Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df32b442-cf17-3dd1-9875-275a81c6f686.roa
File:                     df32b442-cf17-3dd1-9875-275a81c6f686.roa (raw, json)
Hash identifier:          bDWSiZRs5KIXv09sD6/dczRSXCJrpYhq6EwCjBwXTSc=
Subject key identifier:   D0:4A:F1:21:DD:8C:27:93:3D:65:85:04:B6:D8:65:77:1E:0C:50:CD
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037B05738BCA9085CB94DA80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df32b442-cf17-3dd1-9875-275a81c6f686.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     12271
IP address blocks:        68.174.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:05:73:8b:ca:90:85:cb:94:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=e164983c-45e9-4726-9075-6958e996ac4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:37:da:4d:d5:8e:4a:3d:66:e0:41:a7:9f:0a:
                    f0:4f:7e:11:1d:5f:08:13:52:b3:6a:c4:5d:14:e7:
                    b6:eb:87:bd:5a:8e:b1:c4:ea:b3:90:f2:84:e9:89:
                    a5:4a:d3:61:92:21:82:f3:a8:48:57:97:f4:df:09:
                    b1:27:15:5d:d7:44:1a:73:04:d4:54:9b:f7:78:bc:
                    7d:90:c4:d8:d0:bf:fc:99:bd:6e:18:08:07:c3:a3:
                    f0:49:5f:f7:b8:a0:11:cc:d8:f3:bb:ce:a1:33:31:
                    a9:3d:3b:07:c6:89:1a:9d:59:20:19:fa:a4:28:64:
                    77:d1:a3:e7:48:fe:53:d7:ac:f2:4e:7c:7b:95:e0:
                    f6:49:99:32:88:08:b9:7c:94:4c:99:b7:66:a9:c4:
                    2b:ed:14:28:00:61:2b:8d:76:91:6a:92:68:66:b4:
                    0e:cc:97:b1:ec:e0:12:e8:1e:e4:ca:46:c8:ee:ed:
                    74:f1:3f:12:f8:f6:35:0a:f3:9d:3f:70:f8:b4:27:
                    73:78:a5:ee:de:58:fb:f7:48:f1:a4:aa:cd:f0:11:
                    cb:bc:d6:0a:1d:60:d5:f7:51:5b:45:f9:fc:71:36:
                    b8:e4:fc:6c:b7:75:c2:58:d8:58:d2:cb:cc:81:c4:
                    13:12:34:a9:6b:ba:d5:ef:b3:5f:8b:0b:d8:82:36:
                    f4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:4A:F1:21:DD:8C:27:93:3D:65:85:04:B6:D8:65:77:1E:0C:50:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df32b442-cf17-3dd1-9875-275a81c6f686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.174.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:e7:9f:cd:56:fb:67:55:28:9d:60:33:01:cf:96:6a:12:f0:
         6d:b0:98:74:b6:25:98:b2:95:57:14:25:76:7a:fe:14:98:ec:
         6c:ca:9b:b7:a7:b2:94:4b:c1:1e:d6:a7:6d:d0:ae:60:f0:e2:
         b6:b4:af:19:91:ad:81:9c:a2:ea:2f:38:f4:1a:18:3a:10:2a:
         8c:23:b4:3e:be:fe:97:d1:a2:6f:2f:54:00:6e:0e:aa:02:67:
         b2:7d:1d:06:da:97:35:d0:dd:89:66:3f:1f:0e:05:0a:4c:bc:
         eb:78:d4:c8:1c:4b:29:67:fc:26:b4:d7:ff:ee:d2:c9:cb:74:
         ca:3c:69:2f:b9:f4:88:f0:d9:dd:5b:ce:f0:f5:ef:4f:25:89:
         c9:9c:e5:8b:23:66:76:96:c5:74:19:a3:72:e1:7c:ac:55:05:
         dc:a4:ea:fa:d5:59:d4:d1:99:d5:9e:cc:75:07:51:aa:b7:25:
         79:2d:bb:61:c1:48:8e:4b:91:e5:d4:75:5f:2c:a7:65:76:0b:
         47:67:a8:37:1e:0b:5b:9c:a8:29:02:58:a1:dc:d7:5c:8b:86:
         e6:3c:ef:67:fb:13:d2:a3:14:07:d8:a0:58:fa:bb:3b:c6:5f:
         c0:95:42:d7:4a:55:d6:60:9e:89:a2:ff:cc:59:75:25:c9:57:
         9f:73:49:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:41:05 2025 by rpki-client