Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2b18e173-bef8-3544-b246-187e24f750cb.roa
File:                     2b18e173-bef8-3544-b246-187e24f750cb.roa (raw, json)
Hash identifier:          RZ2ID5n0C4B29IlmcVz7oh0VYD+ARayMZDPLvPPnMCU=
Subject key identifier:   9F:14:79:E4:9B:E8:C3:20:77:C5:97:9F:18:95:2C:39:80:D5:ED:B6
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1B1E2C3C6AD82437F4780
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2b18e173-bef8-3544-b246-187e24f750cb.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     10796
IP address blocks:        98.157.32.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:b1:e2:c3:c6:ad:82:43:7f:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=51d9f038-0446-41c2-a402-0f52efb43528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:77:57:86:35:70:bd:2c:6e:7c:eb:f8:e7:e4:
                    a3:fa:d2:c0:3f:3c:dc:a4:52:62:47:71:e5:bc:8f:
                    b9:7a:67:ae:4d:a2:c7:48:bf:b8:38:1b:59:7f:c7:
                    8f:1d:dc:ea:80:b3:17:89:a6:85:a1:0c:c1:8d:e8:
                    00:87:41:10:ec:37:46:58:3f:f9:7d:b5:f6:c7:bf:
                    2c:8f:e4:f1:41:e3:f5:d6:3d:a3:94:79:79:fb:4b:
                    1f:32:bb:72:ca:8f:47:55:2c:c6:d7:f8:bd:ed:4c:
                    83:45:56:9d:75:a8:4f:77:66:0b:84:70:c2:46:e9:
                    3b:1f:78:1f:e2:eb:4b:b8:cb:6e:98:00:c5:1b:61:
                    13:3e:17:32:1c:16:8e:0a:b5:a5:10:e3:ed:48:70:
                    db:cf:9f:54:50:57:9b:63:fc:d0:8b:86:80:62:d5:
                    d5:89:0e:51:46:96:33:93:42:09:8a:fb:2b:91:d0:
                    12:f4:ee:4a:a6:b4:ae:cb:9c:04:57:5a:9d:38:7f:
                    45:19:7b:e8:01:7c:28:18:c0:e4:54:a0:ac:67:ef:
                    0e:14:c2:66:1d:22:dd:2e:15:d3:88:85:32:c3:b2:
                    71:55:0b:03:d9:5e:40:e1:5d:f9:a1:e6:29:33:19:
                    52:28:5a:d3:a6:73:ff:f3:2f:4c:40:ed:20:5c:67:
                    a2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:14:79:E4:9B:E8:C3:20:77:C5:97:9F:18:95:2C:39:80:D5:ED:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2b18e173-bef8-3544-b246-187e24f750cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.157.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:3f:d1:dd:9f:98:c9:4c:14:9b:57:96:73:53:83:6e:73:25:
         37:d3:e3:19:69:db:ac:da:66:b3:44:87:50:9b:c5:13:e1:98:
         63:fa:77:61:ad:d2:47:7e:b5:7e:a1:4e:b1:25:d0:96:f3:3d:
         28:2a:ae:fc:45:a2:ba:b8:24:54:66:c7:11:18:e5:83:10:4f:
         6e:c7:d3:84:77:0f:f4:4c:38:ef:a0:53:71:f2:c4:a0:03:c0:
         aa:3f:76:7b:c3:09:fd:71:0b:54:f0:cf:aa:26:84:7b:6e:55:
         eb:4b:89:0d:9c:69:36:28:f2:86:95:47:bc:18:40:47:57:f9:
         ee:e9:08:50:05:5b:1d:42:d0:5a:fa:58:9c:b6:78:63:05:d1:
         ec:f0:ed:69:43:56:a2:cd:62:97:9e:98:6d:88:8f:53:2e:3e:
         58:67:9a:cc:c8:54:36:4f:f4:69:f9:2b:13:f0:70:bf:4c:20:
         f1:01:80:fa:0f:29:f0:af:e3:3f:88:f8:53:7a:34:8f:1e:57:
         39:8b:07:bd:ba:e0:4b:5e:82:e8:b6:a7:b4:3c:5b:58:4c:2b:
         7e:c5:dd:e4:05:56:4d:ae:37:7b:24:fa:cf:96:96:36:b4:b3:
         bc:5f:90:35:5b:cb:ea:70:0b:d8:2b:f0:a7:09:e7:6c:8b:59:
         0f:d4:22:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:37:52 2025 by rpki-client