Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e8d492c4-9b72-3157-8584-a6c6185252aa.roa
File:                     e8d492c4-9b72-3157-8584-a6c6185252aa.roa (raw, json)
Hash identifier:          IRlcL2SDIZLZfErKmQYP8wc4mv/6PEMFRyD7+kYxs6I=
Subject key identifier:   3B:3F:3C:2E:95:04:B2:49:B5:BD:45:22:26:94:C9:5A:8B:BF:1E:A1
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584824FA8E9292CD8D037024E100
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e8d492c4-9b72-3157-8584-a6c6185252aa.roa
Signing time:             Mon 09 Dec 2024 02:00:40 +0000
ROA not before:           Mon 09 Dec 2024 02:00:40 +0000
ROA not after:            Sun 09 Mar 2025 02:00:40 +0000
asID:                     16787
IP address blocks:        98.120.100.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:24:fa:8e:92:92:cd:8d:03:70:24:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Dec  9 02:00:40 2024 GMT
            Not After : Mar  9 02:00:40 2025 GMT
        Subject: CN=c4963604-a553-4c7c-b901-a379f2a78873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:00:13:a4:62:4a:6a:ff:d0:69:e0:14:bd:85:
                    b7:06:22:55:74:84:93:c2:41:5a:1a:05:11:2a:9c:
                    77:67:bc:a8:ea:b8:fd:d2:f5:78:da:6f:58:ee:31:
                    af:dc:5c:5d:bf:20:97:a3:84:db:ee:b7:70:33:80:
                    b1:c4:cf:d1:a8:7c:7f:68:6c:1b:c6:84:80:1f:98:
                    69:04:53:6d:f5:00:66:06:4c:dc:83:82:35:32:ee:
                    e5:f0:b0:6a:32:90:6f:72:9c:d1:eb:14:31:af:88:
                    29:78:dc:c1:e5:25:3c:d1:24:6c:7e:9e:43:50:7c:
                    f3:40:d2:d0:2c:7d:8b:58:b7:26:e6:cb:6d:97:72:
                    68:6e:92:28:10:d7:af:e9:b4:d4:59:d6:ca:3d:01:
                    04:97:a3:93:a7:8e:2d:9c:39:b9:1a:2e:4b:07:b1:
                    cc:b3:3f:6b:a8:d7:2c:ad:2c:4f:c1:be:be:62:46:
                    e9:b8:f5:19:a5:5c:40:3d:53:12:0b:76:67:2c:d7:
                    cb:e2:fb:b3:a0:21:d7:3e:ec:d3:23:96:e4:05:0d:
                    bc:1c:7d:a0:96:ee:80:c5:d7:3e:ec:e2:4e:b3:d6:
                    d5:de:9c:ee:b7:a5:35:6c:d1:5a:a5:db:4e:33:d9:
                    63:59:51:0c:82:69:1a:12:96:1b:62:c8:a5:f8:5a:
                    79:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:3F:3C:2E:95:04:B2:49:B5:BD:45:22:26:94:C9:5A:8B:BF:1E:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e8d492c4-9b72-3157-8584-a6c6185252aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.120.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:31:3b:92:2e:30:3c:b0:f9:a4:31:51:78:b7:4c:8c:d7:20:
         ba:93:78:f4:98:e8:81:a9:a4:ab:4c:61:65:d1:f4:ab:34:c3:
         fd:72:3c:54:a2:d0:be:4a:9b:fd:28:09:5a:ee:e8:9c:a8:d3:
         1b:88:54:33:b4:a5:ad:69:1b:df:f3:57:41:f9:86:d6:ba:17:
         df:37:ae:d9:7c:7f:fb:af:34:43:6a:12:e5:1e:a8:e9:c8:8a:
         8a:23:88:a8:a8:8f:a1:6d:2c:a3:48:a4:c3:58:2b:b8:ee:79:
         5c:93:30:1c:6c:d6:09:3d:4c:33:82:9f:23:28:14:d0:a0:22:
         58:2c:cd:47:d9:aa:c5:86:2a:ab:a7:cf:0d:ae:03:5c:f1:78:
         ca:9e:26:b6:04:ce:f4:21:8f:66:83:ea:ec:1a:de:b3:09:9b:
         b2:2a:fa:8f:5c:da:0d:0d:10:6e:a9:8d:69:4f:61:cb:42:9a:
         2a:d1:0a:07:12:87:aa:74:b3:f9:c8:e6:66:38:a7:de:85:b0:
         c5:60:24:f0:3a:99:a4:5c:b5:e8:61:42:13:f3:0b:99:6e:0b:
         89:1e:07:c3:72:25:5c:5f:9e:0b:a8:e6:2a:c5:d7:99:58:27:
         0d:a6:4e:3e:7a:f7:18:b3:60:99:01:2a:98:80:1a:a1:ab:26:
         3f:ab:ff:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:24:24 2025 by rpki-client