Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ddb07463-be38-35e3-a789-7b573b75adc3.roa
File:                     ddb07463-be38-35e3-a789-7b573b75adc3.roa (raw, json)
Hash identifier:          zYyOh6nWO3eDn7dzdvtbQYHL2wv+y0fAClefqMikOHw=
Subject key identifier:   0F:58:66:B3:F2:15:36:8E:BA:D0:8B:55:5D:C8:72:26:45:DA:49:F6
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A6C0DB4E90AE9AE4CBAC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ddb07463-be38-35e3-a789-7b573b75adc3.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     11351
IP address blocks:        67.252.0.0/15 maxlen: 15
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:6c:0d:b4:e9:0a:e9:ae:4c:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=272c43aa-16e9-4369-8a1b-bc73428a045e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:87:58:6e:50:c4:1c:dc:b3:58:f5:55:53:ef:
                    84:18:6e:21:68:b2:d7:dd:b0:c1:80:67:cd:85:b7:
                    e0:b1:09:a9:99:11:45:cd:ea:32:c7:c6:18:84:df:
                    7d:bf:1a:11:21:f3:51:64:93:fb:55:41:0c:6e:78:
                    ef:87:68:bb:f3:5a:eb:fd:8e:a2:21:83:2c:52:d0:
                    9b:c3:d4:09:4e:6e:20:ae:7a:9f:f0:cf:3c:23:d3:
                    e6:c6:ad:96:20:f9:d3:d4:14:6c:1d:18:a2:45:6f:
                    52:d7:f9:c8:88:9c:96:3b:bd:24:82:db:d4:4a:6d:
                    2c:2e:65:02:50:82:a9:1d:b7:65:a8:6b:c1:5b:82:
                    cd:ec:6e:8b:0f:e6:b6:25:44:3f:94:64:43:b2:59:
                    e3:75:05:e8:ff:01:6b:00:14:69:d1:8a:b1:58:6f:
                    a3:d6:a7:2d:1a:22:dd:48:bb:88:36:6e:4b:fe:b1:
                    8e:fb:6f:73:be:e9:03:ed:45:bf:44:22:bd:83:79:
                    9a:39:71:38:1c:14:8d:00:33:0e:f7:d2:96:d4:49:
                    27:a7:63:ec:5a:8e:00:44:48:80:f4:4a:34:96:f7:
                    79:ba:da:1f:44:5c:93:8f:e1:1b:fe:72:7d:d1:94:
                    fb:e6:ee:6c:18:a4:7b:84:89:c3:64:40:a1:0e:26:
                    21:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:58:66:B3:F2:15:36:8E:BA:D0:8B:55:5D:C8:72:26:45:DA:49:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ddb07463-be38-35e3-a789-7b573b75adc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.252.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:65:fd:d4:7d:7e:39:8f:29:7b:15:ec:38:ce:7c:ee:6f:a4:
         38:17:64:a9:a0:47:9c:71:30:d2:84:bd:c8:0f:48:0f:ec:95:
         e9:66:92:f5:4b:f8:c5:4d:54:be:d5:33:75:0d:94:f1:5a:e5:
         ab:0b:65:e5:fe:88:e2:78:c0:9a:ce:33:d0:f2:68:1e:fb:f7:
         43:47:fc:f6:dd:9c:2a:e1:7a:7a:15:ba:92:89:60:35:0f:e8:
         cb:ed:5e:d2:10:5b:98:aa:f5:a7:e4:86:09:46:41:2b:33:04:
         35:ed:b3:d1:9b:ad:7c:c3:87:c5:e0:9c:08:ff:76:6b:fe:a8:
         7f:d2:28:ca:a6:4d:aa:06:53:c3:be:5d:61:ae:1a:59:3d:d9:
         9f:70:97:08:58:83:f8:25:b7:6e:18:a0:61:80:1c:f2:6c:fa:
         eb:77:8b:09:b6:27:b4:cc:6c:da:44:8a:3a:c9:57:66:27:e4:
         ef:c5:e9:c5:dc:bc:44:70:ff:57:17:ea:1c:c8:08:b6:17:93:
         fb:a7:58:a6:1a:81:ed:38:d5:5c:e7:2b:01:75:22:be:2f:fc:
         96:e1:c1:fc:e8:3a:fd:50:9c:87:bf:65:e6:e9:e4:01:19:fe:
         ad:8a:ea:fb:42:ef:85:49:eb:6c:24:7e:44:ee:41:ff:b3:cf:
         09:37:33:37
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEgDemwNtOkK6a5MusAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
MjcyYzQzYWEtMTZlOS00MzY5LThhMWItYmM3MzQyOGEwNDVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6odYblDEHNyzWPVVU++EGG4haLLX3bDBgGfN
hbfgsQmpmRFFzeoyx8YYhN99vxoRIfNRZJP7VUEMbnjvh2i781rr/Y6iIYMsUtCb
w9QJTm4grnqf8M88I9Pmxq2WIPnT1BRsHRiiRW9S1/nIiJyWO70kgtvUSm0sLmUC
UIKpHbdlqGvBW4LN7G6LD+a2JUQ/lGRDslnjdQXo/wFrABRp0YqxWG+j1qctGiLd
SLuINm5L/rGO+29zvukD7UW/RCK9g3maOXE4HBSNADMO99KW1Eknp2PsWo4AREiA
9Eo0lvd5utofRFyTj+Eb/nJ90ZT75u5sGKR7hInDZEChDiYhuwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFA9YZrPyFTaOutCLVV3IciZF2kn2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZGRiMDc0NjMtYmUzOC0z
NWUzLWE3ODktN2I1NzNiNzVhZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBQ/wwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAIWX91H1+OY8pexXsOM587m+kOBdkqaBHnHEw0oS9yA9ID+yV6WaS9Uv4
xU1UvtUzdQ2U8Vrlqwtl5f6I4njAms4z0PJoHvv3Q0f89t2cKuF6ehW6kolgNQ/o
y+1e0hBbmKr1p+SGCUZBKzMENe2z0ZutfMOHxeCcCP92a/6of9IoyqZNqgZTw75d
Ya4aWT3Zn3CXCFiD+CW3bhigYYAc8mz663eLCbYntMxs2kSKOslXZifk78Xpxdy8
RHD/VxfqHMgItheT+6dYphqB7TjVXOcrAXUivi/8luHB/Og6/VCch79l5unkARn+
rYrq+0LvhUnrbCR+RO5B/7PPCTczNw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 15:22:14 2025 by rpki-client