Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cbdbda8d-dde1-316a-9f97-4f060a2239df.roa
File:                     cbdbda8d-dde1-316a-9f97-4f060a2239df.roa (raw, json)
Hash identifier:          /iIbmpQheKyhLb8+T23uu3n3DFF7oS2qVreT+aUmKmY=
Subject key identifier:   A8:A4:07:3F:F6:2E:84:7A:F3:7A:28:60:DB:D4:61:4A:CE:96:78:BB
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A57E71981566D5CB79200
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cbdbda8d-dde1-316a-9f97-4f060a2239df.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     10796
IP address blocks:        174.103.224.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:57:e7:19:81:56:6d:5c:b7:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=ae41bbd0-d0cc-4801-b2e3-56fdf9e5f995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3d:5e:4b:62:6a:ed:74:9a:6c:bf:3d:f1:7e:
                    98:b2:0c:88:02:48:3b:36:4e:ca:96:f0:e5:28:39:
                    f8:e8:ab:7a:85:61:e5:72:8e:b7:21:b7:13:81:06:
                    26:1f:e9:d5:5c:17:09:84:58:c2:61:6f:eb:84:1b:
                    13:53:a2:c3:5b:bf:82:0a:cc:cd:3a:7e:a7:67:1e:
                    7a:a2:7e:4e:cc:d2:c1:25:4e:87:69:ce:c4:88:5a:
                    cc:86:dd:ca:71:90:56:9c:2b:5e:98:cb:f2:11:56:
                    52:9d:c1:5f:42:57:d9:c0:c5:1d:d3:18:6e:f6:1b:
                    27:6d:5f:73:a8:24:c3:9e:68:4b:ca:2b:dc:65:17:
                    43:28:8b:b3:65:91:fc:9a:22:ef:87:80:ab:26:a6:
                    0b:a1:50:29:7f:1f:2e:07:96:9d:03:1b:26:81:63:
                    8c:f3:0f:88:03:cb:6c:a2:3e:5a:f4:0b:1b:82:8f:
                    86:ab:96:d9:c9:30:1a:02:ef:c3:45:21:79:12:86:
                    f8:17:27:3e:2e:68:80:7d:ce:f9:a3:ea:1b:e2:43:
                    dc:08:ff:b2:d3:75:52:de:e0:f0:88:85:cf:e5:dd:
                    d3:8c:82:a0:3d:a2:a1:06:5f:60:89:18:90:d6:ba:
                    9b:ac:88:37:d3:f1:12:60:ab:61:af:6a:f3:a1:5a:
                    78:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A4:07:3F:F6:2E:84:7A:F3:7A:28:60:DB:D4:61:4A:CE:96:78:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cbdbda8d-dde1-316a-9f97-4f060a2239df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.103.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:3e:ea:22:77:a6:f6:f8:1a:4d:35:b0:fd:de:13:2d:bc:1f:
         9e:0f:3d:ab:88:70:d3:00:9c:f4:4d:56:a4:6c:d5:df:6e:4b:
         4e:ac:d5:6c:ce:e0:a8:c8:87:ad:a0:bb:67:41:d9:d3:09:48:
         5b:d3:d8:21:4b:00:73:71:21:25:f7:48:32:ba:83:06:2a:49:
         01:ef:8b:a2:8a:59:c5:d4:68:b6:71:a7:d7:a8:77:ee:56:07:
         06:d4:bc:c5:b3:69:65:30:c0:6e:92:7d:ad:3a:a5:e0:49:6e:
         22:cf:81:46:a9:b4:76:d1:64:21:b0:dc:6d:27:f2:a8:16:8b:
         12:8f:63:ef:3a:d9:be:58:fe:8a:39:87:b0:e2:70:5d:ad:06:
         6b:b6:57:8c:b4:06:6e:e7:1f:7f:6a:87:18:d8:0f:da:a5:22:
         0a:01:d2:88:8b:64:fb:e2:de:8f:98:15:62:7f:46:8b:83:eb:
         33:e1:35:51:82:98:4d:5d:fb:fd:de:11:bb:3d:57:49:3d:9d:
         df:59:65:ed:83:9e:e8:e9:9f:8b:1f:93:50:bc:70:95:82:e4:
         e0:da:c2:c9:7f:5c:66:99:29:8c:f7:d3:cc:17:1b:90:1e:5d:
         f2:31:cb:f0:66:8d:ef:b9:9f:dc:d0:9e:49:17:18:18:64:7c:
         3b:f4:29:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:52:01 2025 by rpki-client