Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/afcc6d43-435a-3271-82c3-aeb3374f9791.roa
File:                     afcc6d43-435a-3271-82c3-aeb3374f9791.roa (raw, json)
Hash identifier:          dnE8EiSFOI6ofvrowz0djDXc/NRp1HwsHrjUlCtCP4M=
Subject key identifier:   4B:2A:1E:7F:D2:4E:68:E1:F4:4E:38:7E:4A:AE:37:CA:54:5C:2E:21
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037AE863BADA498EE220B380
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/afcc6d43-435a-3271-82c3-aeb3374f9791.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     10796
IP address blocks:        107.10.64.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:e8:63:ba:da:49:8e:e2:20:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=bf281a52-c07c-4c00-a689-b5c7749beb9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2c:e9:ea:cf:f2:ea:2f:1c:89:ca:ae:da:70:
                    5c:32:6c:59:4e:66:4d:f9:12:9f:f6:6e:a2:e0:ae:
                    26:6a:bc:c2:c3:06:99:f2:ba:d5:e3:0e:83:4d:35:
                    b0:93:d2:4a:ff:c0:08:bb:d9:3f:13:b1:4e:40:f9:
                    47:27:49:64:04:48:fd:4a:7e:3a:7b:0d:8b:f2:88:
                    54:c6:32:49:aa:87:e2:5f:a7:61:d2:25:6c:31:c2:
                    da:4b:75:92:0e:a4:61:5c:65:d3:11:a9:be:13:6e:
                    df:d4:3b:d6:67:74:bc:05:0a:b1:dc:29:7a:c0:8d:
                    57:97:a9:5d:8f:7d:71:f4:83:c0:2a:41:9b:aa:7a:
                    e7:af:73:38:cd:dd:db:de:12:48:af:a7:b6:13:e2:
                    b9:72:20:55:e8:7e:8c:8e:9b:46:04:42:60:32:a9:
                    99:7d:71:6d:5d:4a:83:70:3e:cc:4e:81:78:17:32:
                    a5:40:a4:14:9c:c4:8e:35:13:c0:2e:bd:84:f0:1d:
                    0c:29:67:5f:1d:19:a0:3f:af:83:72:85:96:36:91:
                    b1:c7:ff:21:26:e2:66:fa:d2:83:09:f6:e2:96:e0:
                    50:3a:b3:dc:26:5e:6a:07:b6:3d:f2:a7:16:72:66:
                    c5:63:20:ad:c2:d8:62:f2:25:f5:72:c5:cc:40:b6:
                    0b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:2A:1E:7F:D2:4E:68:E1:F4:4E:38:7E:4A:AE:37:CA:54:5C:2E:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/afcc6d43-435a-3271-82c3-aeb3374f9791.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.10.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:7a:ac:ed:fb:6c:1e:ff:5f:cd:10:ea:98:f7:18:3d:1e:7a:
         b9:a7:d8:71:a9:f8:df:ce:8d:ec:6d:29:6e:33:91:91:0a:3e:
         70:03:15:95:3b:12:6a:2c:c1:2b:e1:0e:8f:d5:28:c2:f9:1d:
         64:e7:8b:22:e4:7b:8a:f4:70:05:2e:8d:aa:a1:60:2a:69:c5:
         78:ca:49:12:43:1e:56:a7:11:af:bd:b2:96:81:43:d5:85:41:
         a3:f0:a0:75:80:2a:5e:6a:b9:e9:4b:89:fb:6e:10:7d:c1:59:
         ec:04:f4:35:b3:40:3f:7b:f0:15:ec:92:2a:9c:ec:54:ca:9e:
         03:41:e9:d8:7e:7e:60:77:e0:c7:7c:cc:eb:d9:1f:8e:3d:91:
         42:49:07:bf:02:c5:46:bf:82:91:df:4c:81:9e:1a:b4:9a:6c:
         e6:67:65:6a:d7:2a:3d:71:1b:02:ee:e7:ff:df:31:5e:55:9c:
         e1:b0:ac:98:02:9d:bc:a7:00:36:00:a5:c9:2f:f6:d2:ad:08:
         f6:c1:03:23:d8:97:ac:24:d8:b5:b4:5e:62:6c:74:7b:fe:10:
         ef:89:85:78:f1:59:09:e9:d8:13:72:b2:1e:84:8a:ae:01:0c:
         32:e6:a3:61:9e:da:78:fa:04:41:16:63:2b:79:0e:44:38:90:
         58:36:fe:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:34:47 2025 by rpki-client