Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f8fffc4a-7cdb-3384-ab4d-d2aa5b1de26c.roa
File:                     f8fffc4a-7cdb-3384-ab4d-d2aa5b1de26c.roa (raw, json)
Hash identifier:          4agVLxXQZWFkFNqu8Vh/NQq1NevLMQ1occftl1XMPQM=
Subject key identifier:   DE:52:E7:46:F3:E5:AE:68:19:7C:4D:5A:6D:7A:7C:36:0F:93:1E:96
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A774760086ACB2A050550
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f8fffc4a-7cdb-3384-ab4d-d2aa5b1de26c.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     11427
IP address blocks:        74.87.176.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:77:47:60:08:6a:cb:2a:05:05:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=5a0a1cb2-068f-4b8e-ac91-ba3d1afd0e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4d:70:6e:84:73:ca:5e:b2:80:80:ce:e1:d8:
                    29:51:71:67:7f:29:36:04:93:81:fd:37:c1:3b:96:
                    5b:6d:24:db:5e:de:84:00:df:4a:df:2e:63:cb:46:
                    ab:9e:25:78:4c:57:33:27:aa:60:55:2c:76:92:56:
                    24:1d:1b:53:52:c3:20:69:12:52:a0:44:d5:59:37:
                    fc:be:32:16:40:79:98:e4:a5:e2:9f:bf:a2:60:4b:
                    8f:bf:85:0f:68:2b:f5:c3:11:72:ed:89:4d:78:5f:
                    1b:71:2e:56:08:de:c6:fb:4d:f6:60:d8:2f:f7:37:
                    91:c5:19:8c:11:fd:8e:98:2b:e4:1b:ea:6e:aa:4d:
                    44:09:d8:95:ef:e3:50:6f:25:43:60:61:a9:aa:6d:
                    9a:85:97:2f:f7:0f:dc:4a:ab:9e:1b:d5:53:04:10:
                    39:15:db:a6:58:1e:b7:cc:f6:27:9e:a6:e5:97:fc:
                    64:53:3d:91:86:2f:c3:a0:1b:1b:e8:45:5b:01:85:
                    d7:0f:a9:54:c9:75:3a:d5:20:63:c0:55:e7:1a:86:
                    79:b8:2e:ac:b5:59:09:fe:03:bc:93:96:90:5c:69:
                    7e:9b:6a:46:78:0e:90:cf:16:03:1d:b6:d3:79:ac:
                    3e:90:ed:08:68:84:de:a7:05:86:81:16:bc:26:f5:
                    83:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:52:E7:46:F3:E5:AE:68:19:7C:4D:5A:6D:7A:7C:36:0F:93:1E:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f8fffc4a-7cdb-3384-ab4d-d2aa5b1de26c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.87.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:13:ca:5f:80:dd:73:b1:0a:5d:43:d4:b3:d6:a4:97:e3:a3:
         1a:dd:69:3a:e3:e2:18:26:4c:7e:0f:dd:1d:43:8a:be:7d:24:
         38:4e:92:3b:49:5a:5b:92:d6:97:cf:7a:fd:e7:79:94:e7:6f:
         59:f1:ee:49:81:15:ec:6c:6b:41:98:1e:61:94:8c:54:ff:b7:
         8b:44:67:1f:f9:4d:72:e9:1e:ed:3d:94:98:db:bc:98:4c:64:
         33:2f:aa:6f:d8:c2:ad:d6:f5:21:24:dd:cf:c4:76:a5:1f:03:
         b3:98:28:ca:b4:eb:45:86:79:08:67:d0:b5:67:f4:ea:a2:8f:
         8c:a2:03:43:88:ff:df:95:14:e2:95:e0:4f:6c:5f:42:cc:a9:
         3b:05:c3:a3:18:99:86:70:ff:c4:0c:11:87:92:2f:a4:43:c3:
         fe:9a:43:5d:0a:54:a6:48:54:12:a3:be:dc:d2:1a:bf:6e:27:
         c4:68:89:55:cf:33:be:42:af:53:72:ad:af:2e:38:3c:d4:2c:
         0f:10:2f:e7:db:c9:c8:ca:50:50:5f:52:e6:35:a7:8f:e8:13:
         ed:fb:94:02:34:51:0e:c9:41:18:4c:01:5f:75:39:2a:ab:b6:
         94:80:c6:d6:1c:60:54:65:1f:3e:07:77:08:d5:94:5c:63:d3:
         ba:9c:b5:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDendHYAhqyyoFBVAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
NWEwYTFjYjItMDY4Zi00YjhlLWFjOTEtYmEzZDFhZmQwZTAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkE1wboRzyl6ygIDO4dgpUXFnfyk2BJOB/TfB
O5ZbbSTbXt6EAN9K3y5jy0arniV4TFczJ6pgVSx2klYkHRtTUsMgaRJSoETVWTf8
vjIWQHmY5KXin7+iYEuPv4UPaCv1wxFy7YlNeF8bcS5WCN7G+032YNgv9zeRxRmM
Ef2OmCvkG+puqk1ECdiV7+NQbyVDYGGpqm2ahZcv9w/cSqueG9VTBBA5FdumWB63
zPYnnqbll/xkUz2Rhi/DoBsb6EVbAYXXD6lUyXU61SBjwFXnGoZ5uC6stVkJ/gO8
k5aQXGl+m2pGeA6QzxYDHbbTeaw+kO0IaITepwWGgRa8JvWDnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN5S50bz5a5oGXxNWm16fDYPkx6WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZjhmZmZjNGEtN2NkYi0z
Mzg0LWFiNGQtZDJhYTViMWRlMjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSlewMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABkTyl+A3XOxCl1D1LPWpJfjoxrdaTrj4hgmTH4P3R1Dir59JDhOkjtJ
WluS1pfPev3neZTnb1nx7kmBFexsa0GYHmGUjFT/t4tEZx/5TXLpHu09lJjbvJhM
ZDMvqm/Ywq3W9SEk3c/EdqUfA7OYKMq060WGeQhn0LVn9Oqij4yiA0OI/9+VFOKV
4E9sX0LMqTsFw6MYmYZw/8QMEYeSL6RDw/6aQ10KVKZIVBKjvtzSGr9uJ8RoiVXP
M75Cr1Nyra8uODzULA8QL+fbycjKUFBfUuY1p4/oE+37lAI0UQ7JQRhMAV91OSqr
tpSAxtYcYFRlHz4HdwjVlFxj07qctaA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:03:23 2025 by rpki-client