Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/15d5ec7e-044b-30c5-90d8-02693f5c0795.roa
File:                     15d5ec7e-044b-30c5-90d8-02693f5c0795.roa (raw, json)
Hash identifier:          2bhoQveVQDTtJHOeNAOerrwBRHQHsjK2YBeVQUB4TDk=
Subject key identifier:   3E:CB:60:03:9C:FA:F8:56:F6:28:9B:72:F0:A8:7D:66:68:AE:54:5F
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F43285848222FD3A227F98A7CEA2CBB40
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/15d5ec7e-044b-30c5-90d8-02693f5c0795.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     11260
IP address blocks:        76.11.0.0/17 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:d3:a2:27:f9:8a:7c:ea:2c:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=6d335656-039b-44a6-89f5-7b4223ee6889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5c:a6:70:e4:3f:b2:c6:dc:37:bf:0e:64:b4:
                    14:70:5a:ec:ba:d5:74:e1:ca:e9:cb:a0:c5:8c:6a:
                    cc:43:fc:4a:84:2b:66:76:3e:7b:e1:b2:56:da:53:
                    1b:d7:f5:9f:05:98:27:d8:2f:4e:78:24:ec:44:6f:
                    2d:b6:cb:e4:66:0f:7e:dc:d8:d3:4d:de:27:bc:69:
                    9f:d5:6d:41:79:65:5a:27:33:d0:dd:30:2b:48:75:
                    fb:97:57:71:84:9b:e9:a8:19:61:01:56:82:81:8a:
                    12:04:ee:b4:c8:e2:6b:c9:81:d2:70:56:15:c1:6f:
                    1b:5a:79:c6:db:33:c2:b4:bd:96:3b:d6:56:16:a9:
                    10:55:89:20:5e:78:27:6c:66:ec:9f:bc:6c:5e:1e:
                    16:9a:4e:9b:a0:01:c0:92:5d:aa:46:ab:9a:51:17:
                    16:d6:87:42:0b:79:43:2c:a5:67:4c:9b:44:48:9f:
                    8a:ab:a2:ae:78:33:c8:5a:d5:37:18:41:59:94:aa:
                    36:19:c9:be:40:64:f7:45:96:5a:b2:98:2a:75:6e:
                    c3:83:18:d1:36:fc:74:04:d0:35:26:51:9f:35:c1:
                    41:94:fb:01:76:ba:4c:37:13:da:61:61:e9:fa:26:
                    ce:ab:08:d4:7c:b0:31:cf:31:5f:5e:93:bf:7f:c4:
                    d9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CB:60:03:9C:FA:F8:56:F6:28:9B:72:F0:A8:7D:66:68:AE:54:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/15d5ec7e-044b-30c5-90d8-02693f5c0795.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.11.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:80:bd:dc:4d:f0:bf:0b:2b:3f:f6:31:19:1e:83:9b:cd:f6:
         89:84:12:ea:bb:7a:fb:20:51:0a:c7:f6:50:7d:fe:83:80:2f:
         96:f4:10:81:5e:9e:3b:ea:a1:b9:a3:55:7d:f5:64:29:62:85:
         9f:a6:54:2a:3d:ea:0f:10:f5:80:7a:4d:e0:4c:11:d0:fa:4e:
         57:39:69:7f:6a:a0:c4:06:27:5e:3f:5a:36:54:cf:98:ea:7d:
         21:44:0d:44:80:95:9c:f9:3d:b2:98:fc:84:a1:c9:59:27:0d:
         18:35:e7:2a:2a:32:3a:45:8f:01:95:4e:36:cb:db:8e:31:20:
         bd:f5:ed:45:b5:33:a4:f6:67:b2:b9:8e:ff:7d:dd:16:1d:d0:
         b8:60:24:ef:7e:2c:55:9e:41:77:a5:7a:27:fb:e4:86:42:1c:
         92:38:d6:a1:b8:cf:4f:4d:b4:bb:a4:07:99:c8:2d:9f:b8:f0:
         37:1a:9a:2e:71:e6:e7:e8:c4:bd:94:11:38:96:37:cf:44:0b:
         11:82:0c:7f:79:a6:b8:26:51:93:3e:fa:d0:e2:6b:5f:b1:18:
         01:6a:24:76:6e:c2:7a:2a:24:50:a5:ab:03:21:b5:26:d4:92:
         55:53:fd:6a:c2:59:7b:85:90:da:03:d7:7b:df:f7:a2:f7:a5:
         3d:da:09:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:26:04 2025 by rpki-client