Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8bd2a269-a726-338e-a711-7ec1f47933d9.roa
File:                     8bd2a269-a726-338e-a711-7ec1f47933d9.roa (raw, json)
Hash identifier:          Dz/hxUcMjWujg/meGRz8kEEIz1OXtFxG8nDDMdAB5SU=
Subject key identifier:   06:0F:11:34:01:AB:67:EA:19:76:71:D9:09:73:27:16:F2:03:73:11
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A682C052EDB1BC20C675C
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8bd2a269-a726-338e-a711-7ec1f47933d9.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     10838
IP address blocks:        75.87.248.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:68:2c:05:2e:db:1b:c2:0c:67:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=a6816977-d5c6-46cd-b11f-8e071d51c070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a5:77:e3:cf:a7:c2:b1:2d:97:27:ee:3c:34:
                    18:11:ca:d4:9c:71:31:61:43:9a:2d:69:32:28:17:
                    cd:3a:63:18:ad:80:f1:a4:fc:24:0d:7f:af:44:c6:
                    4f:00:a2:53:e6:44:4f:29:19:e3:ef:c0:52:1f:1e:
                    e7:3f:25:00:37:a5:8d:57:93:39:df:1f:41:e8:29:
                    53:1f:1b:a2:5a:27:99:aa:0a:55:46:42:9a:f2:fb:
                    1d:e9:4a:0f:7e:a2:fb:73:ef:63:bb:2b:85:f7:f6:
                    53:c5:ad:aa:60:a6:83:22:63:66:05:ce:28:f0:d3:
                    00:ea:43:c7:5d:71:1e:b1:63:50:1e:37:fb:ed:4c:
                    f1:52:3e:80:70:ba:ab:2d:fe:e5:fc:5e:c2:20:bb:
                    3d:89:cc:61:f9:56:75:8d:9a:d0:ce:0f:7b:33:49:
                    89:f8:50:67:80:b2:06:3b:51:35:9c:38:3e:04:67:
                    7b:43:c5:9e:c3:25:9e:e9:40:81:3c:da:58:63:f5:
                    09:a3:af:42:78:96:5b:f1:cd:2f:37:b8:35:12:e7:
                    ea:7c:14:4d:5f:82:0c:77:cd:fa:1d:37:6e:f1:e1:
                    30:80:2a:86:e4:e2:70:29:18:19:54:04:38:36:b0:
                    9f:fc:c3:7e:9c:c6:cb:b9:5c:ea:00:39:a7:b6:2c:
                    76:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0F:11:34:01:AB:67:EA:19:76:71:D9:09:73:27:16:F2:03:73:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8bd2a269-a726-338e-a711-7ec1f47933d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.87.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:2e:e0:bb:fa:e4:4d:bb:0b:ca:08:e6:69:dc:57:6d:62:fe:
         4d:75:2f:11:86:0e:8c:8d:e4:60:ce:0e:34:4f:62:9f:50:f4:
         2b:88:c2:e0:5d:f5:94:66:86:28:75:9c:8c:75:3a:c8:94:cd:
         08:56:1a:94:6c:e7:48:7b:a2:13:56:43:68:7c:73:9b:f0:ef:
         a2:b5:1d:1a:39:ae:9c:1a:93:74:52:82:e7:91:bd:35:54:e6:
         31:95:39:1e:40:08:9a:da:ef:ac:f6:24:2e:e1:1a:3b:bd:ac:
         7d:67:8b:ea:8b:78:b0:af:b8:8e:12:a4:b3:6c:75:03:82:0b:
         bc:f4:31:08:9c:8a:83:83:2f:f0:88:13:34:c5:96:55:af:0c:
         0e:ef:45:d7:07:e7:d8:31:b7:34:5a:15:c9:b2:75:67:57:64:
         16:b2:f4:b9:81:f8:4a:87:18:fc:e6:ef:93:a9:6e:62:dd:ac:
         cf:41:bf:4f:18:e1:c4:57:d6:81:1e:b1:2e:eb:bc:fc:d0:ed:
         59:24:f5:1c:53:6e:71:14:c4:e7:10:29:54:ae:a0:8d:c1:4a:
         f1:7a:9e:d8:be:5f:d2:7a:ba:84:f3:9a:15:cb:46:40:54:e1:
         b4:00:05:94:51:80:52:d6:55:74:28:ab:e6:53:4a:db:1a:c2:
         4d:94:98:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:07:04 2025 by rpki-client