Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e8537685-49fb-3587-992c-bd4881289aff.roa
File:                     e8537685-49fb-3587-992c-bd4881289aff.roa (raw, json)
Hash identifier:          xfwgqTDOGIDQr9GlYqz/qeDsjEmWqjoXN+D644b3aCc=
Subject key identifier:   2A:42:1C:ED:86:B4:AF:40:1E:3F:8F:AD:0F:CC:73:8C:24:80:6D:E2
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037B07D19BA03874147B4000
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e8537685-49fb-3587-992c-bd4881289aff.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     14230
IP address blocks:        70.60.37.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:07:d1:9b:a0:38:74:14:7b:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=482ef894-acfd-4141-931d-b57ac90a6d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:17:6e:d9:f1:02:db:bf:6a:ec:dc:be:4c:7c:
                    c3:ca:68:79:c9:aa:25:0f:1f:ed:ef:d4:39:53:3b:
                    8b:5c:4f:d9:70:92:2d:73:93:72:20:ab:f4:c8:8e:
                    4f:6a:60:cc:13:29:d3:02:91:8f:65:2e:56:34:a0:
                    50:7d:7e:1f:6c:49:c9:01:d2:71:c1:ea:bc:e7:ce:
                    ff:ba:37:29:ce:05:3a:8a:73:c9:16:42:b8:47:bf:
                    f8:71:9f:51:50:8a:34:26:27:03:25:f7:5d:88:db:
                    a1:62:cd:1a:df:d0:27:87:94:e0:24:0f:1c:a2:f2:
                    45:88:19:10:20:ae:40:8d:3c:26:fc:0a:a4:59:a7:
                    98:52:e5:23:3d:a3:b5:40:58:c9:39:8c:7d:56:66:
                    c2:14:67:b3:82:63:41:f4:e9:a0:31:1c:83:2c:7b:
                    7c:c2:7c:17:f2:4d:50:38:b0:54:d9:67:74:46:55:
                    56:f4:bd:ec:f9:75:6e:39:3e:08:44:6c:a6:3e:2e:
                    d7:9e:5e:9d:16:d4:54:4e:33:58:71:67:80:15:cc:
                    ff:15:47:d9:d7:42:d9:72:65:53:d2:18:d0:46:fd:
                    2b:ed:6e:32:fe:20:c7:1c:ca:45:df:6f:b5:a8:40:
                    84:a2:21:3d:c9:86:5c:54:8b:25:c2:30:79:0a:02:
                    ac:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:42:1C:ED:86:B4:AF:40:1E:3F:8F:AD:0F:CC:73:8C:24:80:6D:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e8537685-49fb-3587-992c-bd4881289aff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.60.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:74:85:e1:a3:16:8e:70:3c:ca:d1:89:91:7d:c8:f8:fc:b8:
         e5:d3:f5:9b:0c:4e:e8:b7:20:b8:6e:ed:6c:8a:d8:f7:70:e2:
         41:a8:f6:79:65:49:89:3c:4f:b2:3c:8c:24:d1:a9:5a:88:06:
         cc:24:a7:90:91:af:b5:91:ee:49:ee:86:2e:62:a9:aa:0e:44:
         28:03:b3:0c:43:48:04:b4:9b:89:95:f0:13:97:fa:56:ab:81:
         1c:b6:b7:21:4b:92:63:8b:c0:bd:ba:38:77:c2:a0:89:5a:96:
         bf:d6:db:d5:4c:b6:35:c9:d3:a7:d3:49:9e:44:89:31:c0:8c:
         c6:b3:ec:0b:c0:5b:8b:11:43:77:28:7a:8b:c2:e0:71:37:b0:
         66:52:12:ea:eb:d7:5c:a6:17:bc:09:a3:64:64:15:99:13:eb:
         fd:37:5b:e5:bb:28:55:5a:23:28:3f:58:d5:91:0e:02:9f:3e:
         3f:c2:6b:fa:59:ab:d7:29:19:7e:ef:d6:68:56:25:81:b6:7e:
         ff:e9:0e:f1:df:58:44:ce:29:65:b4:43:64:d4:dc:9e:f9:5d:
         4a:f4:3c:07:51:7a:06:c8:f4:21:3e:74:34:4e:73:58:f0:87:
         06:91:57:4a:31:74:22:ef:9f:ac:69:bb:a3:b4:7e:bb:9d:a4:
         44:14:03:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:29:32 2025 by rpki-client