Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6b8f16f2-0990-3aa0-bd00-4ffa3bdb7255.roa
File:                     6b8f16f2-0990-3aa0-bd00-4ffa3bdb7255.roa (raw, json)
Hash identifier:          t+/3t01zd4NvilI4cNg4Hw+a6eBQ6LYJpqE9hLN6wUQ=
Subject key identifier:   C3:F3:CF:30:33:03:30:7E:CB:F2:90:2F:2B:DF:01:E3:A8:EC:EB:C3
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1351EB481D3A31F8B90E0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6b8f16f2-0990-3aa0-bd00-4ffa3bdb7255.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     10796
IP address blocks:        72.131.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:35:1e:b4:81:d3:a3:1f:8b:90:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=83742f3d-ca55-4616-b685-22bef8f2de68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:91:a1:75:b4:f3:36:7f:7b:31:f2:dd:5d:02:
                    77:42:7b:39:0f:85:08:ea:22:39:6d:53:2b:b4:3f:
                    eb:16:0f:fe:5d:59:90:60:d4:e9:71:5f:5b:53:da:
                    ff:c7:e5:8b:5e:c4:a1:cc:2f:d8:b8:11:4f:00:05:
                    e7:7f:7a:d5:03:68:9b:61:ee:d9:c3:ad:14:d9:04:
                    8d:11:6c:39:85:9e:4c:e8:c3:65:51:59:19:96:9c:
                    54:e1:35:db:ac:20:ef:58:88:05:99:2c:0f:56:d6:
                    8d:e5:f4:18:8b:e1:2e:55:ea:33:f7:92:39:80:53:
                    a8:87:af:c6:57:7b:63:b7:25:55:68:e9:20:07:bf:
                    6c:26:79:32:93:c2:62:35:fb:86:ab:e6:8d:f0:35:
                    56:22:ce:e3:eb:3e:9c:b9:86:b6:7b:bd:2f:5d:2b:
                    05:f9:a2:1c:ac:5e:ee:19:a1:f5:26:35:31:a1:79:
                    42:23:54:37:fd:2e:f6:8d:00:33:eb:a5:e7:46:97:
                    7d:de:b1:fe:9c:13:fe:05:f5:f6:21:33:b9:4e:77:
                    a6:26:d0:44:80:e5:2c:ab:7c:49:4c:34:54:d5:c2:
                    78:38:94:32:5d:d0:5e:ee:56:df:d9:1d:9e:ed:ff:
                    87:d5:4b:31:6e:c4:d1:4c:a8:10:c0:35:6b:f2:87:
                    30:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F3:CF:30:33:03:30:7E:CB:F2:90:2F:2B:DF:01:E3:A8:EC:EB:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6b8f16f2-0990-3aa0-bd00-4ffa3bdb7255.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.131.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:53:94:9c:67:0f:ae:0b:da:2b:d1:10:90:bb:2f:66:94:aa:
         6e:ba:ad:a8:a0:4e:ad:74:af:29:de:75:e5:7f:4c:48:4f:08:
         58:9d:17:2c:5e:95:cb:fc:1b:a4:5e:4f:1a:a3:df:4a:07:bf:
         84:c1:17:2c:5c:9f:93:36:67:98:6c:3a:7d:83:2f:fd:bc:51:
         6b:5e:ab:c9:c8:4c:ff:c6:09:c7:3d:9b:43:46:bc:38:27:de:
         88:0a:c8:83:ca:73:e9:a3:b8:28:94:6c:a1:bb:7a:e5:74:5e:
         7a:cd:e3:a4:55:3a:d9:97:86:e0:d9:eb:fa:13:6c:38:62:68:
         d4:56:a8:52:41:08:d5:9a:4e:85:18:6a:e9:1b:d0:22:7e:2c:
         c1:b0:a9:52:b4:dd:0d:0d:c2:c3:9c:4b:6c:63:67:9d:04:d4:
         d4:fe:40:d2:b9:ad:72:26:6c:0b:5b:6e:d6:2d:6a:04:72:98:
         19:41:15:83:9a:1f:4c:6a:ae:90:4d:0e:55:12:02:ac:83:fe:
         2e:90:8c:a5:b1:69:01:f6:97:da:9e:bc:a6:6f:84:06:3f:e0:
         10:de:93:39:ba:9c:77:fa:8a:f3:7d:cd:70:ba:2f:71:17:7a:
         11:46:fe:6a:59:dd:23:48:4c:91:36:13:2c:88:ab:c7:1e:8c:
         1b:cd:4f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:18:47 2025 by rpki-client