Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ea78a375-4d87-3e1d-93a9-fa58015bfac3.roa
File:                     ea78a375-4d87-3e1d-93a9-fa58015bfac3.roa (raw, json)
Hash identifier:          WNpPN+U15tUfpLlQuXLwi6D/YsAZf0jjMPb/EFPhnto=
Subject key identifier:   64:EF:CE:76:DC:2C:F0:38:54:4C:A6:B1:63:4D:35:D9:3F:F0:CE:8E
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A6C28D82A267EA7592080
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ea78a375-4d87-3e1d-93a9-fa58015bfac3.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     11351
IP address blocks:        98.0.0.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:6c:28:d8:2a:26:7e:a7:59:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=1dfe9855-2166-4932-9e9d-94cda7a749a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4a:b8:cb:bc:29:39:58:03:26:35:7e:9e:06:
                    d8:88:48:92:36:ad:25:d3:32:66:b7:91:fc:19:f8:
                    81:e3:2f:55:fe:e6:70:57:fb:2a:41:f0:a1:ea:a0:
                    6f:93:ab:3e:f7:0e:ae:5d:7f:7e:7b:7e:67:4a:34:
                    d8:39:1c:f6:96:bc:1b:a5:1f:04:82:1b:d4:20:4d:
                    06:03:81:c9:84:5d:e2:92:a0:87:d9:f1:3d:e5:38:
                    da:d7:9a:3d:d6:45:c8:94:50:e3:c7:db:3e:2b:b1:
                    53:26:dd:87:2e:59:95:03:75:78:f4:bd:a4:84:3e:
                    2f:a3:8a:ad:00:e0:bd:bc:a3:d7:e4:a9:c3:93:a3:
                    ba:2f:c2:70:f5:f6:1e:60:33:8a:c0:fc:81:07:55:
                    06:73:f6:18:46:db:05:97:60:54:40:ff:e7:a4:aa:
                    30:0e:f9:b8:cc:6e:93:08:80:4f:e4:63:2b:a7:c0:
                    6a:16:19:e5:ad:60:a5:99:73:2e:c3:e6:f9:b2:05:
                    87:62:de:68:15:c2:60:05:1b:0d:63:a2:95:c8:b1:
                    e5:11:7f:a6:75:95:2b:8d:32:99:d3:d2:5b:c1:36:
                    7f:35:97:65:08:b9:5d:36:42:41:85:26:9a:67:52:
                    72:2e:0d:c3:4e:57:bf:6f:c6:ff:83:f5:ef:94:73:
                    6b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:EF:CE:76:DC:2C:F0:38:54:4C:A6:B1:63:4D:35:D9:3F:F0:CE:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ea78a375-4d87-3e1d-93a9-fa58015bfac3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.0.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:5b:7f:a9:a0:59:cc:ae:d4:ab:8f:21:00:ae:6d:53:87:8b:
         8c:69:fb:51:81:aa:85:90:66:ab:11:0e:52:89:99:ed:08:c3:
         38:21:5b:c9:2b:a3:a1:76:e1:6e:e3:70:fb:48:8a:d1:af:06:
         66:4e:0b:d8:07:92:09:73:35:96:24:b9:02:cb:fe:60:ab:31:
         b7:c9:e9:cb:65:8f:0a:15:f1:df:84:88:fd:d2:65:00:15:6d:
         9b:88:f0:e9:a8:0a:56:c6:b4:9a:28:ab:2b:b8:24:51:cc:03:
         73:e4:7c:00:0c:8e:8b:9b:88:6b:e2:5e:ff:62:0d:d2:1d:cc:
         16:eb:e5:8e:ee:a9:c9:30:4a:91:b3:0f:63:9b:73:1f:9a:3f:
         9c:51:74:ef:6e:35:e1:06:9f:46:40:9e:27:e9:eb:79:ad:62:
         8d:7b:57:33:5b:aa:87:40:67:1a:8d:18:f4:4b:fc:4d:8c:ed:
         5b:11:fa:73:ad:08:6c:f1:41:7d:6f:e9:f4:84:db:71:eb:6c:
         ed:eb:4a:7a:47:e9:68:f3:d9:e7:ab:db:5f:f7:3a:98:1b:31:
         25:c0:dd:f0:3e:04:89:ae:be:ad:86:4e:d5:fb:cb:10:7b:fc:
         82:dd:b4:c5:79:0f:c9:15:60:6b:c2:ab:d5:f6:f9:4a:5e:ea:
         0c:03:7d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:28:59 2025 by rpki-client