Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a9abf493-96db-3e08-b569-e052e306e5c0.roa
File:                     a9abf493-96db-3e08-b569-e052e306e5c0.roa (raw, json)
Hash identifier:          4yH983TNZalwlbW/WDl6NtDGNvDmgGN/OyXurqt/mKc=
Subject key identifier:   37:70:75:C0:20:5B:16:C6:F4:EA:EA:8A:29:95:82:4F:D0:F4:74:25
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A7BECC71484CB659F0700
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a9abf493-96db-3e08-b569-e052e306e5c0.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     12271
IP address blocks:        68.173.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:7b:ec:c7:14:84:cb:65:9f:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=6c0fe5ce-b4fd-4f8d-af0b-441f1902f775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:32:08:5c:b7:2f:6e:88:8f:fc:58:9d:fc:bd:
                    46:20:1e:30:e4:1a:60:c6:a8:3a:09:90:fb:e5:42:
                    c7:f7:15:a4:d6:46:56:c8:b5:f1:56:0d:7d:c5:19:
                    40:c5:c0:8b:19:f9:ba:13:aa:a2:73:57:27:7b:0c:
                    09:e6:7c:57:2b:76:46:36:9b:06:48:f9:07:25:52:
                    7f:58:91:d5:a6:d9:f3:88:69:95:89:0b:0e:b0:16:
                    39:40:38:be:e0:bf:90:74:43:62:95:3e:fe:70:60:
                    a7:a4:c0:a6:42:5a:95:2c:f6:c9:0b:d1:6b:f9:46:
                    01:01:ff:de:c0:03:86:cd:c9:ff:e8:2c:d5:96:ab:
                    0e:94:72:c3:36:2d:f5:52:c5:70:1f:1f:a6:7a:0b:
                    9e:01:4c:d6:43:c2:68:52:32:59:84:1a:89:45:21:
                    d5:d3:09:9d:bd:93:49:7f:06:c3:90:af:96:b0:61:
                    9a:5a:2f:ce:af:fa:6d:3d:1e:22:7d:94:c4:8d:5e:
                    28:96:97:e4:ad:d2:ef:71:0a:9b:d4:a3:35:1b:5f:
                    86:9a:55:78:ae:e6:d9:bc:36:95:af:57:8e:78:31:
                    75:59:d0:f8:79:b2:2e:a8:da:6e:0f:95:36:76:90:
                    ea:f1:d4:a7:00:41:97:9a:5f:a5:e2:87:19:74:ef:
                    81:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:70:75:C0:20:5B:16:C6:F4:EA:EA:8A:29:95:82:4F:D0:F4:74:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a9abf493-96db-3e08-b569-e052e306e5c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.173.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:c8:6c:9a:4c:82:99:eb:9a:cd:88:6d:58:85:d2:24:fc:89:
         fd:f4:36:3a:6c:e7:26:1a:13:d1:44:83:17:b9:db:97:dd:80:
         a5:f2:35:22:43:66:d2:25:3c:a0:8e:bc:a7:c7:10:ea:ab:a2:
         80:ea:af:7d:8b:58:83:97:9c:35:15:47:d1:69:a5:91:63:de:
         d1:27:db:c2:28:c8:07:b0:70:e6:2c:d2:05:f4:92:a4:36:a6:
         23:f1:e1:1f:0d:77:8f:04:f1:14:55:b4:bc:3d:4f:5b:87:2c:
         25:d6:d1:8a:b5:3e:5b:cf:be:de:eb:e9:49:4b:f1:7a:e6:a8:
         17:2b:72:16:98:cc:16:39:6c:c9:25:a9:f1:fb:06:02:55:b7:
         4d:c0:d0:3b:1c:b4:a3:07:91:4f:4c:e4:0d:fa:9a:fd:26:dd:
         7c:d0:74:c3:cf:35:f3:7a:91:9f:79:ad:09:e8:e9:92:51:f8:
         1b:68:df:99:e8:7d:c0:09:90:d2:1f:9d:46:3f:9d:d7:ad:65:
         2c:38:d6:aa:f7:b7:dd:7d:93:c1:ea:4a:33:75:07:c2:21:91:
         e5:53:e8:b0:ad:66:b2:2f:3c:bf:80:aa:63:e8:36:db:39:67:
         32:3e:d3:66:2c:8f:96:a6:2c:14:33:38:1e:09:39:2a:38:30:
         ad:7d:03:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:09:59 2025 by rpki-client