Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5a750554-797f-36a9-961e-4d26763c6e0a.roa
File:                     5a750554-797f-36a9-961e-4d26763c6e0a.roa (raw, json)
Hash identifier:          1bgzosD7pVCtkQH0Vq+CZ57hptsx9L83vw0XyoP+JMc=
Subject key identifier:   AA:2F:A4:A9:61:49:7C:33:40:E1:C7:45:AE:4A:A2:21:9F:F5:6E:65
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1B583ED88D45C14559B00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5a750554-797f-36a9-961e-4d26763c6e0a.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     10796
IP address blocks:        65.31.32.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:b5:83:ed:88:d4:5c:14:55:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=6ada547b-11e3-40ae-a231-b9151f590d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9e:18:2b:0e:cf:49:e1:fe:39:d0:eb:88:3c:
                    00:fc:07:0e:cb:49:e1:9c:14:40:fb:35:12:9d:89:
                    88:f9:cb:d1:7d:f0:12:ed:4a:b1:1a:55:60:3f:f8:
                    f3:65:38:97:1c:a0:38:68:8c:a4:ac:2a:f3:86:0d:
                    61:92:11:90:e2:a4:f3:88:0d:0d:12:dc:62:d2:d8:
                    5e:c3:f5:39:ad:52:85:58:fd:3a:12:88:94:3b:63:
                    36:a5:0c:c1:54:4f:b4:04:c7:cb:f7:0b:25:1b:3e:
                    6e:06:f1:84:1e:b4:8c:48:cf:52:42:3c:18:b2:b5:
                    d9:8a:e5:00:48:73:74:29:70:e4:0b:78:8f:9d:34:
                    86:9c:d9:04:b9:0b:1a:64:fa:7c:40:12:e7:3c:0e:
                    44:5a:d5:c2:a9:b2:82:14:ed:1b:20:c1:61:de:32:
                    f8:8f:c0:67:29:a5:9c:53:ae:21:0d:f0:4d:79:67:
                    84:fc:76:d0:50:fb:5e:98:22:c7:50:58:e1:3b:d1:
                    50:2b:df:a5:8f:ee:19:a6:78:35:53:c6:b4:6f:49:
                    06:b7:ab:b1:81:51:e4:71:90:41:63:83:1e:eb:f5:
                    b6:f3:61:68:5c:95:6c:4f:0e:90:d5:d2:6d:23:8b:
                    e1:b7:55:b6:3c:6f:d3:c4:de:41:9a:cc:87:1f:d5:
                    fe:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:2F:A4:A9:61:49:7C:33:40:E1:C7:45:AE:4A:A2:21:9F:F5:6E:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5a750554-797f-36a9-961e-4d26763c6e0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.31.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:12:66:a9:3c:8b:27:8e:7e:51:55:7c:13:d1:40:e5:37:be:
         eb:36:81:01:f2:0c:c5:38:26:4d:a1:36:ba:de:e1:80:67:c9:
         d7:fa:fb:f3:e7:19:ca:31:85:0e:08:8f:86:13:a4:29:d7:36:
         9d:3e:c5:27:33:46:1f:56:a4:c2:6c:7a:e5:78:92:ee:c5:9f:
         13:ee:45:97:07:94:0b:89:f4:e9:a7:da:03:f5:23:c3:85:d0:
         ac:08:d5:3f:fa:27:84:6c:50:9f:ae:0b:06:33:f0:1b:f3:d1:
         25:ab:8c:0d:e3:33:ac:4c:a6:f7:a6:a7:c7:b0:f9:0b:e8:8f:
         ee:62:eb:d0:9a:90:58:2d:a8:da:a3:25:3b:25:a7:76:e9:9d:
         1c:7f:ea:a8:1d:56:c0:ba:07:a0:d2:df:19:76:5d:e3:07:8f:
         8e:68:f4:c6:93:db:a0:8a:d8:38:85:dd:ed:ee:7f:2e:65:4b:
         d0:54:d2:96:1a:e5:fc:76:f7:86:9d:9b:bd:1b:ea:21:5c:62:
         32:95:e3:69:41:ef:43:7b:6d:ce:bf:f3:a0:56:64:08:90:99:
         5c:35:26:7e:56:80:dc:e5:b3:e0:79:7c:5c:95:bc:ec:c2:16:
         8e:07:fd:7a:fd:f2:7a:1d:02:c6:3c:6a:2c:29:3f:28:d5:8f:
         89:63:c1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:54:41 2025 by rpki-client