Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7a4a7a68-0730-3b56-a2bc-fb275ff5e40a.roa
File:                     7a4a7a68-0730-3b56-a2bc-fb275ff5e40a.roa (raw, json)
Hash identifier:          rqBz9Jdmi5j7VajEVxroPyazNJpH0Eu/qvtUYWhvVoI=
Subject key identifier:   F0:FA:67:8C:D2:F8:CF:FB:05:C1:AB:80:B9:4C:87:16:4B:A2:54:3D
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037B076275A76F2585AE0480
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7a4a7a68-0730-3b56-a2bc-fb275ff5e40a.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     13343
IP address blocks:        24.166.153.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:07:62:75:a7:6f:25:85:ae:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=71d28a1e-4933-4344-aa1c-ba3012b728f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:dc:d9:23:94:70:6f:c2:c1:da:37:76:71:55:
                    c4:b3:d5:8b:eb:90:1c:30:9f:ee:90:97:93:3e:b2:
                    03:aa:e4:76:c6:e7:da:84:6a:e4:60:0f:e3:7b:88:
                    dc:64:13:d8:da:aa:7c:09:bf:9e:6d:2f:05:c6:ed:
                    63:62:38:97:05:62:00:25:b1:7b:d1:4d:67:a4:bb:
                    85:ce:c6:ed:5a:c4:a1:1d:0f:f1:94:96:74:9d:01:
                    c4:58:5e:0e:c6:8c:66:ef:88:c6:b9:5a:83:80:89:
                    cb:6b:b7:48:e7:6f:68:1c:07:1d:78:09:32:06:30:
                    aa:c7:bf:21:83:d5:90:eb:0c:7b:e4:54:72:a8:05:
                    ee:3d:de:38:90:d7:61:15:9b:b6:c1:bd:48:27:60:
                    63:48:a4:3e:5f:0c:06:d3:40:78:51:c9:28:65:db:
                    70:47:6d:e1:3e:4f:34:52:44:08:cd:ed:c1:d3:ff:
                    3a:4b:62:37:ac:e4:08:a7:1e:26:b4:05:ba:8d:fa:
                    47:f8:26:d1:78:f1:27:eb:0e:f2:84:9f:58:e0:61:
                    f0:ec:97:3e:aa:9c:bf:24:d1:44:25:24:1d:c6:9f:
                    22:7d:de:c4:e3:2b:9d:2f:19:d1:84:9f:c1:d3:d6:
                    77:08:35:da:f7:48:45:4f:ea:90:83:40:d3:aa:ab:
                    33:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FA:67:8C:D2:F8:CF:FB:05:C1:AB:80:B9:4C:87:16:4B:A2:54:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7a4a7a68-0730-3b56-a2bc-fb275ff5e40a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.166.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:9d:e1:f6:61:78:10:68:56:25:7c:d2:18:6b:5e:80:46:f3:
         14:61:03:54:92:38:df:1d:81:e9:f8:b4:4c:89:1f:0e:85:47:
         98:e4:7b:a7:62:33:bf:20:01:30:a8:19:e2:c6:11:62:2b:8f:
         e3:12:a9:90:ae:e2:40:d9:a3:4c:9b:33:fb:b6:17:d8:72:d1:
         dd:c7:ce:85:91:b0:73:40:c2:7f:99:d0:70:09:a4:b4:ae:6e:
         52:5e:02:9d:3e:d2:56:f0:84:73:c6:94:9b:7c:2c:f2:63:38:
         47:04:98:23:77:b7:ac:b7:b1:d3:62:2e:6e:a0:00:55:8d:fa:
         27:a2:ba:0c:2d:be:77:73:d3:cd:a9:c2:a7:3f:4e:d6:fb:09:
         7f:74:e1:a7:00:d9:69:a8:32:29:a3:38:4b:4e:db:63:a2:b7:
         87:59:1a:64:c7:29:e2:77:42:86:30:43:12:fa:80:85:04:ef:
         57:ca:26:95:3c:57:8a:bc:b8:91:a1:98:0e:b0:c8:6a:c6:fc:
         5d:a7:01:53:da:9e:1e:a5:9f:a2:55:b1:ce:3a:69:9a:35:88:
         28:ac:2f:96:96:32:9a:3b:b8:95:f5:35:40:0c:81:49:f0:e0:
         11:54:6d:17:34:88:36:da:46:de:af:22:c5:ea:3c:a7:1f:60:
         40:63:ca:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:07:01 2025 by rpki-client