Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b5e33a30-0fa8-3ed1-b578-b76f07986210.roa
File:                     b5e33a30-0fa8-3ed1-b578-b76f07986210.roa (raw, json)
Hash identifier:          GTOUiVU2dnEUOhJtRef5sXSxYHaGiuTNOjxjyq206v4=
Subject key identifier:   F0:3E:1E:CE:12:6E:58:36:BC:1F:B7:B5:DA:6E:3B:4C:70:F4:99:F8
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037AF79BC7A8DFED7F95977C
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b5e33a30-0fa8-3ed1-b578-b76f07986210.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     11351
IP address blocks:        24.25.128.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:f7:9b:c7:a8:df:ed:7f:95:97:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=61a14851-94ec-4b50-8a29-25a044c75afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f3:81:88:aa:d8:fd:50:08:26:31:50:1b:13:
                    dc:85:71:59:dd:74:6a:ff:ef:4f:68:60:8c:8f:12:
                    d6:fb:a8:3e:81:d9:9a:03:ce:8a:d4:a9:19:64:6a:
                    aa:d2:f2:ba:c8:e8:49:69:3f:28:76:68:ef:34:66:
                    cd:c7:ff:04:1f:52:de:85:53:ea:a0:5e:fa:44:ba:
                    4d:0e:0c:f3:25:d3:9a:a5:51:15:05:06:dc:55:98:
                    56:eb:81:13:0c:d5:23:d2:80:fc:82:e6:94:a1:d4:
                    a9:b5:ea:a1:7c:3f:1d:2b:d6:b5:73:ec:36:52:f7:
                    2e:73:25:30:e4:c1:a9:95:1f:89:fd:65:9f:52:32:
                    dc:0b:35:75:33:28:b4:1f:bd:64:74:97:da:79:1f:
                    ac:0b:e3:80:e1:9d:21:94:9c:51:b6:c4:ee:f1:df:
                    0f:89:db:04:f9:8b:c0:9e:b5:40:66:8a:a5:a3:3a:
                    fd:61:52:b0:28:1b:e8:f7:e5:fd:f3:f0:8b:e6:cf:
                    fc:67:de:e5:8f:75:d6:b4:c4:18:5e:96:47:5d:f9:
                    ab:d8:77:0b:64:db:66:67:84:6d:11:95:9f:b1:3b:
                    d5:63:6d:ee:f9:af:64:61:e4:de:fd:43:78:b1:9a:
                    f6:e4:79:10:85:db:c4:e9:c5:04:8b:06:58:6d:84:
                    7e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3E:1E:CE:12:6E:58:36:BC:1F:B7:B5:DA:6E:3B:4C:70:F4:99:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b5e33a30-0fa8-3ed1-b578-b76f07986210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.25.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:d1:80:05:b6:ba:f9:69:64:e2:69:9e:1d:a5:b6:95:3f:66:
         dc:76:e6:11:c8:0d:54:2d:d4:a8:33:2e:15:bd:c1:8b:50:32:
         d3:8f:83:6f:a2:d3:f9:77:13:c8:aa:87:73:38:cd:7f:ad:d0:
         9b:21:b1:c8:39:8b:83:e4:54:71:95:78:62:e0:60:32:49:e7:
         16:a5:e8:9d:41:70:a6:f2:ad:ce:c7:e6:2c:53:36:09:e5:c6:
         07:53:ea:95:80:f8:22:82:2d:68:f8:ee:6b:d4:f7:1a:86:06:
         5b:3a:d6:51:f6:da:8c:69:27:0f:6e:5a:63:5e:cb:fa:f2:74:
         d5:05:4c:c0:64:19:ba:d5:1b:95:c6:f6:85:72:25:6e:87:b0:
         bc:f1:a0:e0:c7:cc:12:84:86:d4:ff:4b:f0:a2:3f:05:b2:b9:
         4f:93:37:ef:3c:46:2e:f5:84:6e:74:26:f2:bb:9f:02:2f:9d:
         19:86:84:0c:0b:95:5d:eb:7f:ac:bc:21:df:bb:a1:77:75:4f:
         10:ce:4b:4a:03:5a:a3:05:5b:82:7b:1d:07:45:8f:c8:f0:e5:
         41:91:27:a1:c9:0b:82:5e:d1:95:8b:a9:74:f8:f5:e2:a7:53:
         3b:d9:39:51:74:1e:05:cb:ec:f6:8f:6a:4a:42:fb:6d:aa:4b:
         8c:d6:c9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:06:53 2025 by rpki-client