Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3b1e794a-a82f-3b6a-9420-7832b3ce9290.roa
File:                     3b1e794a-a82f-3b6a-9420-7832b3ce9290.roa (raw, json)
Hash identifier:          vkhivy4cQQ4WKs77rY1/5+av4NPB9qWKV9XgiPORpkw=
Subject key identifier:   C5:C2:74:72:02:8A:23:0D:4C:2E:D6:97:8B:60:B7:BD:EA:6C:54:3D
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1AD3DEC51AD1EA8101F58
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3b1e794a-a82f-3b6a-9420-7832b3ce9290.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     10796
IP address blocks:        184.55.128.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:ad:3d:ec:51:ad:1e:a8:10:1f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=7428afce-116c-44c0-a7c5-6278cbae6e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9c:64:e4:ef:b3:65:bc:53:49:e9:99:19:10:
                    a9:eb:85:76:5e:b8:6c:4a:5d:37:d8:de:c6:4e:b4:
                    80:d9:a4:47:4b:20:ca:88:38:e0:11:86:38:3d:82:
                    68:1f:41:53:41:b3:39:11:55:1e:c5:86:11:ac:3e:
                    a2:c8:1b:80:f4:26:f1:78:0f:7c:bf:53:16:70:1c:
                    a5:60:b7:61:dd:7c:f1:cf:28:b0:20:67:bd:a4:21:
                    02:92:8a:9e:28:a2:09:41:78:85:98:be:fa:b5:d3:
                    d2:63:1d:ed:9d:b8:c1:ab:18:37:0c:96:c7:64:f1:
                    02:f9:34:dd:06:41:ec:56:2c:55:d4:9f:73:fd:00:
                    58:ce:f0:24:d1:ae:05:60:df:e9:e8:86:8c:3f:be:
                    2d:74:bb:e5:96:43:9b:2b:d0:85:0c:85:64:d4:88:
                    4c:4e:2a:05:76:ae:e0:2f:b1:46:27:b8:ab:c1:d8:
                    52:91:6d:ba:14:a1:25:14:b4:5f:ec:d3:fb:cb:7e:
                    a6:52:dd:a1:dd:6e:0c:09:f7:e5:c9:fc:1c:f3:34:
                    fe:b2:39:46:ed:7f:44:38:96:fe:44:3e:50:e6:56:
                    1d:e4:66:ee:04:9a:9d:6d:35:fa:80:d6:72:1b:75:
                    17:a8:a0:d8:af:bc:cd:92:1d:35:34:22:88:64:b7:
                    00:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C2:74:72:02:8A:23:0D:4C:2E:D6:97:8B:60:B7:BD:EA:6C:54:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3b1e794a-a82f-3b6a-9420-7832b3ce9290.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.55.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:cd:73:4f:e9:26:a6:07:5e:b8:3b:9e:6f:cc:03:2d:65:64:
         21:14:15:05:3a:83:d1:56:73:8b:cf:db:ab:98:f2:dc:18:b9:
         9e:b1:cc:ca:98:9f:6a:e2:b5:69:49:38:32:64:58:1b:40:2b:
         13:a8:fa:2f:40:36:e0:04:2d:5d:1a:ef:f0:c4:17:7a:d3:26:
         6c:8b:d0:d3:c9:87:ce:1c:29:00:03:c8:0d:a4:0a:c7:9a:59:
         cb:39:25:0d:25:d6:b8:ad:0c:e3:70:3e:77:89:99:c9:cd:98:
         92:61:11:cd:0b:5f:f4:15:3f:9d:1b:3d:1e:5c:14:0f:91:17:
         53:a0:f5:4b:9b:f7:0b:b3:fb:b0:b6:d4:2f:4e:0e:0b:78:27:
         c7:b2:bd:af:06:6c:9f:22:b0:13:48:57:df:24:e2:4b:14:5a:
         b6:3c:bc:36:35:74:02:f4:81:ac:b7:b8:99:0b:3c:ad:89:e5:
         45:a0:57:9d:64:76:34:5a:d5:ce:a1:5b:3f:7f:f7:05:aa:54:
         27:df:c9:40:5f:eb:5f:4e:ed:fd:9e:87:ee:70:a5:30:2b:9a:
         52:6c:e3:67:67:a7:0c:cb:9f:d8:35:81:85:42:9d:87:20:51:
         58:26:cb:bf:c0:c3:4b:59:c1:9e:35:31:e6:84:c5:57:f6:b2:
         04:6e:c7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:08:33 2025 by rpki-client