Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c5ef2814-a17b-329e-97e2-052e47078998.roa
File:                     c5ef2814-a17b-329e-97e2-052e47078998.roa (raw, json)
Hash identifier:          lzYmEt/SeL+YWNLMVzmn8zUu3N2lzRGgwofghbBvIu4=
Subject key identifier:   04:EB:6A:12:6B:22:64:02:0D:4E:E2:AF:0D:41:D6:B7:5D:41:11:78
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A53154955B585F7EC2B80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c5ef2814-a17b-329e-97e2-052e47078998.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     7843
IP address blocks:        173.196.0.0/15 maxlen: 15
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:53:15:49:55:b5:85:f7:ec:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=3788b202-f585-4802-8dc4-36c72e697740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:65:22:93:8c:a3:f4:34:93:f9:54:92:bf:70:
                    88:87:8c:fd:31:43:10:01:3b:dd:b8:ee:5b:30:83:
                    4b:4d:2b:6e:3e:57:57:1f:a3:d4:60:e7:e7:d4:2f:
                    c3:38:0c:9a:21:88:6c:5c:32:bd:8a:c7:11:13:43:
                    ab:bf:bb:2b:32:c1:c6:5c:68:c3:bf:f8:19:cb:64:
                    c3:a7:1a:c4:0f:f9:1e:13:87:ac:f2:cd:5e:b9:4f:
                    aa:58:c1:76:08:74:45:67:5e:26:ab:ff:20:25:3f:
                    4d:a7:a7:17:3e:36:73:82:12:26:43:c3:e7:80:74:
                    ee:d5:93:ae:50:bd:0e:3a:0f:a8:19:94:75:9b:51:
                    6a:08:8b:e9:da:35:2a:c9:8a:b7:5f:71:0f:c2:21:
                    8c:12:58:ec:03:82:9d:69:4f:f8:ef:fe:ec:5c:e0:
                    2d:14:6e:a5:d0:1d:f5:19:a6:28:2c:20:61:87:77:
                    ea:f3:16:e6:ba:af:c5:1f:2d:92:2f:d2:68:55:3a:
                    10:4e:5c:8a:48:1f:e7:4d:bc:a7:ef:bb:01:00:52:
                    96:17:ef:83:e2:ed:c2:3d:1c:52:35:e0:9d:6a:81:
                    23:85:2c:f2:f1:02:0c:f7:f2:5f:18:b1:67:be:b9:
                    bd:1b:32:68:be:37:86:5f:ec:f3:b9:bc:19:c1:19:
                    1b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:EB:6A:12:6B:22:64:02:0D:4E:E2:AF:0D:41:D6:B7:5D:41:11:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c5ef2814-a17b-329e-97e2-052e47078998.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.196.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:9f:c2:e3:12:6f:a2:33:ef:ce:da:aa:f4:91:12:e3:31:a8:
         f6:27:07:62:5d:d2:83:26:6b:f2:5b:8c:b6:e6:4a:10:1f:bf:
         cd:97:95:63:87:98:4d:96:7a:63:ea:44:d1:9c:f2:6a:07:03:
         e0:09:93:cc:e7:39:6c:fa:3e:55:61:69:d6:bd:e5:84:f3:47:
         90:9b:8c:c0:a7:4d:bc:ad:4d:54:a5:79:3e:cd:ad:60:a7:1a:
         2c:bf:ac:d8:fd:ee:80:7c:4f:51:1a:70:5b:25:e7:47:ee:2f:
         b1:90:bc:3f:69:2f:b7:c1:b6:f5:aa:42:16:ac:b3:e1:88:e9:
         c3:b6:54:e3:b2:24:d6:02:92:69:51:df:d2:fd:f4:e0:54:1f:
         c1:9e:8b:e7:03:17:62:f4:7d:0e:31:52:ce:d0:f7:09:69:af:
         50:bf:40:98:9e:34:4f:7a:67:94:3a:8f:1b:4c:da:83:ad:9b:
         e8:4c:5c:1e:9a:51:76:32:69:cc:0d:c5:df:1a:95:db:bb:65:
         f5:66:e7:1a:38:19:4b:83:2d:bc:26:15:06:88:57:20:4e:68:
         d5:30:b3:3e:95:7e:6c:03:5c:91:1d:14:56:34:58:9d:cc:c5:
         47:a9:fc:c4:dd:85:45:49:1d:f7:2a:8c:74:95:ca:8a:3c:2c:
         fb:b9:86:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:08:17 2025 by rpki-client