Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e0233341-0320-37f4-a373-e7fc6697caac.roa
File:                     e0233341-0320-37f4-a373-e7fc6697caac.roa (raw, json)
Hash identifier:          DKiszwMwL5FD9EPjm9RTBiS1L8IF1ot5z3hGYI+BkKw=
Subject key identifier:   6C:7C:3A:74:9D:C2:76:14:5D:1E:58:FC:1F:DF:16:CF:4B:F2:02:88
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A5E2B2F35577AFBA34300
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e0233341-0320-37f4-a373-e7fc6697caac.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     10796
IP address blocks:        198.24.96.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:5e:2b:2f:35:57:7a:fb:a3:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=a24670c5-7c98-464a-ab47-b01e9315614a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e0:b7:a9:21:7b:64:26:56:a4:5a:09:33:3f:
                    ad:7f:83:d0:c8:6f:05:33:da:65:0c:3a:51:b3:1b:
                    08:63:7b:7f:e1:57:f1:0f:ab:92:1b:b0:6f:e2:6b:
                    be:9f:b6:20:a9:dd:84:e9:c6:db:99:82:46:d0:b9:
                    a8:e6:bc:ed:eb:69:5b:d6:fd:82:b3:70:80:ce:e5:
                    18:f9:b9:8b:5a:d1:7f:9d:57:50:3c:f4:01:b1:90:
                    3b:b9:66:a0:db:9b:ba:26:a8:73:73:d8:df:9f:30:
                    87:9b:fe:84:72:54:b7:33:59:c4:cd:9c:5c:a2:58:
                    14:45:7e:f8:de:6e:23:3c:df:9a:b3:a6:a0:3c:e9:
                    f5:9a:da:7b:2a:b9:ae:f0:d6:28:a7:82:4c:34:40:
                    58:54:91:a6:20:16:4f:8f:13:36:43:22:df:58:91:
                    a6:e0:8f:29:0b:8a:74:97:8d:d8:f0:90:8a:2d:5b:
                    97:be:8d:40:e1:d2:82:2b:8e:fe:d1:94:e4:23:48:
                    53:60:b0:96:6b:a3:c4:23:d5:49:cf:65:bb:a2:31:
                    5a:80:6d:67:a8:60:bc:f5:30:e5:80:c1:b5:78:88:
                    b1:e2:f3:81:8b:8c:f0:33:1a:0d:52:66:f3:9b:41:
                    60:82:df:8d:6c:d2:6e:59:87:e6:09:4f:1b:bb:bf:
                    e7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7C:3A:74:9D:C2:76:14:5D:1E:58:FC:1F:DF:16:CF:4B:F2:02:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e0233341-0320-37f4-a373-e7fc6697caac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.24.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:c8:d4:f5:51:c6:c5:65:b9:43:d4:90:2b:5c:37:6b:03:8a:
         6b:a2:f5:7c:17:13:f0:da:4c:20:bf:6d:d5:45:de:45:51:f0:
         f8:de:4f:92:17:32:dd:3f:b5:e8:3a:82:82:cf:4d:10:f7:c8:
         ce:d9:1a:cf:dc:30:7a:5e:69:d6:81:42:c5:0f:71:cd:57:bb:
         99:f9:51:21:e2:e5:40:e9:ab:4d:a5:22:63:c0:da:00:3c:7d:
         c2:f9:19:fc:58:6b:89:5e:72:f3:ad:5b:e9:9b:f4:91:ff:18:
         b9:78:43:e0:38:4c:35:f3:53:71:d2:5b:37:d0:15:00:5c:0d:
         47:7d:e7:9d:24:5e:d9:17:cc:16:52:b8:4a:04:a9:95:41:55:
         17:76:85:39:9b:ed:a6:e2:d8:38:3e:48:24:19:27:69:b8:7a:
         10:98:ca:06:79:d4:e0:a1:15:60:4b:84:e4:f1:86:ab:f7:87:
         b2:77:ec:b4:14:0f:c4:49:b7:20:22:44:bb:cc:d3:be:1e:6c:
         0f:78:6f:90:9e:f2:de:a4:86:d0:92:0f:d3:24:e5:80:3b:89:
         27:04:e1:f2:b6:c1:25:29:08:9e:bc:90:b2:0b:d6:5a:d1:41:
         d0:e2:a9:59:11:7c:e6:6a:42:c2:7c:b9:6c:59:d1:c2:57:a0:
         fb:25:27:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:31:31 2025 by rpki-client