Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8c77e539-7b5a-3996-999f-f7c4d0f38e5c.roa
File:                     8c77e539-7b5a-3996-999f-f7c4d0f38e5c.roa (raw, json)
Hash identifier:          9ptsfefO8+iXgva5i6Lx9zIB37fL2Zk/GGFOI5rQ3Oc=
Subject key identifier:   94:EF:53:0A:7C:B2:44:7C:94:D2:D7:00:5B:D7:9B:63:07:52:3C:C0
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A92084AFC02AE8490FE00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8c77e539-7b5a-3996-999f-f7c4d0f38e5c.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     33363
IP address blocks:        67.53.96.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:92:08:4a:fc:02:ae:84:90:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=8a54cfd5-70b5-4fd8-bb8a-749edee308a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:98:53:fe:85:45:0b:23:40:a0:20:dd:f9:17:
                    1f:bf:5b:fa:70:4a:07:fb:45:11:89:d8:59:57:2e:
                    95:09:7e:0b:18:4e:ee:c6:ef:40:b0:5d:b9:cd:d4:
                    84:34:db:51:e7:4d:79:45:41:b5:1c:07:9b:8e:fe:
                    9f:3b:d9:d2:5a:3b:9e:36:58:dd:a8:3a:bb:44:7d:
                    71:12:ca:db:2a:a2:1e:f4:44:a4:3d:87:cb:ad:6b:
                    b9:e6:64:cd:82:11:a5:b9:2a:dd:e3:9e:ac:f8:12:
                    ba:97:b3:12:75:f4:ba:58:b1:5e:d8:62:48:ee:57:
                    44:4b:52:c3:d2:9f:2d:82:c6:c8:d9:aa:35:8a:c5:
                    20:8b:7a:42:88:3c:df:04:bd:54:c7:77:b4:64:c1:
                    ca:89:f0:06:86:9d:1c:c3:53:62:b5:92:7d:88:c6:
                    04:40:4c:44:fa:77:6f:fc:02:d6:90:49:51:69:f0:
                    ae:01:0a:b3:42:bf:bd:3d:81:67:a0:99:07:8e:7b:
                    e5:db:bd:17:23:dc:fa:31:ab:1d:f2:0e:de:c2:84:
                    11:7a:3b:14:7c:6f:3a:2a:f8:12:cc:06:7e:07:b7:
                    75:79:cc:8b:2a:45:0c:05:94:9c:36:09:23:d0:e7:
                    97:30:ee:e9:d3:5d:89:8b:5e:34:62:06:df:1c:dc:
                    c9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:EF:53:0A:7C:B2:44:7C:94:D2:D7:00:5B:D7:9B:63:07:52:3C:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8c77e539-7b5a-3996-999f-f7c4d0f38e5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.53.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:fc:f6:0f:c3:db:56:f7:83:45:4c:91:4e:cc:45:c0:3c:65:
         d7:4a:e4:a3:0c:8b:be:72:09:e3:ed:49:38:ba:9b:26:e5:c8:
         69:0b:5d:7a:f2:81:db:5f:69:26:73:bd:8b:41:3c:ca:ae:69:
         c4:d4:78:71:0d:6a:bc:8c:35:2f:78:11:09:60:d9:76:3a:b1:
         2a:3d:56:13:27:1b:2b:57:43:d1:0e:d1:b9:78:21:33:51:ae:
         80:1f:10:e0:49:8c:12:3c:58:63:bb:42:41:7c:8a:c5:5a:e6:
         ae:ff:3a:b8:b9:5c:d5:22:f1:80:dd:00:f8:d8:9c:aa:3e:15:
         11:05:4b:de:80:67:86:2d:ca:dd:59:1f:62:aa:18:e1:e7:ef:
         96:56:27:f8:bf:83:1c:7c:4c:b9:24:13:18:43:af:ff:13:5c:
         d4:4c:46:f7:ad:29:2d:f3:28:a0:8f:2e:90:13:e6:5c:82:d7:
         bc:31:e9:32:a5:a0:b5:2a:53:16:7c:9e:25:40:3e:ea:b3:01:
         d4:85:22:27:13:5c:9e:3b:93:c2:bb:68:43:1a:77:72:11:d5:
         6a:fd:e8:75:77:3c:c3:69:7d:17:d3:91:d7:72:26:bb:d4:9f:
         67:3f:8c:60:c0:8b:68:40:1d:19:81:45:0e:c9:5c:66:ba:d2:
         7b:f6:21:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:05:40 2025 by rpki-client