Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1957d06b-25f5-396f-8c8e-c5728df79aa4.roa
File:                     1957d06b-25f5-396f-8c8e-c5728df79aa4.roa (raw, json)
Hash identifier:          tI9380XnlSgca6fv1VbtBRrU3dRKCY2GmJsGgjcvoho=
Subject key identifier:   CE:EB:66:A1:89:BA:57:A3:E3:51:90:3D:1A:DE:74:25:6C:ED:6B:BC
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D121DCD6B69EAB23DCD3E0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1957d06b-25f5-396f-8c8e-c5728df79aa4.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     7843
IP address blocks:        76.63.165.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:21:dc:d6:b6:9e:ab:23:dc:d3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=765b9f73-871b-4375-9854-90511e5d3bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fb:09:b3:d2:68:0f:b7:14:ff:1c:61:3b:66:
                    73:75:86:00:2e:41:ae:b3:4c:5e:43:a5:d6:20:9d:
                    05:64:77:cb:58:67:dc:ac:41:ad:4c:c5:47:ff:40:
                    eb:22:ce:53:11:27:d9:52:7b:5c:e6:f9:4f:7b:05:
                    16:cc:ff:39:3f:42:73:18:84:18:7b:de:33:cb:51:
                    09:37:49:ef:e9:49:bf:36:c4:fb:f3:45:aa:d4:c3:
                    d9:75:07:6a:aa:10:c8:aa:06:66:5d:97:93:24:05:
                    f4:3d:16:79:87:00:a0:15:2c:da:16:34:69:84:94:
                    f4:74:f4:a8:ca:d5:ad:d6:cb:0e:8d:4c:a8:53:4d:
                    4b:74:dc:3d:27:f4:36:21:28:ad:8f:95:04:36:03:
                    34:43:5f:ff:b7:53:39:8a:a1:74:64:15:17:e5:62:
                    61:f3:8e:f3:17:fd:0d:8c:da:74:f7:e8:c8:63:f2:
                    99:4f:83:69:72:89:5d:3a:9e:0b:fc:91:67:5f:66:
                    f8:6e:1d:09:4f:dd:7a:fa:99:e3:de:9d:b3:86:6d:
                    52:9d:2f:dc:cf:77:08:cf:2a:d1:92:87:b9:ad:d0:
                    a5:80:e4:47:aa:bb:79:5f:bd:c6:1d:63:9a:3f:32:
                    f5:d0:37:bf:30:e3:ee:1c:18:b8:f1:cc:67:92:2c:
                    c6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:EB:66:A1:89:BA:57:A3:E3:51:90:3D:1A:DE:74:25:6C:ED:6B:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1957d06b-25f5-396f-8c8e-c5728df79aa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.63.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:b1:4e:b6:d2:d2:3e:35:c3:94:7a:eb:dd:b5:62:8d:15:94:
         79:55:27:e2:d4:42:b4:1f:0f:8c:b1:87:16:f9:79:86:b3:a1:
         74:6c:9e:90:b4:fa:96:c3:1f:1c:9b:49:26:81:09:b4:df:21:
         5b:16:1b:43:7e:04:ef:14:51:d2:b9:29:2a:5b:23:b6:59:20:
         f5:26:ef:8a:62:db:ce:e9:44:2a:8c:b4:39:84:20:60:10:ab:
         6f:a3:f3:ad:a4:ab:6d:72:c7:58:53:27:e2:10:3b:03:bc:9c:
         00:6b:c2:24:86:9b:69:ae:8c:36:98:50:14:e0:b9:a9:b7:f0:
         5f:9b:8f:7f:68:0b:5e:da:cd:1e:7d:65:33:37:7d:df:a7:e9:
         f6:c2:43:af:ae:56:d0:6e:e4:1d:6c:c6:03:54:0b:c3:7d:3a:
         f0:54:47:e7:8e:98:d5:79:ec:2d:da:c5:52:d4:20:16:80:3f:
         e2:99:48:0a:26:9e:4f:b8:69:d2:c8:79:ac:9b:2b:11:2f:b5:
         81:40:a6:4f:7b:ae:54:8f:68:86:45:2f:7a:3f:fb:0d:27:8a:
         19:6c:b9:c6:77:82:b7:52:3a:01:fb:19:a0:47:58:d3:fd:28:
         31:ba:eb:e1:4f:3a:4b:9f:ea:46:0d:9e:c9:84:06:f8:b7:ff:
         0c:68:62:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:18:47 2025 by rpki-client