Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8989b356-59bd-36ad-9399-137418673b8d.roa
File:                     8989b356-59bd-36ad-9399-137418673b8d.roa (raw, json)
Hash identifier:          zZ3pPN+wDTu2dORTiVCLs2PUYRITV9Ff71ijTQCUyLQ=
Subject key identifier:   58:4F:DD:EA:91:98:C5:D4:76:1F:3E:8E:12:FB:4D:18:59:98:8A:F8
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A8F689F5EFDCA303FA8E0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8989b356-59bd-36ad-9399-137418673b8d.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     33363
IP address blocks:        24.123.208.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:8f:68:9f:5e:fd:ca:30:3f:a8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=9e90b5df-a90d-4600-b4d0-e7f95317aa5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:06:f3:95:2c:48:26:6f:9c:aa:57:bb:ce:5a:
                    45:96:bf:53:7d:4e:b4:f3:79:b7:b0:73:8f:8e:91:
                    4e:6a:68:bb:f9:99:07:ba:5a:f5:4c:8f:74:56:37:
                    68:44:fc:d6:34:ff:c8:66:aa:06:08:4f:8b:b4:58:
                    8c:75:61:5f:56:49:dd:88:12:ad:a5:20:56:35:f6:
                    56:4b:3a:3c:77:57:24:1c:fd:7a:22:cb:2b:24:d5:
                    a3:d4:34:26:cc:d2:52:df:8b:a0:53:1a:5a:91:18:
                    52:af:d7:dc:19:ac:cb:c8:30:1e:a7:af:fd:ff:be:
                    25:65:15:b1:1d:ba:56:1c:b0:02:b4:83:81:23:c4:
                    d1:74:1a:4c:cb:e0:98:86:ae:42:43:43:62:1a:08:
                    58:70:83:e4:3e:7e:fb:6d:9d:5e:0b:54:7b:80:8f:
                    8c:14:d5:c7:02:a7:ae:79:6f:18:9f:3f:8f:1b:32:
                    f4:70:0b:35:a9:41:cb:97:07:3c:cc:e3:be:ea:92:
                    ea:7a:8a:ec:e4:21:5c:dd:e6:01:4a:28:d9:e6:e9:
                    90:62:49:ec:1c:39:06:23:db:16:7a:7e:86:f7:a6:
                    f6:e0:5c:a4:f9:47:fd:a2:f8:ee:3a:3f:3c:51:62:
                    11:ea:a0:f9:cf:9d:a5:32:25:de:4b:38:6c:4c:a8:
                    55:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4F:DD:EA:91:98:C5:D4:76:1F:3E:8E:12:FB:4D:18:59:98:8A:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8989b356-59bd-36ad-9399-137418673b8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.123.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:44:36:fb:de:f3:39:6c:6c:80:b7:81:cc:2f:41:72:71:e9:
         2d:48:99:57:16:27:ac:e8:bb:30:bd:5d:4b:b5:8a:49:f6:0d:
         7b:2f:2e:3a:0f:7d:bc:ff:14:f3:6f:5e:f0:31:fa:9f:53:b7:
         79:d0:7c:93:cd:d5:5a:d0:0c:f8:ee:0f:f9:a3:68:da:ff:3a:
         1f:32:1f:77:3a:d6:6d:11:9d:53:1d:6a:01:43:10:ad:3a:ad:
         ba:16:e2:c9:19:01:6c:6a:71:84:7b:92:b7:39:49:26:de:f7:
         9b:a9:75:25:6d:dd:aa:bd:cc:87:77:15:cc:7b:f1:62:a0:63:
         06:bf:6b:18:e3:7f:2b:6c:4d:69:d6:ff:0b:6f:fc:ed:ef:26:
         80:8b:11:22:9b:ba:4c:1d:f9:5a:58:82:65:44:93:e2:d6:f9:
         f1:ec:f2:23:64:4c:ff:50:6b:2a:8f:fd:0c:ce:45:fd:9e:82:
         9b:ab:1b:08:4c:e5:0d:1b:cb:56:97:e9:d3:28:15:b6:a0:ca:
         7c:da:77:6f:84:99:bd:25:24:e5:c2:20:4c:68:a1:5c:c8:c5:
         1c:ee:62:b8:b9:93:42:df:15:54:3b:67:f8:b8:0a:4e:fb:27:
         ad:bf:e0:11:fe:a4:e4:fe:ba:d3:b0:a3:1b:a3:2c:e5:4d:b9:
         c4:0f:0a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:12:56 2025 by rpki-client