Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/98c4dab8-1be7-3622-b52e-4157a02f4d10.roa
File:                     98c4dab8-1be7-3622-b52e-4157a02f4d10.roa (raw, json)
Hash identifier:          TodzOYqzPI9axTRGbcwy/vsUsq+J9roBQ1peojVdV5c=
Subject key identifier:   10:8F:DA:DA:DE:4A:12:21:E1:E9:47:66:58:1A:1B:2F:BE:37:DC:4C
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858487325B41F488FF4540B35C860
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/98c4dab8-1be7-3622-b52e-4157a02f4d10.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     16787
IP address blocks:        107.14.100.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:b4:1f:48:8f:f4:54:0b:35:c8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=456398dc-f119-4c3b-b8a0-dac0a69c3b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:33:9c:31:81:49:e6:ce:33:b4:36:11:f9:5f:
                    03:e0:fe:e9:97:69:4b:e9:f1:c5:1a:a5:9c:c1:f8:
                    70:73:37:a4:99:25:13:52:a0:e8:73:f7:de:b0:0f:
                    47:32:5c:07:89:4f:25:50:f6:27:e8:cb:79:41:78:
                    10:ab:86:e6:30:f5:a6:d8:dd:17:0b:7b:db:96:76:
                    13:2e:90:53:30:12:84:b0:63:c0:62:47:eb:23:89:
                    ab:3c:30:fd:9c:9b:36:93:46:54:85:57:97:1e:3a:
                    16:f2:46:b9:3d:07:90:f7:d6:7a:98:29:98:68:9c:
                    a5:61:7e:59:e0:5f:b2:60:3d:f3:d2:0c:12:90:2c:
                    f7:76:c8:1e:ea:91:61:b5:df:3b:9d:6c:8b:13:05:
                    41:c5:6e:54:42:81:8e:82:83:ba:50:3d:ba:76:86:
                    6a:74:f6:ba:24:b2:13:40:f5:38:8e:c1:8f:dc:3d:
                    e8:50:42:0c:eb:a8:91:c0:b9:3a:cd:db:22:fc:2b:
                    91:1c:ed:83:75:74:b7:1e:4f:e6:7a:12:4e:42:3e:
                    cc:4a:f2:82:ee:94:b3:dc:00:0a:79:6b:67:ca:32:
                    33:a2:f2:14:3f:fd:9e:1c:cd:14:d1:ea:31:98:c3:
                    bd:e3:79:be:13:30:be:9c:da:4b:6d:ae:74:b3:23:
                    3c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8F:DA:DA:DE:4A:12:21:E1:E9:47:66:58:1A:1B:2F:BE:37:DC:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/98c4dab8-1be7-3622-b52e-4157a02f4d10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.14.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:38:f8:8d:cf:f1:d6:55:da:11:b6:d2:6c:07:02:a0:95:ee:
         8a:6a:06:6f:27:d5:69:66:55:0d:fb:5e:6e:72:42:27:98:a2:
         66:ac:6f:a8:6d:2c:7a:d3:c2:67:3e:6a:b9:2c:90:73:c9:96:
         33:a7:54:14:da:83:63:be:f5:ac:e1:fb:aa:46:9a:c4:64:73:
         d7:c9:8b:d8:1d:13:da:70:c0:ff:6c:4c:ab:c5:ad:e8:0c:02:
         b8:8c:06:a3:76:3a:14:03:f8:6f:a4:5d:d8:f5:51:61:bd:f9:
         96:9d:dd:b4:fe:bc:49:2c:c6:b2:b7:80:01:b3:73:31:de:28:
         8a:90:3a:26:94:b2:bb:36:d0:04:6f:91:af:63:d3:1c:d9:cf:
         9e:35:23:28:93:f9:e5:fc:57:1e:16:cc:14:f8:df:df:a0:42:
         53:0f:83:02:a4:2d:ec:38:0a:97:ee:50:72:a4:62:97:2b:18:
         1d:a5:a2:2e:f3:54:89:8b:30:e3:63:14:5e:a5:1d:24:e6:14:
         d9:2c:ca:0f:29:fa:ea:c4:e3:b2:1b:20:36:b6:30:16:dd:32:
         ea:25:31:79:10:10:18:b7:27:13:d3:cc:bb:8c:ba:0a:6f:21:
         ba:83:23:96:06:7b:19:59:f9:5c:e0:af:08:05:47:da:b2:78:
         ff:ce:42:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:25:21 2025 by rpki-client