Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e539d8d1-f4cc-3ab5-9ff5-a3286632bfcd.roa
File:                     e539d8d1-f4cc-3ab5-9ff5-a3286632bfcd.roa (raw, json)
Hash identifier:          jzhNv6oG03UzcY0YYdObZeXfMeWuHywcc5KPaWu7TSY=
Subject key identifier:   7A:4E:83:9B:01:D9:4C:BA:4B:98:64:4C:89:FA:89:44:5D:01:CC:C7
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037AE8A8938F127517479400
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e539d8d1-f4cc-3ab5-9ff5-a3286632bfcd.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     10796
IP address blocks:        173.89.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:e8:a8:93:8f:12:75:17:47:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=4aa8288b-729e-4e07-8aee-27a25593c476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6b:90:2f:f1:96:44:91:a1:28:49:b1:45:35:
                    3f:62:d5:1b:e6:05:5b:b8:d5:1f:1f:e2:43:cd:66:
                    23:4b:77:38:36:a6:dc:7c:26:8a:68:69:87:4d:c6:
                    e6:aa:12:66:50:81:23:a7:c1:7a:af:15:17:3f:a6:
                    79:3f:79:2a:93:b4:74:20:3a:25:3f:24:80:be:32:
                    1d:27:b3:d8:62:95:a4:d4:f9:76:4c:ca:00:b1:f2:
                    21:89:f3:37:56:dc:7f:1c:99:db:08:2a:d9:64:0e:
                    b9:e8:55:3d:13:e4:18:b7:25:78:a1:04:01:95:2c:
                    65:12:ff:a3:24:d5:7c:0d:56:cc:e7:a1:c5:01:47:
                    6d:bd:a0:04:6e:cb:07:93:aa:66:d5:fd:ef:d8:66:
                    63:29:69:92:94:3e:8c:f5:80:50:39:06:3c:1f:44:
                    9d:69:87:5d:40:9a:54:50:33:bc:f0:66:db:69:7e:
                    19:97:8b:8a:49:86:2d:87:40:16:e0:95:ba:52:a1:
                    6b:80:fa:47:e3:51:a4:35:d6:24:c1:f9:09:6b:1c:
                    a7:f1:cd:f2:33:2f:7c:32:d8:43:b8:1c:5f:a5:59:
                    dd:23:fc:e1:5c:38:db:c3:25:d7:b8:af:98:92:45:
                    ad:f6:6f:73:22:54:1f:03:89:96:34:11:13:09:f2:
                    fc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:4E:83:9B:01:D9:4C:BA:4B:98:64:4C:89:FA:89:44:5D:01:CC:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e539d8d1-f4cc-3ab5-9ff5-a3286632bfcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.89.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:ba:c1:f6:cc:5f:00:61:e8:02:19:a9:59:70:ca:fb:65:1d:
         50:82:35:30:6e:a3:e1:a1:0c:a8:28:52:f3:ae:7a:71:da:77:
         fb:55:74:c3:2c:c9:98:9d:96:23:a2:3e:91:b1:38:cf:f9:23:
         67:c1:b5:7a:44:12:2f:45:5a:3d:3c:fc:27:3a:68:5a:c5:99:
         58:0f:a7:42:4b:fe:0e:f9:4b:c4:89:45:02:02:1f:bb:49:10:
         ef:ce:85:1f:48:c8:b0:66:7a:79:46:e4:50:7a:d7:59:97:d1:
         10:4f:86:50:2f:81:46:27:91:5a:47:bf:22:a4:29:db:43:3e:
         60:93:e9:c5:40:ed:ed:88:4b:29:24:55:cc:bc:35:ad:98:4f:
         5e:9e:ad:bb:d3:6d:4f:88:34:ec:66:3e:11:ee:91:6b:ec:84:
         4f:56:47:89:2a:b5:99:29:b1:17:8d:9a:a9:97:56:0a:fb:58:
         ab:ea:b9:41:17:a8:86:fe:9a:37:b1:e6:55:e8:38:f4:0c:ce:
         cb:ee:fe:ce:46:72:75:06:33:93:f8:44:4b:42:be:da:cc:4f:
         6c:ef:34:5c:d0:bc:bf:a6:6a:bc:5a:b6:2f:87:da:4d:fb:59:
         23:e4:b3:48:ba:7d:e1:01:ec:c0:f7:40:61:17:a3:27:c8:ef:
         73:26:8f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:39:58 2025 by rpki-client