Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/baacb5af-8814-3aa0-a50b-53e15a4c7063.roa
File:                     baacb5af-8814-3aa0-a50b-53e15a4c7063.roa (raw, json)
Hash identifier:          Em+qsC+mITikh4a4Zr9xAL0xvbsetp3y40kwCL23EA4=
Subject key identifier:   31:A0:75:69:E5:B1:73:4C:98:8C:55:45:1D:BC:B8:F5:96:75:41:2C
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A775721FE55B0A6036000
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/baacb5af-8814-3aa0-a50b-53e15a4c7063.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     11427
IP address blocks:        67.48.0.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:77:57:21:fe:55:b0:a6:03:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=ee0556ac-f2cf-4bf6-8ad8-da94df0a8bae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9d:69:d6:af:4a:b4:42:0f:e6:b4:84:40:ba:
                    27:0b:21:ee:e3:d8:be:a8:01:e3:c4:8b:95:f8:08:
                    11:23:fe:15:09:89:3b:d9:a4:43:72:7d:4b:e7:bc:
                    eb:05:24:c7:69:63:4c:fc:4b:e2:20:92:88:3b:d9:
                    85:08:93:db:5b:39:84:0a:99:37:c8:31:04:ba:f4:
                    a3:3a:2f:73:3b:6a:03:ef:7e:09:7d:0b:60:40:30:
                    01:43:6d:dc:7a:ca:8c:73:30:a9:04:b2:b6:b7:e0:
                    d2:b6:88:df:de:a4:65:1c:0e:f3:15:5f:72:12:b0:
                    45:0d:ce:8c:d0:90:ba:69:5d:1c:77:f5:09:d3:30:
                    5d:49:67:c9:76:c7:60:63:3b:d8:f5:27:04:e9:75:
                    0c:f3:83:c9:db:55:29:65:ae:76:27:a0:4c:43:37:
                    46:cc:67:bb:1c:0f:c2:2b:05:39:d1:9a:26:4a:d2:
                    c5:0f:cf:11:ed:c1:76:39:82:7d:87:0f:1d:46:ce:
                    97:df:b3:d0:62:26:68:9a:b2:5c:1b:8f:b0:75:fd:
                    1e:de:e0:87:1b:99:d5:98:c0:b4:56:3d:f7:4c:bd:
                    4c:ae:ae:7a:71:3b:97:b8:f9:3a:1d:bb:4c:51:74:
                    be:1d:ee:b7:b2:bf:fb:55:74:aa:7c:65:92:28:f8:
                    10:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A0:75:69:E5:B1:73:4C:98:8C:55:45:1D:BC:B8:F5:96:75:41:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/baacb5af-8814-3aa0-a50b-53e15a4c7063.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.48.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:e6:af:28:25:19:b2:62:19:68:a3:83:a6:31:88:35:a3:7b:
         b3:7a:6b:a7:65:bf:ca:e5:6c:af:30:d8:23:be:fb:91:31:00:
         39:75:3f:3a:0f:77:fc:77:43:63:58:d6:35:1c:ed:7c:2e:34:
         74:5b:50:0a:5e:ac:5e:57:c1:ea:39:b9:b3:be:64:3c:cb:17:
         00:6c:63:ab:37:91:3e:eb:36:45:4b:30:0b:3e:8b:cc:98:da:
         b0:03:78:e6:03:89:99:b3:21:65:34:79:a9:ed:15:2b:f3:27:
         48:c7:91:fa:8e:0d:4b:26:98:c9:23:7b:90:fa:f8:59:9b:60:
         56:75:f8:51:21:83:76:f4:94:98:18:22:0e:2b:3d:f3:e0:ff:
         bf:6c:4d:ac:3e:98:63:dc:9a:71:4f:6d:ef:dd:fe:31:bc:04:
         d4:f3:9d:54:eb:22:dd:fe:ac:e7:d3:e4:dc:81:0c:06:82:e4:
         13:b7:d9:1b:9a:4f:02:ae:bf:eb:fd:0a:d2:83:b3:f6:9f:15:
         c3:76:5b:e2:e0:0a:23:65:a1:0b:86:ce:93:e2:da:b2:c5:f7:
         53:70:e3:c8:c8:b7:a2:8e:94:c6:c5:24:d5:92:6c:11:7f:5b:
         35:6d:e3:19:39:99:3c:2a:cd:ce:25:0a:85:55:80:dc:14:00:
         95:a5:81:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:42:17 2025 by rpki-client