Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ff562219-a198-3b3e-b80a-f52c04f2ae20.roa
File:                     ff562219-a198-3b3e-b80a-f52c04f2ae20.roa (raw, json)
Hash identifier:          F7HavqcMx6xi+6uYtLCvZ4NNHebPj0Y/nBgKgCiRd1c=
Subject key identifier:   53:13:05:C4:C7:95:C0:D6:DD:5C:E6:24:64:7C:2C:8F:E7:1D:DA:5E
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A82E07D92ED0C6AA13C00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ff562219-a198-3b3e-b80a-f52c04f2ae20.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20001
IP address blocks:        24.94.0.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:82:e0:7d:92:ed:0c:6a:a1:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=546802d9-9118-4db8-b4e2-19624253176e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d7:bb:6c:3f:15:90:fe:6d:b6:6d:28:06:f3:
                    bb:29:bd:7e:63:98:64:c2:30:2b:7b:a5:ab:f0:22:
                    c8:2f:59:79:da:cc:15:5f:14:68:c7:5b:52:93:5a:
                    64:24:e2:3f:1a:dc:9c:0c:2b:40:35:72:71:ee:d6:
                    6a:86:8d:34:0d:c9:39:30:e8:41:59:82:d6:d5:d9:
                    f4:ba:11:a0:86:49:bc:bb:40:18:7a:0d:c3:a8:c4:
                    54:36:b5:95:e5:c6:24:0f:7b:74:96:79:87:3a:d4:
                    ae:5a:4e:74:2d:3b:7a:16:d1:5b:21:dd:c6:e2:02:
                    de:77:1f:2c:16:f8:18:66:5d:b9:6c:ae:d1:61:32:
                    bb:f8:74:34:4f:b4:65:ac:e5:0f:20:ba:e5:e2:34:
                    c4:ae:2e:a0:13:af:2d:88:e8:4e:92:59:fc:20:70:
                    78:00:df:fb:ef:25:39:71:9d:bf:44:4f:a9:20:bb:
                    44:46:f0:d6:59:e4:8a:c9:a7:09:cd:e4:b6:56:6b:
                    52:47:ec:74:67:e4:dc:b8:27:e1:4b:c6:c8:61:ad:
                    63:90:f9:ec:08:09:d5:af:5f:4d:51:6f:89:d8:e0:
                    30:06:f2:c4:34:88:b6:de:b9:67:67:ab:cc:1c:9b:
                    9f:f9:f6:53:c8:6b:b3:e7:b3:9d:2b:1f:3d:1f:50:
                    50:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:13:05:C4:C7:95:C0:D6:DD:5C:E6:24:64:7C:2C:8F:E7:1D:DA:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ff562219-a198-3b3e-b80a-f52c04f2ae20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.94.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:25:a4:c9:64:f9:b5:c0:af:0b:64:4a:98:c2:d4:3e:c7:8e:
         5d:b6:be:31:2d:46:a9:8e:16:41:fc:6b:68:9e:4c:16:6c:64:
         ec:00:17:7d:50:9a:a5:fc:00:28:41:f3:62:01:07:8b:d8:b9:
         62:0b:7d:1b:5e:86:ea:5d:98:fc:75:ea:91:83:23:ac:0c:d5:
         36:08:d8:80:c8:e2:00:32:fe:6f:ac:93:ed:30:63:7c:70:cf:
         f9:23:a7:68:c6:11:f2:5c:e4:55:b4:b4:c2:91:36:11:0a:3a:
         ba:62:02:29:82:4c:0b:03:3d:d8:7f:af:ef:7d:f8:0e:f3:45:
         b0:d7:72:f7:45:8f:58:e7:3b:79:97:24:36:ab:a9:4e:c5:9c:
         67:a0:32:8b:06:f9:5d:a9:c8:2a:9b:79:0b:d5:ab:04:0a:c6:
         9b:47:47:34:c4:4e:b2:7e:27:a8:da:f9:51:59:46:18:76:6e:
         9d:19:3a:c1:78:d4:f1:0e:7e:94:51:13:f8:a2:31:31:3b:d6:
         73:32:6e:8c:36:02:a6:4f:18:97:de:a9:30:30:b7:b9:1e:80:
         8e:f6:68:2e:23:ef:28:4d:71:c3:26:49:eb:b5:d4:a0:cc:40:
         c3:ba:b0:ce:37:97:be:94:05:0f:62:42:59:d3:90:fe:37:bc:
         0e:0c:9b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:08:32 2025 by rpki-client