Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a3e9f7b3-4915-32e2-ae04-ad51f09a3807.roa
File:                     a3e9f7b3-4915-32e2-ae04-ad51f09a3807.roa (raw, json)
Hash identifier:          3CAOZFR8PDc88KLUguS9JF8m02eQ4JD7EF5mqNJNOGk=
Subject key identifier:   DC:26:27:FF:77:6A:1F:BF:E8:85:7A:4B:BC:D2:1C:BA:28:45:04:FE
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037AF601722FCDA5CBB0C580
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a3e9f7b3-4915-32e2-ae04-ad51f09a3807.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     10838
IP address blocks:        76.89.62.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:f6:01:72:2f:cd:a5:cb:b0:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=715be4e7-5003-4784-b79a-079893877aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ce:df:dc:a1:b8:48:21:3d:28:5b:9a:66:ec:
                    ff:30:c3:c3:bb:36:b4:8e:88:73:bd:b3:15:d8:23:
                    9a:03:11:87:d7:27:a6:c7:bc:ae:a8:a7:97:e7:4c:
                    b0:83:2e:1e:f9:8a:4e:c5:b4:09:c9:af:7b:4f:d5:
                    bf:57:ff:7a:75:00:ea:99:79:5d:8c:bf:d2:1d:c2:
                    46:1a:fa:54:15:e9:2e:94:88:d2:46:92:ed:18:68:
                    d7:1f:33:e4:e2:e8:d1:6f:36:68:51:ef:eb:04:12:
                    dd:be:71:6c:d4:d9:8e:8c:d1:bc:52:4f:62:59:2a:
                    3d:67:99:b8:74:10:83:69:ae:3f:3b:23:42:fe:2c:
                    41:33:96:5b:ff:33:58:88:01:2b:4d:e5:71:3f:13:
                    53:2f:ac:09:49:43:07:0c:d2:a2:21:ae:0c:a9:8a:
                    2d:d8:1e:90:6e:4d:7d:4c:67:0e:26:9b:d2:b1:4d:
                    30:6d:d4:18:16:ae:23:68:8d:a0:f3:e8:3e:f0:54:
                    68:9f:b1:40:f5:be:df:96:ed:0a:70:bd:dc:42:d7:
                    e0:9f:62:34:3b:e4:f2:f2:41:3b:79:e5:f2:21:47:
                    2c:f3:b6:e8:b9:97:8b:6e:63:45:1f:90:18:04:bc:
                    a6:38:d3:3c:75:11:22:fb:31:6a:0b:95:e5:ea:0b:
                    fb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:26:27:FF:77:6A:1F:BF:E8:85:7A:4B:BC:D2:1C:BA:28:45:04:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a3e9f7b3-4915-32e2-ae04-ad51f09a3807.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.89.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:10:ed:fb:c2:5e:fb:bf:c7:73:ff:9b:fe:38:93:60:8d:c8:
         fb:72:39:00:df:ca:a1:d1:53:20:d1:80:dd:7d:91:26:6c:3c:
         ed:55:ad:9b:f4:d8:40:9a:72:d8:d3:b8:cf:e2:14:7d:2e:08:
         96:dd:71:2a:de:2e:e7:92:86:e5:e8:97:67:5d:6e:a1:3f:e5:
         53:f9:54:12:3d:2f:4b:b3:2c:de:1b:a8:3f:e9:5f:a1:26:2d:
         2a:fa:a8:f1:26:5a:59:9e:21:09:61:70:32:b1:46:fb:5d:d9:
         f5:8a:d1:e1:c6:4b:a4:84:37:c3:16:d4:f0:2b:82:d4:e9:d6:
         76:3b:4c:99:13:9f:da:fb:3b:f9:47:8e:0c:f4:92:68:dd:ed:
         a4:01:32:08:d7:80:08:f7:6c:df:b6:31:97:62:4d:74:ee:b9:
         59:90:55:9d:c6:18:b3:24:c0:83:e2:3e:6c:ea:37:88:f6:1c:
         58:ff:6b:0e:6e:9c:d7:96:da:ac:31:d3:35:21:e3:00:99:ee:
         d3:83:15:96:6f:f3:75:c3:f3:89:0f:3b:98:3a:63:92:88:62:
         e9:f3:75:4f:12:42:8a:a5:f6:ce:0a:e3:5b:ce:d4:72:ed:e8:
         37:69:8e:12:45:ea:d0:6a:a0:f3:1e:ef:72:fd:d7:84:c4:3e:
         d7:a5:0a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:09:34 2025 by rpki-client