Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/23ebc0d3-0fbd-32e4-a92c-341b7e6d8ad0.roa
File:                     23ebc0d3-0fbd-32e4-a92c-341b7e6d8ad0.roa (raw, json)
Hash identifier:          eFZEzGO4UVBWhNpPtHhxE4pxXDq6AmUnPIzhhvLricw=
Subject key identifier:   4D:19:45:90:2C:2A:5C:F6:20:55:E5:19:D5:0B:8F:11:91:EC:F4:3B
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1440FCA45A9C48E3ACF00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/23ebc0d3-0fbd-32e4-a92c-341b7e6d8ad0.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     11427
IP address blocks:        67.52.216.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:44:0f:ca:45:a9:c4:8e:3a:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=297c2804-f10c-49f1-bb6d-ed7d605a5322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4e:f7:3f:05:5c:01:12:7e:a0:4e:bf:8a:ae:
                    e2:b0:58:31:3a:f4:6d:40:ec:a7:f0:27:7f:bb:17:
                    62:b4:53:e5:6b:55:03:ca:3c:0e:aa:9b:34:70:98:
                    e5:b5:08:6f:36:71:04:7d:77:24:e1:08:85:e1:aa:
                    a5:b5:4a:17:5c:d0:21:47:b8:03:97:6b:0f:fb:c7:
                    94:40:cd:89:0d:2a:75:83:b4:90:3d:0d:8e:5c:2c:
                    af:73:b5:d3:fc:12:99:cc:c7:f0:bf:64:66:d0:ac:
                    ab:d9:74:39:fe:74:4c:7b:06:bc:4c:53:b0:42:e2:
                    50:1d:3c:88:fd:41:43:b7:a0:90:a8:57:23:20:3b:
                    98:3b:e5:da:48:98:ac:61:47:6d:da:2d:42:f5:ac:
                    69:5e:54:f2:c2:9f:86:95:b3:4a:f9:bb:c6:6e:d0:
                    02:c7:ee:86:4f:4f:f9:01:62:28:f0:60:d5:0e:be:
                    c0:7b:ce:48:41:62:ee:85:9e:3f:30:a1:e1:77:23:
                    47:f1:fa:a7:03:5d:89:bc:f3:5e:89:8e:a2:ce:d7:
                    24:de:b5:85:0f:3b:af:f6:48:7b:8c:93:ae:18:01:
                    82:ad:0e:1e:bb:df:6d:88:52:a3:6d:94:55:ca:dd:
                    c6:6a:f3:e9:28:88:0d:62:f3:d4:6b:c2:4c:39:e6:
                    bd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:19:45:90:2C:2A:5C:F6:20:55:E5:19:D5:0B:8F:11:91:EC:F4:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/23ebc0d3-0fbd-32e4-a92c-341b7e6d8ad0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.52.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:dc:45:a7:6e:9b:de:c1:75:77:27:41:2a:10:fa:4f:5d:07:
         fa:4c:e8:a1:ab:a9:6a:7c:00:4e:e0:4e:ef:12:ef:31:98:3f:
         ba:e5:a5:07:03:32:59:1e:a0:0c:98:e3:b4:bf:52:63:04:58:
         0b:5c:f3:14:22:78:8a:cf:ae:4e:73:28:20:81:7a:97:ad:18:
         92:62:4d:4e:4d:26:ca:b7:6b:c0:c5:2c:59:ba:4b:e2:f8:c6:
         44:67:29:c6:a4:fb:eb:bc:dc:e5:82:e9:37:cb:dd:61:2f:4c:
         df:35:9f:6e:6f:34:d8:ee:0b:c1:62:0e:bc:35:a2:39:b2:ac:
         c6:af:da:60:47:fd:78:06:05:79:da:2d:1a:ac:7d:3d:ce:64:
         fe:74:ad:e4:8c:41:bc:0b:e5:61:75:1c:da:18:90:5b:ee:8d:
         cd:a3:cb:cc:0e:18:28:26:7b:60:a8:f1:f5:34:62:44:c4:b5:
         7a:dc:04:ff:c8:6b:eb:c7:70:95:91:26:b8:18:af:0c:1a:0e:
         d9:b4:f3:8d:b5:fc:dd:24:a2:ca:22:0f:4c:6a:c3:8f:14:35:
         e0:1c:70:23:20:90:6e:b6:26:5a:8f:1e:67:4c:2b:0b:95:84:
         a1:d2:66:d7:0f:f4:6f:9d:3f:7c:79:b3:0e:ff:38:74:3e:d6:
         06:e3:a5:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0UQPykWpxI46zwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
Mjk3YzI4MDQtZjEwYy00OWYxLWJiNmQtZWQ3ZDYwNWE1MzIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmE73PwVcARJ+oE6/iq7isFgxOvRtQOyn8Cd/
uxditFPla1UDyjwOqps0cJjltQhvNnEEfXck4QiF4aqltUoXXNAhR7gDl2sP+8eU
QM2JDSp1g7SQPQ2OXCyvc7XT/BKZzMfwv2Rm0Kyr2XQ5/nRMewa8TFOwQuJQHTyI
/UFDt6CQqFcjIDuYO+XaSJisYUdt2i1C9axpXlTywp+GlbNK+bvGbtACx+6GT0/5
AWIo8GDVDr7Ae85IQWLuhZ4/MKHhdyNH8fqnA12JvPNeiY6iztck3rWFDzuv9kh7
jJOuGAGCrQ4eu99tiFKjbZRVyt3GavPpKIgNYvPUa8JMOea9xwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE0ZRZAsKlz2IFXlGdULjxGR7PQ7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMjNlYmMwZDMtMGZiZC0z
MmU0LWE5MmMtMzQxYjdlNmQ4YWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQzTYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAETcRadum97BdXcnQSoQ+k9dB/pM6KGrqWp8AE7gTu8S7zGYP7rlpQcD
MlkeoAyY47S/UmMEWAtc8xQieIrPrk5zKCCBepetGJJiTU5NJsq3a8DFLFm6S+L4
xkRnKcak++u83OWC6TfL3WEvTN81n25vNNjuC8FiDrw1ojmyrMav2mBH/XgGBXna
LRqsfT3OZP50reSMQbwL5WF1HNoYkFvujc2jy8wOGCgme2Co8fU0YkTEtXrcBP/I
a+vHcJWRJrgYrwwaDtm08421/N0kosoiD0xqw48UNeAccCMgkG62JlqPHmdMKwuV
hKHSZtcP9G+dP3x5sw7/OHQ+1gbjpTk=
-----END CERTIFICATE-----
Generated at Wed Apr 9 13:28:04 2025 by rpki-client