Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fec818bf-c272-31e8-869b-06ab48860010.roa
File:                     fec818bf-c272-31e8-869b-06ab48860010.roa (raw, json)
Hash identifier:          aGNOulgxle24EI1L0LfBT2WmArQO7fvgOV6Lv0ZwRa8=
Subject key identifier:   7F:5B:EE:F8:28:7C:4D:BC:47:07:0E:A3:B2:D0:8A:19:03:E7:92:30
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037AE4D586FA3AB68BC78A40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fec818bf-c272-31e8-869b-06ab48860010.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     7843
IP address blocks:        69.63.88.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:e4:d5:86:fa:3a:b6:8b:c7:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=1aabd3d7-4838-4cf0-a9ae-1de9e380dd5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c3:a7:15:7e:e5:b6:0d:6a:5d:d8:2e:9e:3a:
                    b4:67:6e:f6:21:39:da:a6:b1:52:33:95:5a:ff:4c:
                    48:95:30:d0:ef:de:4c:5c:27:fe:9e:c5:e8:6d:4c:
                    96:b7:8e:11:59:66:05:1f:1a:c2:c8:1c:2f:56:f8:
                    6f:9f:59:f4:84:6f:f7:29:8e:e0:e1:4e:ba:1c:c0:
                    ec:c8:57:f7:f5:85:f1:97:7f:c5:b7:54:4d:96:b8:
                    b1:9b:a3:34:3e:38:ad:b3:24:d3:0e:bc:18:c5:b0:
                    3e:98:49:d1:04:4b:d2:ae:b1:7b:28:21:94:ed:67:
                    a2:23:82:22:f0:11:cb:13:f6:19:cc:97:0d:e4:46:
                    97:cd:59:c6:38:56:b1:49:f9:29:25:d4:ef:51:a9:
                    5a:77:64:1a:f6:1f:0e:17:86:be:e6:41:b9:16:cd:
                    7b:59:1f:a0:53:94:3e:ed:b2:b1:49:5e:0a:2e:28:
                    a8:2a:f3:ae:0f:60:6f:df:77:21:72:3c:62:41:83:
                    49:a8:ea:a4:d0:12:78:59:ad:84:d9:30:fe:38:d8:
                    66:65:6d:43:ab:67:d2:27:c7:92:10:6d:8b:92:60:
                    a1:24:61:16:ee:a8:44:e4:df:32:78:5a:71:59:2d:
                    a8:4b:7c:47:a2:d0:53:5a:6c:3e:05:d0:fc:8e:a9:
                    58:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:5B:EE:F8:28:7C:4D:BC:47:07:0E:A3:B2:D0:8A:19:03:E7:92:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fec818bf-c272-31e8-869b-06ab48860010.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.63.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:85:f1:d1:e8:3f:e5:23:2b:0f:ec:85:a4:24:88:38:a1:96:
         53:bb:33:35:09:9b:80:78:59:76:c4:c8:69:41:2b:11:3b:04:
         d8:ea:d0:2e:30:ff:c2:86:a2:2c:07:47:87:fb:27:f9:32:10:
         c6:a2:d3:f4:29:6f:bb:04:ec:aa:72:e3:64:80:d1:3e:63:af:
         f3:15:57:d8:99:0a:1e:20:eb:cc:4c:14:07:a5:21:44:49:fa:
         c2:86:c3:00:93:25:0b:1e:8d:91:8e:ee:95:0e:47:23:65:93:
         14:22:b5:cc:bb:64:64:5b:18:d1:35:11:09:05:33:61:0e:f2:
         66:0c:1d:7a:f9:5a:3f:1c:79:3b:67:d8:8f:f9:55:44:fb:ea:
         58:bf:6b:16:c8:be:d5:cd:77:2a:33:c9:b0:bb:61:cd:4d:f8:
         35:6b:9c:45:3c:f3:7a:de:47:df:4b:73:05:3f:bf:e8:5a:c9:
         e0:eb:23:26:98:a8:2c:1c:79:2c:49:b9:96:31:a6:2c:89:28:
         c3:5f:c7:c9:68:83:ad:8e:cc:2b:f9:95:82:60:ea:a8:81:d5:
         a7:34:b4:a4:93:01:14:4d:e6:7d:56:5e:a8:89:14:b5:8d:fb:
         fc:0e:ca:57:90:04:4a:89:15:eb:38:12:8d:7d:11:65:58:59:
         3c:97:e2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:42:38 2025 by rpki-client