Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b2ade11e-4654-37c8-a445-91829eaa2202.roa
File:                     b2ade11e-4654-37c8-a445-91829eaa2202.roa (raw, json)
Hash identifier:          ueq9hP19Ebg1M8JaG+RtrqraHjBJBg4F0FeVPQ3kXBg=
Subject key identifier:   FA:85:7B:5C:98:98:81:91:09:F6:1C:33:0D:CC:A8:6C:A9:8D:7D:96
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A8F2795DA9381AA685DC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b2ade11e-4654-37c8-a445-91829eaa2202.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     33363
IP address blocks:        24.172.174.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:8f:27:95:da:93:81:aa:68:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=094b0a82-5315-410b-82b7-10a7537b9ec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ea:fe:09:cc:1e:7c:0a:29:24:14:08:a3:52:
                    2f:15:e7:a5:80:bc:67:8c:3c:2f:63:c3:5c:5f:d9:
                    70:5e:10:35:1d:c0:86:5f:7d:fb:c5:93:f2:1c:fa:
                    79:13:b7:f8:9d:c0:e5:83:13:c8:e7:7f:84:81:f8:
                    95:05:0c:42:a4:84:89:23:da:fe:4b:5f:9f:5b:29:
                    ab:a2:03:ac:28:69:55:bd:2f:bd:8a:64:2b:f3:b0:
                    65:f5:8b:25:58:36:71:ce:bc:be:2f:6c:5c:09:55:
                    2e:cf:0d:d1:bc:2f:2c:32:c9:99:3f:5c:b4:ec:22:
                    54:7a:70:c7:f4:bc:d3:02:29:88:0c:7a:b3:77:d1:
                    09:e7:26:9e:4b:e5:9e:35:bb:ee:26:91:b6:94:12:
                    dc:69:c9:df:bb:b8:7b:16:f6:d5:ac:a5:c4:a2:67:
                    4d:23:65:cb:7a:ee:88:74:07:44:2c:24:9f:ac:53:
                    18:45:35:93:8c:2c:26:f4:b7:12:e4:c0:8c:9f:4b:
                    c1:f2:ff:15:54:59:39:80:d9:33:12:b6:29:79:c4:
                    82:76:f3:6b:ba:e7:df:4f:46:d6:ab:27:26:69:17:
                    98:c4:1a:0d:b5:cf:aa:79:67:4b:12:8c:cc:98:72:
                    0b:30:3e:f3:fd:90:ea:53:2d:02:25:87:6f:54:96:
                    fa:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:85:7B:5C:98:98:81:91:09:F6:1C:33:0D:CC:A8:6C:A9:8D:7D:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b2ade11e-4654-37c8-a445-91829eaa2202.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.172.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:fb:70:ab:57:57:43:5e:11:23:d3:b6:d6:36:28:f8:ab:5f:
         69:79:ac:38:19:55:7b:03:21:b3:6d:e3:ae:ad:01:d7:5f:46:
         1c:61:b7:4f:72:dd:f3:63:2a:bc:f3:ac:05:42:cf:e1:cb:58:
         fa:29:a4:ad:93:e3:64:5d:83:5a:5e:9e:71:6f:ab:15:8f:1c:
         35:ca:2a:bc:d7:58:5a:d3:bb:ae:42:46:8a:fa:32:14:2c:b2:
         bf:d4:43:28:43:5b:dd:87:42:2b:93:c2:36:a1:f6:66:c4:80:
         4b:b1:55:57:aa:cf:a5:b6:77:c5:20:28:fa:5a:04:df:c2:ce:
         20:d9:8a:d4:dc:e8:ce:e5:43:6f:bf:5e:d8:6d:36:56:d6:13:
         36:d7:d9:5b:42:bb:51:ec:52:d0:77:ef:45:c6:b6:74:f3:de:
         b5:5b:fb:5c:e1:00:85:f5:28:bf:e5:91:d4:02:87:1d:8d:5c:
         a9:9c:0b:99:c7:b1:e4:36:d3:69:a6:d4:bd:67:4d:48:ff:f6:
         56:4e:12:02:e9:ab:01:6d:8b:2d:35:5f:aa:91:b3:79:78:4e:
         b9:d1:d3:49:ce:65:ca:9d:e3:32:8f:e9:33:d3:62:33:1a:1b:
         64:e1:53:e1:e0:97:d1:72:62:1a:af:d6:8e:a5:44:e3:72:24:
         f2:92:39:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDeo8nldqTgapoXcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
MDk0YjBhODItNTMxNS00MTBiLTgyYjctMTBhNzUzN2I5ZWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+r+CcwefAopJBQIo1IvFeelgLxnjDwvY8Nc
X9lwXhA1HcCGX337xZPyHPp5E7f4ncDlgxPI53+EgfiVBQxCpISJI9r+S1+fWymr
ogOsKGlVvS+9imQr87Bl9YslWDZxzry+L2xcCVUuzw3RvC8sMsmZP1y07CJUenDH
9LzTAimIDHqzd9EJ5yaeS+WeNbvuJpG2lBLcacnfu7h7FvbVrKXEomdNI2XLeu6I
dAdELCSfrFMYRTWTjCwm9LcS5MCMn0vB8v8VVFk5gNkzErYpecSCdvNruuffT0bW
qycmaReYxBoNtc+qeWdLEozMmHILMD7z/ZDqUy0CJYdvVJb6pQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPqFe1yYmIGRCfYcMw3MqGypjX2WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYjJhZGUxMWUtNDY1NC0z
N2M4LWE0NDUtOTE4MjllYWEyMjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGKyuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGb7cKtXV0NeESPTttY2KPirX2l5rDgZVXsDIbNt466tAddfRhxht09y
3fNjKrzzrAVCz+HLWPoppK2T42Rdg1pennFvqxWPHDXKKrzXWFrTu65CRor6MhQs
sr/UQyhDW92HQiuTwjah9mbEgEuxVVeqz6W2d8UgKPpaBN/CziDZitTc6M7lQ2+/
XthtNlbWEzbX2VtCu1HsUtB370XGtnTz3rVb+1zhAIX1KL/lkdQChx2NXKmcC5nH
seQ202mm1L1nTUj/9lZOEgLpqwFtiy01X6qRs3l4TrnR00nOZcqd4zKP6TPTYjMa
G2ThU+Hgl9FyYhqv1o6lRONyJPKSOZY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 15:30:08 2025 by rpki-client