Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/added8e5-da5d-3370-a673-6a720df2ea7f.roa
File:                     added8e5-da5d-3370-a673-6a720df2ea7f.roa (raw, json)
Hash identifier:          9KA9sSp4dqflW2umOSA3VKI/2j51AmAPpiwNdu39Idk=
Subject key identifier:   EA:3F:D0:03:A3:D3:F7:54:5D:5D:D0:91:41:37:66:69:D1:C0:73:D5
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A519A4EE4B62E0802CC38
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/added8e5-da5d-3370-a673-6a720df2ea7f.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     7843
IP address blocks:        69.134.216.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:51:9a:4e:e4:b6:2e:08:02:cc:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=4b0c7de9-5908-4fb5-9bde-3ca2e06763e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b1:81:c9:76:2b:b2:39:56:a6:8f:49:3f:dc:
                    e8:73:96:11:73:98:ea:0b:8c:ee:1e:db:ec:fd:90:
                    65:ea:51:d4:1b:60:45:0e:c4:3f:a6:a5:51:e0:19:
                    a8:cc:c0:28:0b:ca:2b:e4:7a:e8:47:f5:83:e6:5c:
                    6a:bd:01:b1:32:e5:f2:a4:1b:93:47:58:5e:95:58:
                    33:b7:5e:96:0c:b6:47:a8:9e:c0:60:92:9f:fc:85:
                    fa:8e:d8:58:ef:b3:45:c0:4c:13:85:12:51:e6:6e:
                    3d:58:20:e1:6d:ff:1b:d7:90:21:9b:53:55:b4:1a:
                    62:bd:78:95:ce:d3:f2:d2:7f:78:32:ee:7b:fd:18:
                    ca:eb:af:62:85:5c:a0:bc:43:fe:db:21:df:32:e0:
                    82:f9:bd:dd:30:bd:a6:5d:c3:93:22:dc:50:6f:55:
                    4b:e7:b1:ff:a2:ca:a4:cb:bc:61:cc:c8:6a:b2:1d:
                    a6:98:89:f6:43:34:76:3e:85:7f:35:1f:1c:b9:2a:
                    c1:53:e6:b1:e0:6d:89:d1:6d:96:bf:66:1c:79:bb:
                    39:36:d4:47:da:71:4e:e3:82:6c:f5:5a:ba:a3:63:
                    a1:37:a8:92:54:9d:e1:d8:83:3a:2e:18:58:de:ac:
                    01:cd:2a:16:55:6f:44:d4:b0:a5:6f:98:09:02:a3:
                    c9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3F:D0:03:A3:D3:F7:54:5D:5D:D0:91:41:37:66:69:D1:C0:73:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/added8e5-da5d-3370-a673-6a720df2ea7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.134.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:e1:e7:3c:af:1e:ce:d7:1b:36:cb:37:77:da:a1:48:95:cf:
         1c:41:6a:08:cc:8b:e4:76:9b:e7:32:34:bd:ce:23:ec:31:04:
         1a:5a:6d:88:cd:89:f3:b2:f8:38:7f:0d:28:de:27:c6:02:21:
         be:0c:32:0c:d9:18:3c:0d:d5:a4:3d:f5:fa:bb:79:8a:38:13:
         93:e0:fd:ef:cb:e4:ed:04:c0:5c:cd:fd:22:07:6e:06:34:98:
         d6:06:e5:f1:c3:6b:b5:6e:75:47:04:30:08:d8:ed:cc:a8:bc:
         18:46:1e:c4:e0:79:0d:f5:93:25:75:c4:7e:6d:4e:af:b1:49:
         fd:89:3f:83:7a:31:86:47:3a:f2:40:b4:6b:0a:83:0a:89:54:
         09:69:39:02:22:bb:2b:2b:7e:45:7a:f0:5b:24:bc:8a:87:e3:
         26:ab:e3:ce:fd:4e:c2:aa:cd:61:92:cd:81:32:c9:a0:79:78:
         33:91:6b:d8:ba:5c:1d:95:1b:13:87:f9:18:61:21:93:69:55:
         f8:b3:5f:0c:45:3e:aa:d6:0d:c3:9e:66:a2:fa:39:71:c9:33:
         b2:1c:69:b1:0d:f4:b6:0f:5d:90:7a:e7:91:01:58:cc:96:a8:
         9b:92:a7:1b:8e:c7:2f:29:17:8b:87:97:e3:c6:1e:74:1f:36:
         b6:44:76:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:27:21 2025 by rpki-client