Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/943f5e59-fac0-3f48-9cee-f2025167afe0.roa
File:                     943f5e59-fac0-3f48-9cee-f2025167afe0.roa (raw, json)
Hash identifier:          79hD+kfoSeMd9oclN6zH257EVzzwmCf9vtzir2lXHLA=
Subject key identifier:   D5:95:8C:F4:0A:F1:39:80:98:B7:AC:30:AE:8D:F2:C0:5F:8A:A8:C4
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A824EAA19A75010B41100
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/943f5e59-fac0-3f48-9cee-f2025167afe0.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20001
IP address blocks:        76.178.8.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:82:4e:aa:19:a7:50:10:b4:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=e6d997ec-2a04-489e-8062-608edb02ca88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d4:80:25:0a:4e:f9:b5:6f:59:16:8d:5e:92:
                    70:9c:3f:52:5b:bb:e7:93:94:19:b4:13:22:ca:ef:
                    48:db:37:cd:6c:58:66:4d:0f:f0:80:4b:f0:56:19:
                    85:28:8c:84:53:6b:64:71:6b:66:e3:1a:1e:7c:a3:
                    30:18:98:5b:3a:10:c9:b8:bb:12:5e:8b:80:c7:4c:
                    4b:19:b2:7c:71:24:d4:77:6b:0e:c7:c1:80:56:24:
                    6c:ae:aa:f4:f0:b2:95:34:ca:73:33:fc:64:1c:85:
                    e3:7c:28:4c:1d:1e:43:dd:b7:31:c0:69:e3:2d:09:
                    9a:34:8c:b5:f8:4d:dc:3e:a9:8c:76:db:07:c7:8c:
                    83:eb:74:74:17:1c:ee:b1:8f:ec:cd:54:c1:7f:74:
                    60:00:68:f3:de:db:5f:9f:74:35:46:6c:6c:48:f9:
                    57:0b:77:77:2b:1b:6d:17:49:80:5c:59:a1:15:d7:
                    db:c9:be:1c:6f:17:de:90:fd:a9:91:8a:fd:c4:a3:
                    59:6c:03:d9:d5:fc:4a:17:ec:a8:89:e8:d2:86:f7:
                    df:29:7e:00:7a:60:df:1d:5c:32:b9:e5:34:6f:fa:
                    90:ef:69:0b:7e:8e:d6:8b:4b:41:c8:fb:d4:a1:20:
                    b5:1d:50:59:12:16:2c:4a:50:8c:13:84:e5:82:9b:
                    d2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:95:8C:F4:0A:F1:39:80:98:B7:AC:30:AE:8D:F2:C0:5F:8A:A8:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/943f5e59-fac0-3f48-9cee-f2025167afe0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.178.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:ad:e7:56:3c:04:fa:12:e3:59:b2:64:9b:4f:32:7a:7c:db:
         41:41:f4:30:d0:d8:34:a6:f3:1b:8c:4a:5c:1c:83:8e:5d:6a:
         76:23:52:21:e6:7b:c0:63:ce:28:0d:a8:ec:86:af:a1:7d:bd:
         91:05:c3:dc:2c:a8:03:8c:1c:c6:f2:85:aa:16:00:d3:60:2e:
         2c:a3:b2:7f:ef:82:92:c5:bc:cf:6f:3a:9d:b1:e9:fc:82:45:
         58:cf:67:c2:91:53:8b:75:29:fe:a9:d4:20:e3:f3:e8:f1:87:
         9c:77:f2:72:99:aa:e9:43:7e:c9:10:de:3d:bf:7e:19:c7:e3:
         47:fc:f5:1a:eb:37:0f:e0:a8:07:f1:af:85:47:63:fd:62:7b:
         be:f3:81:ab:d7:66:2e:76:04:9e:8c:ce:d3:10:96:5a:94:12:
         27:79:92:9f:24:1f:4c:73:60:c8:11:8e:34:4c:98:97:29:e6:
         12:cb:a9:96:1a:dd:08:45:2d:e3:24:66:31:4e:a2:8f:80:73:
         8c:b8:76:a4:87:46:ad:ae:76:54:58:b5:b8:09:05:b5:12:e8:
         a0:d5:be:59:e7:a5:bb:fe:c8:5e:46:f7:b0:f1:15:8c:4e:d9:
         79:03:9f:a5:3d:ee:f7:30:d4:44:64:da:6a:53:45:20:4c:eb:
         d7:86:10:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:24:37 2025 by rpki-client