Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d7eca6bc-d709-3d10-9895-5e95fc49b3c0.roa
File:                     d7eca6bc-d709-3d10-9895-5e95fc49b3c0.roa (raw, json)
Hash identifier:          LIfrWzugR2gymZ0vZibvWF7dpWO/YIuYql03T6bQjl4=
Subject key identifier:   DB:59:79:7B:18:56:61:AF:FE:AA:6D:21:03:01:F3:46:12:85:A0:7A
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A868D8E884AC98D803780
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d7eca6bc-d709-3d10-9895-5e95fc49b3c0.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20001
IP address blocks:        64.183.172.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:86:8d:8e:88:4a:c9:8d:80:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=877219da-81db-4d71-b375-8a39139d2ced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7d:9b:6e:79:b1:5d:73:3b:ef:bc:c1:f5:a5:
                    66:c9:cc:7d:b9:e8:dd:c6:46:db:eb:8f:b8:b3:0b:
                    67:bd:55:47:b7:42:e3:ef:92:ed:b5:d1:57:e4:46:
                    06:11:b4:c5:09:24:e9:52:c7:f9:0d:0f:38:3c:27:
                    ae:a4:32:75:56:79:27:1b:a3:b1:72:46:f5:91:78:
                    79:27:85:03:62:86:8d:1e:e4:e5:64:41:61:5e:30:
                    04:14:a1:6c:81:43:2a:84:68:76:f6:45:22:91:2f:
                    56:8a:06:37:d1:2a:fe:83:01:75:de:1f:10:64:f8:
                    76:4c:bd:99:bd:25:aa:7d:c9:09:10:15:43:7c:b4:
                    49:c6:d5:1e:73:a4:83:ce:60:a0:24:2f:ac:a6:d1:
                    3d:07:f4:48:84:ce:26:22:f3:53:f8:07:8f:bc:a6:
                    56:87:57:90:4e:c6:51:b1:ad:a6:af:2d:b9:17:8e:
                    ff:1b:3e:d6:e1:06:f6:57:b4:86:53:fe:47:88:a2:
                    6e:95:45:68:d6:08:63:55:ef:20:5c:6f:79:ee:80:
                    f5:1c:79:e1:e1:5b:e5:dd:51:4b:56:2b:0e:ba:7c:
                    0b:ed:1a:56:c2:83:85:75:a0:b3:48:32:6b:b0:0c:
                    1b:97:df:39:eb:0d:62:4e:76:49:0d:26:0b:e4:1c:
                    16:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:59:79:7B:18:56:61:AF:FE:AA:6D:21:03:01:F3:46:12:85:A0:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d7eca6bc-d709-3d10-9895-5e95fc49b3c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.183.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:b6:77:7a:5c:d6:64:9b:d5:19:ed:36:87:8a:a0:df:c6:7e:
         41:3c:85:02:00:ab:71:d5:7e:00:b3:e5:e5:87:1a:be:c9:19:
         01:ec:37:61:1e:4d:0d:d2:e8:7f:1a:2f:9d:cd:85:dc:38:b8:
         71:ba:70:24:4b:28:b8:c2:65:d2:7f:63:0a:f1:2b:44:f4:68:
         92:32:9d:75:de:23:ee:86:17:d3:c5:b3:cc:23:a1:bc:88:ca:
         71:72:02:b5:83:fa:7b:d6:a8:b3:f0:12:66:23:cc:95:11:e3:
         9f:1f:2b:8e:7a:b1:d3:4d:cd:e8:97:a8:c9:59:43:4e:92:39:
         84:89:21:d3:23:63:75:db:b1:83:f6:d4:28:98:9a:e8:cb:58:
         16:63:b2:fb:93:a6:e4:ac:5e:81:23:e3:37:98:39:5b:ed:e7:
         33:2f:82:62:8d:14:0a:f4:08:af:ef:c2:68:72:82:24:21:df:
         bd:f9:4c:95:05:45:c8:64:d8:43:a8:47:6d:43:b7:05:35:43:
         d1:dc:16:c1:91:4e:9a:51:44:d3:c8:bd:c9:2e:58:da:3b:2f:
         04:a5:c2:d4:15:42:23:ac:c3:fe:15:a5:c3:7d:08:cc:7e:f3:
         b5:83:49:ba:dc:bb:de:f5:59:92:bf:d9:20:82:ca:af:6b:30:
         5d:65:33:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:24:01 2025 by rpki-client