Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b2aaf435-cd9c-388a-9bf4-26158dd68e68.roa
File:                     b2aaf435-cd9c-388a-9bf4-26158dd68e68.roa (raw, json)
Hash identifier:          7AcggxQe5mtydPU7q42flIpR/cgE3oTKD7INMady4/w=
Subject key identifier:   B9:33:4E:22:1B:A0:CC:CF:0D:53:2B:9B:C3:13:2C:57:7F:76:85:B6
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A50773B27EEB7E76C2300
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b2aaf435-cd9c-388a-9bf4-26158dd68e68.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     7843
IP address blocks:        107.14.224.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:50:77:3b:27:ee:b7:e7:6c:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=84dbbfb8-44f4-4413-9e15-bc89e12b20e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a3:3e:a8:ad:b6:6b:ef:0a:35:bb:ef:11:71:
                    90:d1:02:42:0e:f8:c7:66:0d:42:6f:10:65:7c:c8:
                    e9:e6:11:0a:93:16:ee:85:83:ba:be:70:d8:3e:55:
                    2a:3d:be:e8:ec:8a:c6:ac:2d:0d:fe:ef:ae:d3:dc:
                    14:e2:35:94:a9:69:27:ef:fd:cc:d6:52:a6:b0:ca:
                    3b:df:c1:f3:b4:45:1b:79:d4:7c:30:ca:d9:8f:25:
                    72:50:f3:02:bb:cb:15:75:c5:79:8e:cf:d9:5b:86:
                    2d:44:19:51:6d:51:fd:a3:8c:b3:c0:1a:a9:8c:cf:
                    9a:10:81:ff:13:3b:47:d3:22:12:1c:20:f7:72:97:
                    0e:d2:10:94:96:7e:f2:63:3f:c1:81:db:46:6c:ff:
                    4b:c0:79:24:50:fb:97:27:86:d5:39:4d:b8:61:e6:
                    0e:15:9b:a9:f2:8a:b3:9e:6e:07:41:e1:12:12:49:
                    d8:51:17:c7:c0:03:30:4c:65:2d:d9:8b:a0:45:c5:
                    5e:03:eb:fa:a6:8d:4a:9f:f1:e0:33:e5:6c:d5:01:
                    93:67:57:d8:15:dc:ab:70:24:a5:3f:e0:ca:85:4c:
                    83:54:89:53:7f:1b:56:91:e1:88:3a:71:19:fc:49:
                    43:04:25:5a:70:aa:7d:b3:21:1f:f3:11:8a:ca:b9:
                    b9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:33:4E:22:1B:A0:CC:CF:0D:53:2B:9B:C3:13:2C:57:7F:76:85:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b2aaf435-cd9c-388a-9bf4-26158dd68e68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.14.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:a9:00:1f:27:34:ad:bf:89:13:a5:57:a2:e5:ae:c6:2b:88:
         2c:d4:6b:57:d0:2a:ce:ce:a6:4f:44:aa:bd:f5:63:28:8c:04:
         f7:b0:ab:14:67:fa:d3:77:1e:42:a5:62:23:8f:05:63:b8:3c:
         07:fc:6d:4b:c2:ae:50:ac:dd:96:6f:8f:1d:c0:b3:98:f6:d7:
         eb:74:34:bf:e4:00:72:33:34:7c:d8:c2:13:ef:95:2c:29:5e:
         ac:cd:bd:44:63:08:95:fc:82:38:61:e1:98:0b:fe:9b:c1:ad:
         37:a4:f6:ac:24:95:07:a6:74:c5:f4:e7:f2:98:b5:e5:7b:9d:
         05:8d:77:01:b6:2e:1c:88:ee:c6:2c:40:13:50:32:72:60:07:
         58:d9:3c:f5:1e:f1:a0:49:49:4e:05:de:03:52:4d:60:f3:f1:
         c6:f9:8f:c1:b0:7b:35:62:c2:12:92:1a:95:0c:61:43:b4:81:
         10:1a:5f:c4:7e:d1:44:95:11:9a:59:d0:37:ab:d2:15:b7:0e:
         22:d2:5c:d1:e2:15:30:e3:a8:a6:63:4e:27:b9:a5:2e:92:d0:
         b7:7c:a2:12:74:d3:ae:5a:e3:ff:06:0b:15:30:c9:43:35:93:
         e8:b4:6f:5e:32:17:6e:a9:cc:45:0a:9e:c5:16:d0:22:4e:29:
         67:b7:d0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:27:14 2025 by rpki-client