Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1b6ecebb-d971-337a-a2a2-f364822a7712.roa
File:                     1b6ecebb-d971-337a-a2a2-f364822a7712.roa (raw, json)
Hash identifier:          rgYM02IRQzYi6XnsuUUuVcrQ9kMAQt4cor4AZXt95Sc=
Subject key identifier:   48:5D:B2:E6:92:AA:6B:6B:2C:F9:A8:F8:D8:0F:B6:1C:4F:6B:95:0B
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1CB22C518BDA45F17B1A0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1b6ecebb-d971-337a-a2a2-f364822a7712.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     12271
IP address blocks:        24.97.124.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:cb:22:c5:18:bd:a4:5f:17:b1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=bd0caf12-8e9a-48f2-b103-53cb6945a723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:96:90:3c:b0:65:c6:46:65:7a:70:43:0f:58:
                    e2:a6:33:eb:d4:1d:bc:4c:91:35:30:21:b2:e3:50:
                    8c:25:94:b9:ef:46:42:b3:95:74:44:ff:da:5c:60:
                    99:3f:56:44:e3:c7:e7:35:bd:e1:5d:85:31:05:a7:
                    24:8e:95:25:19:cc:62:b3:f4:3d:d2:bc:92:8c:61:
                    29:9d:06:f0:f7:cd:1b:61:88:16:2f:a5:d4:28:8d:
                    50:33:dc:71:37:96:75:17:9b:e3:3a:d5:22:a8:ce:
                    c1:4f:6b:67:dc:9b:cd:b5:f6:36:a4:b7:c5:46:5a:
                    a5:c6:67:7b:20:8a:18:16:bb:0c:73:75:fa:94:63:
                    e8:98:77:a3:ee:4e:53:6e:07:a9:fa:59:bb:42:f5:
                    da:6a:a1:79:42:63:08:ee:e4:92:ce:46:86:bf:ff:
                    15:12:4d:4a:f0:15:dc:c7:62:c4:70:dc:60:2f:e0:
                    ba:3b:d5:06:d7:36:56:0b:32:c1:1d:16:2d:69:64:
                    c0:81:87:77:53:01:1a:8a:8b:87:ae:fa:eb:a3:09:
                    e7:b2:72:ea:78:f9:d1:6f:2b:30:78:d6:aa:57:85:
                    45:7b:c6:0b:db:87:55:b3:38:ac:e5:e4:b7:3d:d5:
                    a3:26:eb:30:64:98:ef:60:73:9b:19:a7:eb:fd:0e:
                    14:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5D:B2:E6:92:AA:6B:6B:2C:F9:A8:F8:D8:0F:B6:1C:4F:6B:95:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1b6ecebb-d971-337a-a2a2-f364822a7712.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.97.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:13:fc:cd:a3:32:f6:a0:e9:19:8e:f0:a1:23:f7:be:ab:b0:
         28:18:db:7d:26:30:cd:cf:0b:7d:ac:bf:5c:6e:f2:a1:8f:cd:
         53:ff:25:cc:5d:13:48:59:b5:bf:ab:59:a5:55:5b:b8:19:0b:
         3d:2a:90:a8:4f:56:86:c8:50:2c:98:ad:b8:73:ad:99:b2:74:
         ba:81:72:f9:50:4c:fd:5c:63:3b:0c:c4:3c:cb:2e:16:60:1a:
         97:09:9e:83:f2:59:35:65:2a:49:54:b0:2c:29:14:d4:45:43:
         8d:e3:63:03:59:84:3d:ad:47:88:e8:c1:68:1a:e1:29:37:0b:
         f7:7e:09:a9:f6:8d:bd:8b:aa:43:a0:16:6c:2c:21:18:7a:72:
         3f:d0:6d:19:0c:d4:c2:44:c6:fb:f3:c8:a6:4c:56:e7:10:8b:
         52:72:f9:79:ee:46:6b:3a:e5:1f:bc:0e:da:22:16:e2:7c:6b:
         8d:db:8e:03:22:83:f9:af:e2:e9:20:d7:d0:f1:a7:75:a4:6a:
         23:51:42:3a:85:b8:e2:28:98:92:62:cd:91:7f:b7:ed:a8:73:
         54:93:31:ab:42:85:e3:4a:7d:d4:4d:94:14:f3:04:b7:f6:4b:
         9a:04:35:eb:3f:b8:1b:74:c1:6d:f6:c3:e6:2f:71:95:7a:fc:
         b6:d7:57:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:53 2025 by rpki-client