Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7f8915eb-affc-3f89-90cc-889998d8e7cc.roa
File:                     7f8915eb-affc-3f89-90cc-889998d8e7cc.roa (raw, json)
Hash identifier:          eVQA6CoC1JBSxCNprjZX+1OglcQ70CnY6dhXYLYa7G4=
Subject key identifier:   71:F7:9A:C6:5A:80:A6:A2:26:B0:32:8C:8D:75:57:2B:91:88:74:2B
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037AF3D4B232C4B976E551C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7f8915eb-affc-3f89-90cc-889998d8e7cc.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     10796
IP address blocks:        74.87.224.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:f3:d4:b2:32:c4:b9:76:e5:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=984f4699-0df1-4c4e-82e8-f8f030bb6591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e0:4b:62:f9:b4:7d:3f:a9:a3:29:b0:c9:2c:
                    cf:02:8c:24:92:de:04:5a:a5:2c:fd:7d:6e:1f:c2:
                    f9:5b:0e:1f:01:93:2d:37:cc:4a:a3:e8:90:a9:5c:
                    c6:d7:93:7e:f0:25:56:ca:72:7c:f3:61:97:59:e7:
                    05:fd:c1:47:1c:5e:3a:5d:25:39:32:4a:ce:c5:56:
                    23:9b:8e:30:27:ff:69:c0:3c:a6:ae:98:7f:51:2c:
                    65:51:ee:b5:15:74:c3:53:e3:e6:a9:c9:b6:2d:85:
                    26:3e:a2:30:e4:73:4a:5c:c0:82:16:49:9e:da:e3:
                    91:d9:8f:b2:1b:ae:70:02:c2:f9:35:27:cc:43:67:
                    0d:6f:b1:ad:81:73:fa:8e:46:ac:93:57:a8:f2:1f:
                    49:e5:b4:aa:4b:40:35:dd:02:73:7f:5a:f2:b9:ce:
                    1a:8f:b5:17:01:5a:17:4b:00:e7:c1:32:ec:3d:51:
                    34:e4:54:e9:a4:c2:0d:a3:d3:77:92:08:f0:7f:32:
                    8f:5e:b1:09:f1:bf:5c:d7:50:8f:aa:e1:3d:e6:70:
                    29:08:18:79:c4:cc:06:c3:4a:16:27:1c:81:42:8c:
                    62:22:cf:a8:94:f7:c2:8e:23:7e:90:4b:19:a9:2a:
                    fd:3c:16:37:55:c6:db:d8:25:f6:8f:e0:9e:85:f8:
                    81:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F7:9A:C6:5A:80:A6:A2:26:B0:32:8C:8D:75:57:2B:91:88:74:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7f8915eb-affc-3f89-90cc-889998d8e7cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.87.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:e5:fa:dc:96:b5:93:d0:ac:be:20:4e:a1:bc:11:9a:84:0e:
         10:7f:92:9c:ec:d4:06:fa:35:8f:7d:ab:52:e6:13:1c:6f:54:
         2d:4b:58:fd:83:90:44:29:0d:b7:cd:3f:23:aa:75:a4:9a:e7:
         70:42:8d:00:ef:10:7e:e2:18:cf:d4:c4:2e:10:5b:de:9e:a5:
         da:98:1e:45:f3:21:5d:ef:8b:9b:5c:8a:4a:2b:39:03:4c:70:
         02:ec:e9:ed:bb:ed:dc:49:2b:e9:fa:25:19:2d:4e:1a:9a:c1:
         8a:d7:7b:7a:a6:db:6b:d8:c0:18:10:bf:9c:68:db:62:13:b8:
         22:7b:cd:f9:4c:4f:24:53:2a:48:c3:93:ac:e0:e6:55:d9:64:
         8b:cb:b0:74:f1:ab:58:34:fb:12:51:0b:17:20:2b:4b:a4:15:
         62:da:d2:5a:fa:aa:2b:2a:e7:c3:85:2a:6b:8a:f6:f5:f8:0e:
         2b:b4:f9:22:34:b1:c5:62:29:e8:8f:8f:14:8f:81:7d:92:99:
         ed:75:ff:95:c9:af:91:f0:64:de:b6:a7:a0:a4:f0:81:98:4d:
         6d:ba:51:13:28:16:5c:99:cb:0e:a8:a1:33:86:2c:81:cf:45:
         8a:52:44:e6:ac:31:78:3d:33:aa:b0:76:e0:3f:42:47:f3:dc:
         4e:9c:49:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDevPUsjLEuXblUcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
OTg0ZjQ2OTktMGRmMS00YzRlLTgyZTgtZjhmMDMwYmI2NTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuBLYvm0fT+poymwySzPAowkkt4EWqUs/X1u
H8L5Ww4fAZMtN8xKo+iQqVzG15N+8CVWynJ882GXWecF/cFHHF46XSU5MkrOxVYj
m44wJ/9pwDymrph/USxlUe61FXTDU+Pmqcm2LYUmPqIw5HNKXMCCFkme2uOR2Y+y
G65wAsL5NSfMQ2cNb7GtgXP6jkask1eo8h9J5bSqS0A13QJzf1ryuc4aj7UXAVoX
SwDnwTLsPVE05FTppMINo9N3kgjwfzKPXrEJ8b9c11CPquE95nApCBh5xMwGw0oW
JxyBQoxiIs+olPfCjiN+kEsZqSr9PBY3Vcbb2CX2j+CehfiBuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHH3msZagKaiJrAyjI11VyuRiHQrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvN2Y4OTE1ZWItYWZmYy0z
Zjg5LTkwY2MtODg5OTk4ZDhlN2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSlfgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABTl+tyWtZPQrL4gTqG8EZqEDhB/kpzs1Ab6NY99q1LmExxvVC1LWP2D
kEQpDbfNPyOqdaSa53BCjQDvEH7iGM/UxC4QW96epdqYHkXzIV3vi5tcikorOQNM
cALs6e277dxJK+n6JRktThqawYrXe3qm22vYwBgQv5xo22ITuCJ7zflMTyRTKkjD
k6zg5lXZZIvLsHTxq1g0+xJRCxcgK0ukFWLa0lr6qisq58OFKmuK9vX4Diu0+SI0
scViKeiPjxSPgX2Sme11/5XJr5HwZN62p6Ck8IGYTW26URMoFlyZyw6ooTOGLIHP
RYpSROasMXg9M6qwduA/Qkfz3E6cSfc=
-----END CERTIFICATE-----
Generated at Fri Apr 25 15:27:09 2025 by rpki-client