Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/af308b60-3d79-3081-b667-b37b7fbc830a.roa
File:                     af308b60-3d79-3081-b667-b37b7fbc830a.roa (raw, json)
Hash identifier:          8+FfqCQbvA4NrjlrITySLXIjLcR5w3XvkWfWvnOONSc=
Subject key identifier:   6D:2D:E9:87:14:71:F3:6D:9A:13:B9:20:7E:59:37:28:13:80:C6:B3
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A80249D888EAEC30BE400
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/af308b60-3d79-3081-b667-b37b7fbc830a.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     16787
IP address blocks:        24.30.195.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:80:24:9d:88:8e:ae:c3:0b:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=9d15f2b0-0419-4138-8a34-0c32256c0350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d6:f3:7a:27:33:d6:80:b1:37:b2:5e:50:7d:
                    8a:e4:64:51:0a:17:11:49:dd:a8:ad:e4:8d:95:78:
                    2c:64:84:13:0e:53:36:f6:fd:d5:57:e7:a6:9d:17:
                    e4:86:fb:e3:71:57:d3:af:d8:91:e5:16:97:0b:25:
                    c0:d0:4f:39:f2:a6:6f:ef:8c:69:6b:67:91:1d:96:
                    e0:03:b1:27:78:5d:1d:23:c9:73:79:8d:7c:36:00:
                    33:8d:a2:8d:ed:dc:e2:fc:43:ac:28:9c:b8:cb:ed:
                    83:24:63:c2:74:5c:2d:0e:e2:21:26:5a:ff:24:c6:
                    63:6b:08:7f:35:92:df:df:da:2c:bf:8c:c7:59:ed:
                    25:50:a5:10:b3:6f:a9:af:3b:c1:fd:d1:44:f3:f2:
                    f4:e9:ae:3e:f3:3f:8b:d7:99:4e:8e:15:8b:be:51:
                    b4:29:78:65:d0:57:40:c9:28:7d:30:5c:22:b6:af:
                    51:54:07:7c:02:e7:87:23:7b:8d:6d:e6:6b:49:23:
                    27:e7:18:60:90:66:d3:0c:55:d4:a6:f4:48:1c:6b:
                    3a:e1:a3:b8:cf:98:43:e0:ce:0a:ac:66:0d:12:8a:
                    18:d3:f1:ff:9d:ef:fb:a3:d4:9d:f0:99:a9:79:f9:
                    e9:dd:84:aa:54:ba:fa:15:05:10:f6:13:d0:b4:9f:
                    cc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2D:E9:87:14:71:F3:6D:9A:13:B9:20:7E:59:37:28:13:80:C6:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/af308b60-3d79-3081-b667-b37b7fbc830a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.30.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:b1:38:02:ea:9f:3a:d6:c7:51:77:fc:aa:f3:cd:2d:5b:ec:
         a6:66:32:b0:73:98:c5:98:43:cc:32:52:a7:cb:84:2b:e5:ac:
         0e:bf:16:3b:bb:59:a4:23:70:1d:b7:c6:6f:80:8c:4c:08:9d:
         9c:af:bf:8b:8e:22:08:cf:e6:5e:3d:c5:56:3a:4d:26:b3:25:
         07:fc:3e:07:41:80:9b:17:25:c4:b9:fb:84:73:33:43:65:4d:
         fc:5f:5a:3b:d5:fb:37:6f:ae:77:f3:79:60:d7:a5:6f:43:76:
         37:a0:2d:e0:e9:fd:30:1f:7d:db:28:ec:44:20:20:56:c8:e5:
         2c:05:a3:bb:99:d9:72:4e:4f:00:25:93:53:3b:b7:c8:2f:e4:
         1b:30:e2:7a:f4:6c:89:46:7d:3b:2d:7b:18:c1:64:9d:91:3f:
         34:92:d9:f5:b7:b8:52:ee:73:ad:34:57:6f:34:62:f2:cf:33:
         f8:60:c6:46:f7:f6:1b:08:3b:7a:69:f2:c4:df:e1:f9:19:f5:
         e2:45:97:ac:f8:fc:45:c9:85:99:67:07:26:db:cf:f5:ce:4b:
         66:67:bc:d3:6a:1e:85:67:34:5a:6c:ab:fa:26:dc:ff:5a:bd:
         c2:a3:a1:1d:09:37:cf:e7:8f:0b:40:ef:ed:05:b5:33:48:fd:
         6b:5d:de:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:31:16 2025 by rpki-client