9-8f48-df9d04b754f0.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     33363
IP address blocks:        70.63.52.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:12:21:10:81:73:02:fb:d2:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=41c8b23c-ae10-4618-9a6e-6b2e1808a925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:09:60:d7:f1:41:48:e4:8d:49:bb:4e:b0:34:
                    5b:4e:07:a0:a0:2f:4a:e1:7b:27:f2:63:e1:a2:eb:
                    f3:81:6e:d2:3c:68:14:70:88:07:a1:cf:b5:83:cd:
                    71:0b:ca:7e:c8:19:ee:81:50:3e:83:1b:b2:cd:ec:
                    58:8f:ce:2e:3e:38:60:ae:59:e6:45:3d:38:d7:79:
                    b5:30:c0:b1:78:81:21:f7:ff:89:a2:ce:49:c7:9b:
                    80:9d:66:93:f3:8f:2a:c4:7b:00:4c:79:e1:23:c5:
                    fd:53:f3:8b:45:80:f8:47:80:88:5f:b2:a8:af:cf:
                    48:da:c3:f4:08:f5:1c:05:1d:74:ad:72:9b:bd:3a:
                    12:52:be:36:60:c1:6a:78:b3:c8:d0:42:01:fb:7f:
                    bf:0b:14:55:cf:b8:66:14:69:df:67:a9:d9:13:54:
                    65:a9:50:4d:4c:9b:ec:50:27:58:d8:45:c6:83:fc:
                    7b:18:ce:15:8b:25:69:3f:7a:61:16:47:0a:15:92:
                    f1:ca:c6:ca:b0:9c:e2:fa:1d:75:e6:f4:12:7c:bb:
                    cb:8a:24:7f:12:a9:ba:f2:84:4b:61:70:b2:2b:00:
                    06:9e:69:8b:5d:7d:f2:c0:6e:2d:73:af:c6:f0:5e:
                    74:19:95:f2:5f:50:e6:b1:c1:18:1f:3b:d4:e8:6d:
                    0f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:61:36:6A:5F:E7:85:82:A4:EE:A6:9D:C4:F6:DD:EC:65:D2:A0:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/70c560dc-eeb7-3eb9-8f48-df9d04b754f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.63.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:11:b2:bb:cf:d9:fa:b9:33:66:ed:34:e8:98:d2:b5:30:bf:
         2a:66:e6:6a:1e:3f:c9:a5:36:8c:19:93:7e:3f:b2:3c:dd:d0:
         57:62:06:4e:ed:1d:a5:f2:4e:db:a0:c8:5f:d2:1e:e3:ad:66:
         3c:b7:67:07:91:12:0f:c6:47:4c:68:0c:06:f9:85:45:e3:64:
         98:86:a7:51:68:fe:ca:04:10:a4:56:d3:0c:13:5c:ba:73:dd:
         14:39:56:95:8d:ee:b9:3e:4c:92:f8:bf:9f:3d:97:15:8b:7a:
         ff:52:78:71:69:77:27:52:b4:4c:6b:77:45:4b:77:2e:9f:39:
         24:b0:08:d9:a1:8f:d4:4a:77:01:c1:45:44:c7:47:6c:8b:3b:
         5a:26:44:dd:6c:71:a3:fb:c6:dc:62:58:e9:74:c6:4a:67:5f:
         a7:84:1e:cd:2a:ef:3f:1e:05:2f:3c:fe:03:c3:d5:63:39:c4:
         3a:67:57:37:ba:bf:b6:3a:61:2f:11:f4:8d:14:d1:79:3d:97:
         b3:af:59:fb:69:10:b8:ba:13:56:48:c5:e6:51:e5:ba:9e:4e:
         19:79:55:e2:dc:2d:82:d7:17:ee:ed:05:7f:cb:ea:8e:d9:e8:
         5f:0f:c6:d9:65:01:bf:ca:76:4b:ff:6f:b8:78:df:90:6b:ac:
         8c:37:da:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDexIhEIFzAvvSWUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
NDFjOGIyM2MtYWUxMC00NjE4LTlhNmUtNmIyZTE4MDhhOTI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwlg1/FBSOSNSbtOsDRbTgegoC9K4Xsn8mPh
ouvzgW7SPGgUcIgHoc+1g81xC8p+yBnugVA+gxuyzexYj84uPjhgrlnmRT0413m1
MMCxeIEh9/+Jos5Jx5uAnWaT848qxHsATHnhI8X9U/OLRYD4R4CIX7Kor89I2sP0
CPUcBR10rXKbvToSUr42YMFqeLPI0EIB+3+/CxRVz7hmFGnfZ6nZE1RlqVBNTJvs
UCdY2EXGg/x7GM4ViyVpP3phFkcKFZLxysbKsJzi+h115vQSfLvLiiR/Eqm68oRL
YXCyKwAGnmmLXX3ywG4tc6/G8F50GZXyX1DmscEYHzvU6G0PZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFABhNmpf54WCpO6mncT23exl0qBYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNzBjNTYwZGMtZWViNy0z
ZWI5LThmNDgtZGY5ZDA0Yjc1NGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRj80MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEYRsrvP2fq5M2btNOiY0rUwvypm5moeP8mlNowZk34/sjzd0FdiBk7t
HaXyTtugyF/SHuOtZjy3ZweREg/GR0xoDAb5hUXjZJiGp1Fo/soEEKRW0wwTXLpz
3RQ5VpWN7rk+TJL4v589lxWLev9SeHFpdydStExrd0VLdy6fOSSwCNmhj9RKdwHB
RUTHR2yLO1omRN1scaP7xtxiWOl0xkpnX6eEHs0q7z8eBS88/gPD1WM5xDpnVze6
v7Y6YS8R9I0U0Xk9l7OvWftpELi6E1ZIxeZR5bqeThl5VeLcLYLXF+7tBX/L6o7Z
6F8PxtllAb/Kdkv/b7h435BrrIw32iw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 17:41:19 2025 by rpki-client