Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ba25d8fd-f224-35e3-9ef2-33f03f41ab0c.roa
File:                     ba25d8fd-f224-35e3-9ef2-33f03f41ab0c.roa (raw, json)
Hash identifier:          20FG2z1r9bK+gczEuTAPv7qBntvU1JF5xnvPKck3cN4=
Subject key identifier:   E4:1F:CB:86:39:B6:A9:9B:3D:15:6E:02:D3:2C:EF:3C:14:A2:ED:B8
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A8F33891687A862F69480
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ba25d8fd-f224-35e3-9ef2-33f03f41ab0c.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     33363
IP address blocks:        24.173.138.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:8f:33:89:16:87:a8:62:f6:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=9c045c76-7f80-46a6-bb4a-65f05c2c13b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e6:c6:00:52:da:e6:36:12:fc:bd:d8:f1:6d:
                    b1:70:6a:70:d3:ad:bf:4f:e2:e8:87:16:aa:3f:44:
                    9f:64:f9:11:d6:e3:39:7f:08:80:eb:94:65:e9:31:
                    82:38:dc:c6:cd:d2:ea:08:92:9c:7a:e3:5d:39:63:
                    0a:de:52:f7:01:67:5a:f3:06:0f:e8:82:71:90:df:
                    35:17:81:09:87:a8:c7:4b:12:74:e8:40:75:a4:5c:
                    d6:73:80:af:51:5d:e0:5b:14:8a:f9:72:01:84:c1:
                    02:05:a9:3b:7a:fc:dc:4a:59:06:13:e3:b3:71:12:
                    b3:fb:ef:38:87:6b:66:da:75:29:ec:98:ca:3e:05:
                    6c:e1:c3:94:80:47:0c:52:88:5e:b6:86:b8:d4:d5:
                    39:7c:21:8f:cf:6a:bf:ea:d5:c0:fd:3f:2f:12:67:
                    dd:be:ad:9e:39:80:05:a2:16:e9:52:4d:22:f8:66:
                    16:35:a6:3d:81:98:c9:36:c8:ed:2c:4c:09:b2:83:
                    8f:24:8d:50:f6:34:26:81:41:2b:32:e4:80:40:73:
                    a0:be:cd:cf:73:6a:31:31:d1:60:4b:cb:81:d2:21:
                    8e:28:2b:37:cf:6d:32:6f:f2:26:62:a8:e0:b8:72:
                    f5:ec:b8:5e:c7:34:3f:7c:59:c4:39:71:bb:96:3c:
                    2a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1F:CB:86:39:B6:A9:9B:3D:15:6E:02:D3:2C:EF:3C:14:A2:ED:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ba25d8fd-f224-35e3-9ef2-33f03f41ab0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.173.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:e5:b9:13:50:8b:73:2e:bf:62:91:af:19:3c:12:15:45:19:
         c1:a4:6a:5d:a4:f7:19:15:a4:1e:7d:4a:96:06:85:68:97:f9:
         32:64:e0:c4:31:be:3c:aa:21:0e:82:bd:35:f4:e1:23:65:f1:
         30:f9:57:4c:55:9d:da:f7:6b:2c:cb:47:6a:04:59:b6:1e:7d:
         1b:55:0e:bb:a7:75:08:df:16:00:8f:a1:ae:73:4a:c4:5a:f1:
         4c:b4:d1:7f:39:f0:88:b8:3e:b0:fe:f3:77:27:28:2a:ac:23:
         b4:d2:92:55:93:b0:d8:16:37:bf:0f:00:5f:e0:09:f0:73:0a:
         a4:bc:05:a5:92:9e:b5:9b:1d:67:e2:ec:97:53:97:30:70:72:
         7e:b1:cf:e3:06:c1:f7:1d:85:c4:a1:2c:c0:6d:e2:fb:f6:c1:
         a2:6e:6e:53:60:37:6a:d0:08:e4:f4:b7:0a:07:02:10:7f:1c:
         7c:79:3a:77:69:1a:b5:bd:cb:ca:a8:2c:33:6b:21:ca:41:27:
         5d:2e:78:21:d2:18:c4:fb:44:4d:50:e3:f1:cd:ac:22:64:ec:
         09:0e:93:4a:94:6a:16:86:33:9b:19:5f:fb:0d:8e:68:20:02:
         b9:5b:74:b1:20:51:d0:b9:b1:a9:7a:cc:69:d2:9e:ce:5c:c7:
         68:1e:39:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:06:22 2025 by rpki-client