Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8b10cf7a-da93-30fb-ba0d-0486e40f42cd.roa
File:                     8b10cf7a-da93-30fb-ba0d-0486e40f42cd.roa (raw, json)
Hash identifier:          4H9zRB9iN28xjg2bOYxXO/IVTkFuqtwuWZljuqO5uHQ=
Subject key identifier:   D1:27:44:B3:E7:AB:32:06:DF:9B:F3:9B:9D:ED:BE:51:B5:FB:25:1C
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A74ADB75BFE2940473580
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8b10cf7a-da93-30fb-ba0d-0486e40f42cd.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     11427
IP address blocks:        24.162.0.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:74:ad:b7:5b:fe:29:40:47:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=b98d42a6-6784-44d1-8bed-577790e1ef2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ff:4c:98:d8:4a:63:c7:03:11:9d:fc:57:85:
                    a8:97:04:20:3c:2a:a6:19:5f:52:78:c0:c9:88:ea:
                    1c:9d:68:4b:ec:11:9a:aa:2a:a7:68:e5:b9:f6:56:
                    f9:66:f9:ff:88:cb:44:45:8d:af:09:f0:a4:90:2b:
                    43:4c:84:da:fc:1d:ea:ca:1d:fc:9c:82:66:52:9c:
                    57:3c:61:ea:62:95:88:13:4b:ac:ce:28:d7:a0:ae:
                    f3:4e:73:b6:a1:7a:03:8c:da:f8:28:ad:6f:0c:a1:
                    b1:2f:fb:74:16:cc:d1:81:2f:f6:c2:5b:06:a0:28:
                    7c:de:0f:9f:c8:c7:b0:95:54:9e:44:9a:49:93:d5:
                    85:f0:92:33:4f:8b:b4:24:1e:96:44:2e:ce:8c:32:
                    1b:c6:3f:9a:0e:37:27:23:68:74:71:d4:3f:9d:85:
                    79:ca:c0:0b:65:dc:64:a3:e7:00:a8:0b:66:0a:b6:
                    8f:33:fc:25:9d:0b:39:4c:c3:20:7a:f2:b5:0f:3c:
                    bf:df:74:87:7c:63:01:73:c1:8d:09:8d:38:1a:64:
                    72:2f:cb:8b:a9:ff:51:15:80:20:e9:56:5f:73:02:
                    91:ca:d8:d1:d0:e5:41:08:5e:44:9d:f1:6c:c3:8c:
                    05:c1:02:65:fc:7e:7a:f8:7e:20:75:2a:12:f1:39:
                    b1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:27:44:B3:E7:AB:32:06:DF:9B:F3:9B:9D:ED:BE:51:B5:FB:25:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8b10cf7a-da93-30fb-ba0d-0486e40f42cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.162.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:85:86:c8:1c:7f:0c:b9:ac:41:ca:c0:4f:36:9a:0d:25:5b:
         6d:2c:77:38:b3:e9:71:d4:60:e6:83:51:b5:06:53:68:ea:15:
         8b:d4:80:ad:63:aa:37:4e:e3:30:03:48:57:21:b7:fc:11:6c:
         51:aa:cf:3b:61:bf:a3:d5:f4:d4:53:54:3b:f1:5d:30:0b:e5:
         25:79:3a:dc:27:85:21:ea:69:a5:b0:41:c4:00:89:dd:a6:bb:
         57:55:f1:0a:ce:b5:34:43:38:67:4b:60:3e:5d:0a:ae:1b:81:
         c6:0d:4e:4f:14:2b:8c:c1:cb:e3:a9:81:a3:ea:b7:24:f0:30:
         d2:6b:72:ca:18:eb:91:43:ee:d9:36:74:c3:fd:57:c7:f3:0c:
         11:6c:68:bd:38:68:aa:e5:66:e9:12:7f:2c:a7:4b:1b:58:3c:
         51:32:77:9f:26:9b:24:c0:6b:ea:69:ba:50:b2:44:61:61:75:
         d3:cf:c2:ae:b8:a6:ff:eb:ac:33:29:12:fa:1a:e5:a8:a8:25:
         73:23:8a:18:9e:e5:a5:71:af:05:bc:79:e5:c7:85:e5:ae:39:
         3b:86:e7:89:56:15:cf:e1:b7:b9:4a:ed:ea:01:ea:00:65:69:
         64:96:6d:c7:fb:8e:33:53:2b:7b:43:ff:08:92:ac:0d:cc:65:
         df:15:b9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:05:43 2025 by rpki-client