Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/83cd0d98-7c3a-3f86-9123-a35b3bc23c03.roa
File:                     83cd0d98-7c3a-3f86-9123-a35b3bc23c03.roa (raw, json)
Hash identifier:          co7wJrf1MlWYKEn4ibWvZmTnwM8s3Yqjyo+n//ztku4=
Subject key identifier:   8F:1B:06:3E:8F:86:B4:3C:A3:2E:E9:F4:FD:EF:D9:58:F8:CB:E3:BD
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A534C8E08D7805D13A680
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/83cd0d98-7c3a-3f86-9123-a35b3bc23c03.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     7843
IP address blocks:        75.87.224.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:53:4c:8e:08:d7:80:5d:13:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=75f6c801-4679-41fb-a554-82a19d07e015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:68:33:76:92:f0:cf:e2:d3:29:7b:f3:8c:6b:
                    e6:af:aa:ab:77:51:df:1d:57:3f:6e:f4:25:30:cc:
                    e4:82:06:28:16:51:09:62:ca:7e:d7:73:f4:3b:a9:
                    41:0b:52:a8:db:e9:c4:fa:ec:ab:74:be:a0:87:74:
                    cb:b1:02:93:eb:5c:1c:8b:1c:25:c5:0e:26:85:05:
                    17:84:f0:18:e5:77:41:04:e7:ce:83:ea:9f:aa:92:
                    e8:eb:07:53:57:23:fe:89:e2:c5:c1:bb:4f:67:f7:
                    8b:50:d8:79:d0:af:e8:40:72:f3:12:a1:ac:a4:26:
                    67:e9:57:bb:75:0d:44:57:55:14:5c:a4:ba:cc:b6:
                    ce:65:98:b8:45:e1:c3:cd:89:74:bc:13:99:05:88:
                    03:71:94:a9:f0:c8:ed:20:f4:5f:dc:a0:9f:16:66:
                    48:52:36:a5:2d:40:aa:ca:1a:67:d0:c6:d6:0d:e8:
                    e3:46:7f:ac:17:c8:49:54:f3:d6:14:09:11:97:56:
                    c0:5e:d1:e8:25:65:7e:b6:96:86:08:67:87:62:86:
                    38:4d:0c:eb:2f:2b:fc:0d:54:78:fa:0b:09:45:69:
                    a1:48:db:86:18:32:d9:15:a8:d1:fc:76:c7:53:ba:
                    db:b0:27:37:d7:40:5f:5a:03:22:f2:64:c4:32:d0:
                    fd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1B:06:3E:8F:86:B4:3C:A3:2E:E9:F4:FD:EF:D9:58:F8:CB:E3:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/83cd0d98-7c3a-3f86-9123-a35b3bc23c03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.87.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:a6:b8:de:9f:0d:6f:09:4d:94:d9:1c:9f:bc:9a:99:08:a9:
         b7:16:97:09:7a:d4:8e:c8:e3:55:79:84:59:90:da:c1:15:fa:
         f6:5d:21:18:90:2a:01:92:83:e5:a4:83:16:59:24:19:46:e1:
         08:28:94:43:ee:51:f7:29:ee:83:8b:d1:bd:9d:d7:0b:c9:9b:
         c7:e5:b0:78:10:e4:e1:40:0a:08:ad:fe:a0:b2:1b:ef:6d:ae:
         c4:6b:09:4f:00:d8:49:8c:dd:e8:76:fb:35:a4:4d:11:cb:e0:
         19:6a:3a:4c:08:4b:78:8c:c0:ff:86:67:8e:f9:8e:cc:5d:45:
         a6:51:f4:1c:d3:5f:02:78:00:4b:0a:4a:36:4d:32:25:a1:3c:
         41:d8:07:04:2e:b1:3c:a3:f2:5d:eb:70:34:50:dd:59:45:b4:
         43:59:64:62:55:1b:9d:9f:e4:d3:d1:8d:29:02:fc:b4:96:bd:
         db:d2:f2:19:2c:c3:6e:9c:30:25:c4:cf:5e:92:05:7b:6d:9a:
         f9:f4:ea:e9:cc:47:bf:9a:a9:86:83:a1:c1:b2:30:48:a9:da:
         f2:7d:c8:fe:02:02:9b:a1:a0:2c:09:bf:56:1f:be:79:ff:59:
         83:a6:93:7f:34:e6:13:e6:76:a2:3e:79:18:08:e8:e1:04:a2:
         0c:8a:da:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:14:18 2025 by rpki-client