Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a485ac56-b09e-3e24-a132-aab7e2fbd803.roa
File:                     a485ac56-b09e-3e24-a132-aab7e2fbd803.roa (raw, json)
Hash identifier:          IdtNgbgCL/lTEj401OOeVraXIsUtAxXMICbapX+vSr4=
Subject key identifier:   57:9B:D1:E5:EA:F5:8D:65:85:E3:67:58:3F:A3:A4:60:87:C7:88:27
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037AE5A52C4D16CC91862380
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a485ac56-b09e-3e24-a132-aab7e2fbd803.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     8052
IP address blocks:        69.76.112.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:e5:a5:2c:4d:16:cc:91:86:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=53159524-1668-4b46-a2f5-2f440cbc674d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c0:a3:6b:4c:5a:1a:8c:95:57:b6:b4:81:72:
                    a9:5a:0a:7b:c9:6e:1e:a3:c1:7a:4b:93:55:5c:6b:
                    5d:04:b3:2a:a0:3f:d8:26:86:c2:9e:70:c3:05:45:
                    44:cd:20:08:00:e9:a5:46:ae:43:9c:32:65:36:1d:
                    c3:78:3e:4a:59:21:03:41:b9:fc:80:61:d9:84:85:
                    6d:e5:d3:e6:51:00:30:64:e4:82:f9:91:e8:92:7e:
                    9e:e5:af:0c:ce:8f:db:a7:e8:ec:32:95:80:3b:19:
                    db:9a:8a:8e:f2:aa:09:ce:20:29:d9:f4:23:33:1a:
                    d5:4d:21:55:64:d9:8c:0e:9b:3b:97:b5:d9:6a:be:
                    46:3c:90:82:6b:93:58:94:dd:9e:ab:0f:f1:2f:bd:
                    8d:bb:06:97:56:f5:0f:ee:a7:02:cf:95:93:06:52:
                    c9:ea:4e:44:94:e4:89:91:72:90:94:7f:31:f3:ed:
                    e7:04:84:03:1a:f2:58:7e:9f:f2:31:54:43:fb:f5:
                    c0:c8:e7:74:15:98:49:20:f5:31:2c:32:23:d3:17:
                    72:70:4b:94:2e:ff:2e:a1:f2:38:d1:51:24:5f:16:
                    a4:ee:84:b0:a7:58:0c:33:3d:36:78:cb:32:38:a4:
                    c5:17:25:5f:c5:72:e2:df:37:c1:a9:54:d0:46:6e:
                    52:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9B:D1:E5:EA:F5:8D:65:85:E3:67:58:3F:A3:A4:60:87:C7:88:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a485ac56-b09e-3e24-a132-aab7e2fbd803.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.76.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:5c:a6:e0:a5:4e:60:dc:e5:b4:a1:16:04:bc:19:fb:79:b9:
         30:24:62:c6:f3:11:34:f1:31:3d:67:10:59:9c:0e:7d:62:4b:
         a8:9b:19:3d:e7:1c:6f:5b:ec:52:34:7f:2f:bb:c6:94:e4:fb:
         bd:1d:56:c3:69:cb:b5:3a:e1:4d:82:d3:fa:56:14:ec:21:52:
         e8:7b:ee:ce:2e:9a:e6:f6:6d:c8:b9:27:b7:ef:09:f4:a2:bb:
         92:2e:85:e9:6f:af:48:8c:f2:05:28:c9:11:b1:8f:f5:75:09:
         8c:c6:e8:18:80:23:d4:77:9d:c3:be:ae:89:e5:dd:3d:43:25:
         db:81:3d:37:80:c4:80:0f:e2:76:2f:43:f7:42:d8:cc:8d:ae:
         50:22:d0:47:a6:20:ef:45:73:c3:b4:6f:d3:00:c6:8b:b2:ca:
         ce:73:3b:96:72:a5:71:2d:27:f8:db:fa:63:b3:37:f4:e3:46:
         58:41:3a:ee:18:2c:4b:d4:e4:85:5b:e3:e2:79:a8:9b:51:7c:
         4a:85:bb:57:b3:9d:37:7d:91:21:b9:18:65:a6:98:d0:f9:d8:
         f6:c6:95:84:6c:43:77:81:b9:c1:92:62:29:c6:75:cb:19:6a:
         a1:e9:4a:7a:82:f4:a5:45:c1:4e:fb:ff:f2:9b:f7:e2:38:a0:
         5d:58:fe:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDeuWlLE0WzJGGI4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
NTMxNTk1MjQtMTY2OC00YjQ2LWEyZjUtMmY0NDBjYmM2NzRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8Cja0xaGoyVV7a0gXKpWgp7yW4eo8F6S5NV
XGtdBLMqoD/YJobCnnDDBUVEzSAIAOmlRq5DnDJlNh3DeD5KWSEDQbn8gGHZhIVt
5dPmUQAwZOSC+ZHokn6e5a8Mzo/bp+jsMpWAOxnbmoqO8qoJziAp2fQjMxrVTSFV
ZNmMDps7l7XZar5GPJCCa5NYlN2eqw/xL72NuwaXVvUP7qcCz5WTBlLJ6k5ElOSJ
kXKQlH8x8+3nBIQDGvJYfp/yMVRD+/XAyOd0FZhJIPUxLDIj0xdycEuULv8uofI4
0VEkXxak7oSwp1gMMz02eMsyOKTFFyVfxXLi3zfBqVTQRm5SswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFeb0eXq9Y1lheNnWD+jpGCHx4gnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYTQ4NWFjNTYtYjA5ZS0z
ZTI0LWExMzItYWFiN2UyZmJkODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRUxwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD5cpuClTmDc5bShFgS8Gft5uTAkYsbzETTxMT1nEFmcDn1iS6ibGT3n
HG9b7FI0fy+7xpTk+70dVsNpy7U64U2C0/pWFOwhUuh77s4umub2bci5J7fvCfSi
u5Iuhelvr0iM8gUoyRGxj/V1CYzG6BiAI9R3ncO+ronl3T1DJduBPTeAxIAP4nYv
Q/dC2MyNrlAi0EemIO9Fc8O0b9MAxouyys5zO5ZypXEtJ/jb+mOzN/TjRlhBOu4Y
LEvU5IVb4+J5qJtRfEqFu1eznTd9kSG5GGWmmND52PbGlYRsQ3eBucGSYinGdcsZ
aqHpSnqC9KVFwU77//Kb9+I4oF1Y/uw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:05:42 2025 by rpki-client