Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/656d5d78-e9d0-3d46-b17a-0949a040d4d5.roa
File:                     656d5d78-e9d0-3d46-b17a-0949a040d4d5.roa (raw, json)
Hash identifier:          E6FYrhKJVo1L/cOSydQJbjOnsvLPOC+nElPsPZuYCRk=
Subject key identifier:   A1:B7:FB:27:30:56:4E:19:98:93:43:7D:FA:81:66:77:40:38:08:D7
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D12582EA0A77DFBDA4E200
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/656d5d78-e9d0-3d46-b17a-0949a040d4d5.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     8052
IP address blocks:        107.14.94.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:25:82:ea:0a:77:df:bd:a4:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=ca76e18d-1899-422f-be11-c8c60ecf4564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b8:96:41:9e:e4:45:8d:5f:e4:5e:fa:20:bd:
                    e2:5d:15:7a:da:10:01:df:b5:0d:1d:6c:97:76:e1:
                    f0:3d:a8:87:34:e6:25:77:7d:b7:cf:39:ac:e5:52:
                    d2:94:f0:55:fe:36:12:72:54:47:56:c1:00:a4:af:
                    9f:0c:4c:95:46:85:65:eb:85:20:b4:87:ba:42:b6:
                    74:5c:ba:32:b1:ad:48:27:25:1b:f6:ff:72:6d:ce:
                    44:b7:7b:b8:d2:78:1e:91:90:6a:e6:4d:ff:0c:f9:
                    ea:9e:a3:8b:51:a2:93:b2:4e:ef:b7:4b:2b:cf:8f:
                    72:76:19:c9:3b:84:f9:fb:94:b6:67:a7:68:1e:4f:
                    bd:7e:0a:b6:be:27:58:40:fa:3f:21:3c:cc:b1:bc:
                    52:f0:5d:76:63:eb:36:7b:67:e9:51:5e:54:ff:fb:
                    f2:05:ce:37:5f:5d:de:ec:ef:33:12:aa:ab:d5:09:
                    16:dc:c9:62:8c:8c:cc:1b:f7:84:03:8f:1e:d0:f2:
                    c5:b7:4b:e8:a9:a5:bd:35:6b:3f:d9:90:42:30:67:
                    ff:00:b0:1d:d0:bd:6c:99:2b:d6:77:4a:64:53:b5:
                    21:61:74:6c:15:76:fb:1b:ef:47:0a:d5:55:9f:c9:
                    b1:3a:a1:25:6a:51:f3:02:08:7d:68:61:98:07:9e:
                    d5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B7:FB:27:30:56:4E:19:98:93:43:7D:FA:81:66:77:40:38:08:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/656d5d78-e9d0-3d46-b17a-0949a040d4d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.14.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:17:d6:fa:51:d5:37:0a:67:32:37:0c:13:e4:e4:58:ef:b5:
         88:4e:d6:6c:f1:69:a5:76:be:24:f9:87:2a:e0:be:39:de:2f:
         7d:2c:bb:d5:9b:9d:27:a0:3f:75:85:63:ac:f6:a2:d8:35:30:
         f6:71:11:42:27:b0:69:e0:65:86:fe:50:d1:db:71:cc:09:7b:
         66:79:f2:79:7a:bb:c9:6f:7d:0e:70:12:ea:d7:c1:c3:cc:be:
         4b:ee:d6:bd:f6:2d:67:fa:b6:e4:3e:f7:d8:52:db:2e:14:00:
         13:a8:fb:f0:87:9e:a2:eb:be:4f:9e:3c:26:35:c1:00:32:05:
         25:e7:99:f4:74:5c:de:ef:b9:97:89:42:f8:0a:a3:a3:85:c9:
         42:e8:8d:61:df:2d:09:23:de:78:1c:17:4f:00:54:4e:21:cd:
         3e:32:87:4f:18:9b:1b:84:83:be:2d:86:f8:e5:cd:00:9d:a1:
         1a:73:9e:80:de:17:74:4a:6d:7c:8f:7e:39:3a:ad:43:50:3a:
         02:49:62:ab:bc:a7:aa:d4:6c:b1:d5:7f:dc:3f:d5:d1:d6:b2:
         0e:af:62:3b:21:68:59:bf:fe:d6:9c:22:5b:60:34:a8:f5:d7:
         4d:d4:52:23:0c:aa:cb:3c:98:19:17:46:00:2c:4e:fc:e5:e3:
         c1:71:49:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:38:57 2025 by rpki-client