Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e43b226c-1c19-3e30-949a-33cc821dcd4a.roa
File:                     e43b226c-1c19-3e30-949a-33cc821dcd4a.roa (raw, json)
Hash identifier:          6ch/4JmaE81gKmB2AdVlOQAZJiqJhFb2SgVjgot7nQY=
Subject key identifier:   55:54:1E:3B:6D:E1:0B:DF:84:D2:69:36:C8:C9:85:ED:4B:DF:E7:5B
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F432858482EC008ACEC47363FEB7559C0
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e43b226c-1c19-3e30-949a-33cc821dcd4a.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     6128
IP address blocks:        173.251.11.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:c0:08:ac:ec:47:36:3f:eb:75:59:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=c2de1e33-05db-44e6-826d-18313e5c46ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f7:54:8c:bb:ec:6e:be:f1:4f:88:8d:cf:7e:
                    bd:a1:35:d8:9f:ff:8b:2e:b1:36:c1:58:00:19:97:
                    53:32:3b:86:40:20:04:4a:2c:50:87:d6:d8:5c:4a:
                    80:66:29:45:db:d4:55:42:d7:55:d0:6b:3e:40:52:
                    68:de:53:fd:c8:59:20:f3:35:ee:58:62:04:6f:65:
                    42:fb:9c:e3:50:8a:8f:61:df:5b:3c:69:40:b6:f3:
                    d1:5b:ef:f9:11:ad:88:5c:f8:ce:3d:37:6f:1c:08:
                    2f:8d:d4:a0:1b:8e:5b:e7:5a:c2:b9:c9:1b:a4:27:
                    c0:93:ee:9c:09:00:81:77:7a:bc:76:96:3e:99:c9:
                    0f:b1:c2:74:86:8e:00:11:f7:9c:47:ea:28:df:fe:
                    bc:91:0d:e9:0b:12:6c:10:d9:9e:17:30:a0:de:54:
                    9d:7b:e9:ce:23:9a:1f:81:59:13:b6:0e:00:75:be:
                    fe:12:b0:d1:a7:93:fd:54:ad:00:a0:6d:af:af:a6:
                    05:e4:0d:80:70:76:c4:fd:13:98:54:4a:73:31:1d:
                    30:4a:e5:b2:3c:11:ab:71:f7:be:f4:9d:e9:09:f9:
                    2f:73:aa:f3:ba:f0:b4:79:1e:e9:1c:db:d3:42:2d:
                    3b:f1:18:69:7b:30:ca:52:6d:27:60:28:f8:cf:4b:
                    e3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:54:1E:3B:6D:E1:0B:DF:84:D2:69:36:C8:C9:85:ED:4B:DF:E7:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e43b226c-1c19-3e30-949a-33cc821dcd4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.251.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:b8:e7:16:62:45:38:88:fa:c4:37:13:af:ac:6b:32:cb:7b:
         5a:48:a1:4f:fd:2a:06:e7:d3:91:6f:c0:65:a1:99:4c:ef:64:
         9b:03:5e:b6:5f:e0:d1:25:bb:80:76:c8:b6:52:92:bb:94:90:
         b6:64:ce:e7:a4:f4:b7:77:03:ee:44:e1:c7:02:6b:6e:69:12:
         0c:5d:5b:37:22:97:b0:fb:b3:c0:5c:3c:9f:2c:9e:ca:58:ac:
         9e:a1:d1:c6:d2:58:0c:64:13:fc:c3:44:b2:79:8c:c6:a3:cd:
         ff:72:6e:24:01:94:46:8f:b4:c9:3d:a9:a4:66:aa:47:d5:04:
         07:e4:6f:a9:90:5f:40:41:63:d6:b5:c5:61:e0:2c:d6:93:fc:
         cf:54:5d:c5:ea:1a:f5:32:8d:d8:58:72:47:66:45:47:98:b7:
         2a:d9:71:b7:c1:88:29:40:a7:ed:73:fb:3a:9a:c0:56:0a:35:
         03:d6:d7:62:f6:32:3e:0d:0f:11:3b:65:95:57:a2:e9:17:99:
         f0:f1:01:8d:f7:b2:86:52:de:94:c6:59:76:43:11:47:73:41:
         f3:b8:f7:36:7b:d1:e0:a4:a3:9f:dc:41:6f:98:3a:5e:26:d7:
         69:da:14:74:aa:36:96:97:87:59:78:d2:6f:80:a9:9a:70:12:
         2e:95:f9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:02 2025 by rpki-client