Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a281ddbc-a17b-36d3-a813-4a84acba7db4.roa
File:                     a281ddbc-a17b-36d3-a813-4a84acba7db4.roa (raw, json)
Hash identifier:          5iVlBIs3VBNIZZ//27Wn/0TjE4jZxfzguircMM2zQnU=
Subject key identifier:   F4:D5:45:A2:E7:33:49:D4:18:03:DE:97:B7:0F:0C:11:51:5B:98:E3
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858482EC00D4D706515A4BCAAE500
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a281ddbc-a17b-36d3-a813-4a84acba7db4.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     20001
IP address blocks:        24.160.48.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:c0:0d:4d:70:65:15:a4:bc:aa:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=1765e0b0-c0d1-40fe-86ad-a09063b99cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:10:0d:62:f3:f3:de:53:47:f2:58:8f:b2:6b:
                    6f:62:32:27:98:a2:70:89:17:e8:9c:0c:f9:8c:66:
                    c2:71:bf:2b:c3:d4:48:b7:5f:f1:75:16:49:b0:76:
                    b9:a5:f3:fc:ff:39:fb:8a:0c:cb:b7:3e:f8:66:34:
                    78:4f:88:1b:49:83:8a:0b:51:3e:3b:01:b7:c6:25:
                    c5:1b:29:9b:f7:53:32:df:1d:53:74:c7:df:4d:34:
                    be:f8:78:9c:d8:9b:7a:46:b0:c1:15:ed:0a:c4:7d:
                    a2:e2:55:12:2f:0c:3e:5f:3a:c1:d3:ca:63:a4:b0:
                    0c:02:ba:f9:0d:c4:5b:25:cb:30:bb:0b:4d:5f:eb:
                    7a:2c:cb:91:8a:50:de:be:1a:2e:a7:55:4f:ab:45:
                    80:f7:26:c7:1e:06:4a:2f:14:0d:da:d7:82:fa:5b:
                    73:d1:de:d1:30:ee:8a:d0:eb:59:00:d9:99:8b:16:
                    53:38:03:ca:4a:51:9a:50:d5:34:2b:e1:68:c9:03:
                    81:4b:cb:fc:c4:1c:fe:6e:f3:d5:0e:0c:a7:50:34:
                    75:c9:1d:04:8b:16:14:e9:5b:ee:58:6c:5f:c8:ce:
                    ab:ed:ce:24:c5:62:2a:89:a6:5f:af:19:ae:a4:c1:
                    70:d0:4c:07:b3:ed:82:46:e1:27:35:66:98:ac:8f:
                    86:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D5:45:A2:E7:33:49:D4:18:03:DE:97:B7:0F:0C:11:51:5B:98:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a281ddbc-a17b-36d3-a813-4a84acba7db4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.160.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:70:d9:2e:e9:17:86:07:2f:e8:c1:bf:30:56:75:23:7a:a7:
         8b:ee:ed:f2:de:bb:c7:8e:e8:60:d4:79:97:7a:1c:95:fc:b8:
         57:58:ce:65:6a:2a:83:ed:c0:d6:ff:48:52:66:34:2d:dd:bd:
         1c:f7:4b:7d:a6:01:1d:73:4e:50:0b:c7:f2:b9:cc:0f:51:fe:
         26:9c:fe:7a:10:9a:77:b4:76:51:fa:b2:0a:1a:f0:13:a1:99:
         b2:bf:e0:b8:44:6c:ef:e9:8d:9b:98:b7:6c:82:30:6d:9f:3c:
         54:f8:30:a2:02:47:b9:09:21:16:0c:37:52:84:8e:c4:6f:a6:
         47:99:94:5e:35:29:4c:fd:0d:52:d8:bc:1d:3f:cf:4e:3c:76:
         d5:b6:00:e1:ff:f4:bf:1e:47:01:12:97:fb:22:27:16:43:76:
         34:f3:a3:ae:0f:36:09:2e:4f:7d:9c:bf:33:38:0f:6b:4f:ec:
         90:d2:d9:d8:22:ed:69:98:73:4c:54:97:0a:25:f9:ba:ac:bb:
         d4:8e:fe:86:19:a8:12:26:60:20:60:f9:8b:c2:0b:64:f5:81:
         e6:62:ce:47:79:51:1e:f6:ba:8a:b3:1c:66:07:a9:7c:af:27:
         4d:b7:9b:6b:15:c1:a9:5c:a4:4a:18:ed:3f:fd:6e:c4:8a:11:
         6a:25:67:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:12:44 2025 by rpki-client