Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c5be95a1-2ace-3d70-8c21-18d0513e18b1.roa
File:                     c5be95a1-2ace-3d70-8c21-18d0513e18b1.roa (raw, json)
Hash identifier:          Fi5iOjifXUYl7W/XuGFjwyyUah7ayjNXDDA/T9yfLCk=
Subject key identifier:   1A:78:61:57:84:34:DC:57:2A:B4:7C:02:08:C5:71:91:4F:D6:C9:E8
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A62863FC0F293EBCDF780
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c5be95a1-2ace-3d70-8c21-18d0513e18b1.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     10796
IP address blocks:        74.87.100.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:62:86:3f:c0:f2:93:eb:cd:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=eea5777e-c309-411a-b62d-5d5e67cf2f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8f:fa:cc:2a:42:a0:2b:1a:77:80:6b:a8:42:
                    a6:18:d3:9a:d3:fc:2d:f4:21:b3:af:a9:99:60:25:
                    7a:77:f8:96:34:0d:b9:f7:5c:87:1a:f1:b8:5b:a3:
                    d1:4f:bf:f8:8c:d0:f7:b7:48:9a:d0:d1:4d:06:cb:
                    a4:f2:cb:81:25:54:d2:36:86:06:01:89:48:1f:1c:
                    21:82:a7:00:6a:c2:8e:a2:b1:f5:28:72:4d:99:bc:
                    c9:0e:ec:c4:6c:e8:62:cb:1c:47:0c:7e:50:fe:91:
                    6f:83:c2:72:80:35:5f:c6:54:e0:c8:fc:9b:23:c4:
                    12:c9:b0:c3:05:44:c5:19:2c:12:04:37:2d:b7:37:
                    6f:35:68:f4:09:c5:0c:31:a1:e2:f2:2a:2f:ce:24:
                    9a:27:75:17:03:9d:e3:ea:9a:c6:8e:75:e5:0c:80:
                    45:e9:22:e1:d1:0c:82:b5:01:ab:36:b7:76:ec:37:
                    96:75:56:89:8a:68:50:b0:d4:6b:8e:6c:49:32:f8:
                    e7:f2:7e:3b:3d:4b:ee:72:25:56:db:8d:bf:f7:a4:
                    8c:66:3b:db:1c:cb:1f:94:04:49:98:ca:d5:12:7d:
                    1f:d6:86:7d:3a:dd:5a:61:32:c7:26:03:a5:0b:54:
                    6a:95:05:ec:39:b5:9e:73:37:65:fa:a8:29:62:d6:
                    88:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:78:61:57:84:34:DC:57:2A:B4:7C:02:08:C5:71:91:4F:D6:C9:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c5be95a1-2ace-3d70-8c21-18d0513e18b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.87.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:d6:10:d6:24:75:66:29:31:f3:bd:3a:48:59:3a:c4:19:6b:
         03:8f:17:90:cd:fd:db:17:50:01:39:55:df:38:6f:52:51:40:
         89:a1:ac:c2:85:1b:95:f1:4a:d0:65:a2:4f:a5:45:72:d5:ef:
         5c:39:4c:3a:19:62:40:5f:f8:be:7a:17:4c:62:2a:43:58:c5:
         14:4c:ce:13:02:bd:c8:ab:68:07:f0:38:89:97:b2:a9:91:14:
         10:22:bb:61:5a:6f:45:29:79:90:eb:c7:e9:e0:68:42:d0:57:
         fe:db:96:0d:03:bc:a6:0f:c5:db:b5:b0:28:24:1b:7d:41:f5:
         14:68:0c:47:49:f6:36:8c:47:af:b9:65:ef:13:6f:98:85:35:
         0b:6a:89:6c:1a:b5:c6:e6:68:bb:0c:a7:75:59:92:62:50:3b:
         51:d8:98:7c:e7:0b:d1:7c:35:23:b1:22:5e:a1:9f:c0:28:f8:
         6e:35:b4:0f:22:e9:57:64:ee:c8:aa:0f:52:c9:a4:e8:4d:50:
         ba:15:bb:58:4f:05:53:de:a6:83:71:b0:6c:2a:0d:e8:c9:fb:
         f5:a2:f2:25:ac:4f:09:5a:ed:01:69:16:00:84:ab:ff:ea:9c:
         ba:43:8a:dd:e4:43:46:8c:a9:1e:ce:78:44:7e:30:55:9d:26:
         b1:4e:7e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:39:54 2025 by rpki-client