Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/69e38e78-4798-30a0-a05e-2dc1485b2c28.roa
File:                     69e38e78-4798-30a0-a05e-2dc1485b2c28.roa (raw, json)
Hash identifier:          jkxbFdxz24lCcGZXhxTYdPdRfAzVP6/IBgIC649G7mM=
Subject key identifier:   98:44:57:5B:A5:0E:10:41:CF:BC:FB:9E:EA:DE:6A:5D:9E:12:0E:2C
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848D4DB974969FC975EF27E2200
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/69e38e78-4798-30a0-a05e-2dc1485b2c28.roa
Signing time:             Mon 10 Feb 2025 02:00:38 +0000
ROA not before:           Mon 10 Feb 2025 02:00:38 +0000
ROA not after:            Sun 11 May 2025 01:00:38 +0000
asID:                     11426
IP address blocks:        98.157.24.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d4:db:97:49:69:fc:97:5e:f2:7e:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 10 02:00:38 2025 GMT
            Not After : May 11 01:00:38 2025 GMT
        Subject: CN=7ce51202-fee5-486e-8b80-a6fae2d7f70d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7a:ad:aa:87:53:b2:fc:f6:29:dc:f3:02:6b:
                    32:cb:32:17:1e:d7:36:c0:e4:69:be:9f:00:d4:ae:
                    fe:80:4f:66:b3:c9:47:90:ec:66:c6:5e:46:11:99:
                    3e:5e:c4:23:e1:79:5a:79:7c:01:2a:4d:cc:36:56:
                    c3:e6:0b:f4:37:29:e7:dd:18:f2:70:2b:f1:01:96:
                    7f:e4:0f:a6:be:1d:aa:9e:a4:91:54:64:e5:4c:91:
                    00:d8:7e:30:17:01:c0:ed:27:f8:b1:e5:70:0e:29:
                    e9:3e:fd:d3:f2:6e:67:08:83:60:33:52:fb:0a:84:
                    96:5a:f4:07:ff:69:81:2e:cc:7a:00:83:19:70:1e:
                    62:ee:a2:34:6e:3e:c9:9c:6f:ef:e2:7a:a3:95:e9:
                    52:ac:bf:c0:b8:79:0c:b0:97:8d:df:6a:e4:53:c7:
                    6b:31:9f:0a:c3:35:d3:be:a1:94:fe:fd:0a:c0:24:
                    85:fa:19:b9:0a:41:8b:fe:fe:c2:62:87:7f:d7:3e:
                    25:f7:b1:c9:c0:22:12:0e:3a:e0:c4:71:f0:69:76:
                    1d:84:c9:a8:5c:fc:07:71:d8:8b:88:28:48:5a:84:
                    3a:f5:d5:95:34:5d:bd:72:97:0e:3d:69:95:31:4e:
                    dd:60:75:57:19:39:3a:51:aa:0c:17:55:5b:be:08:
                    01:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:44:57:5B:A5:0E:10:41:CF:BC:FB:9E:EA:DE:6A:5D:9E:12:0E:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/69e38e78-4798-30a0-a05e-2dc1485b2c28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.157.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:6a:65:fe:c8:eb:06:37:0e:83:3d:8d:8d:b8:11:da:6d:95:
         da:17:f2:c8:4a:62:11:68:39:98:7d:11:1b:73:a3:2c:07:a8:
         56:05:5b:5f:c0:38:b3:c4:92:02:fe:3b:d0:22:f1:22:90:e9:
         c7:43:aa:0d:ea:ab:e7:ef:db:46:d3:59:df:d8:e4:be:e5:c9:
         91:4a:f2:a4:c9:a3:fc:b9:7d:90:ab:49:0d:2d:a6:d5:93:9f:
         15:de:c8:3e:0f:54:8d:d4:d9:4a:e2:50:ba:b4:43:fa:b7:35:
         d2:c7:2c:2e:8c:b0:8a:7e:ab:bd:d4:a7:d9:eb:17:80:03:1d:
         48:31:91:5c:03:a7:0d:83:8d:c1:5c:f5:2c:40:45:39:a3:30:
         48:da:ec:31:f9:d2:37:89:7e:b7:81:3e:31:36:59:24:b6:1e:
         a9:4b:51:af:c1:95:66:a5:64:a5:b0:45:43:12:ff:9e:29:35:
         58:9d:54:be:3b:f2:60:d0:8b:ed:98:70:39:ae:19:33:59:64:
         cd:06:32:2e:89:90:74:78:c7:60:38:e2:d2:0a:7b:b4:34:e8:
         6f:5f:a3:4a:d9:50:38:aa:ae:49:f7:4d:2a:77:5b:7a:cf:ed:
         53:40:34:c7:9a:ff:c4:d8:c8:69:1f:59:ce:5b:7f:03:1a:2c:
         b9:a4:ee:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:31:39 2025 by rpki-client