Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6c6dfb4a-7123-31b8-b067-ca5904a126b7.roa
File:                     6c6dfb4a-7123-31b8-b067-ca5904a126b7.roa (raw, json)
Hash identifier:          Lh8UjxuR5essTREJeCRf4Vyu99HQI7mvFkxiXVRGoqk=
Subject key identifier:   4B:A3:25:47:D6:4C:1B:80:E1:13:56:E0:F4:1D:53:30:84:68:0B:65
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1381038FADE30B28090D0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6c6dfb4a-7123-31b8-b067-ca5904a126b7.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     11159
IP address blocks:        64.183.43.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:38:10:38:fa:de:30:b2:80:90:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=d0e48209-b0fc-4ce7-8641-ff7a50571656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:48:cf:c3:b4:81:5a:01:6b:8a:05:85:81:f4:
                    20:59:86:37:5f:fc:a7:93:cf:c8:c0:3a:26:9b:c6:
                    a3:f3:d2:9c:d5:eb:1a:23:10:03:5f:8a:16:00:ab:
                    be:c5:06:f4:1e:c0:ca:53:ce:5b:ac:6d:e2:2f:56:
                    47:75:dc:bd:19:13:5d:c6:69:98:88:4c:af:d8:da:
                    d7:05:4e:fd:0e:dc:38:a9:16:7d:8e:3e:c9:65:1d:
                    96:71:89:97:22:4e:4f:e5:9c:7d:b7:cc:2c:d4:88:
                    79:3d:66:31:91:ad:23:00:d1:9d:4b:3d:70:20:99:
                    6f:07:aa:0f:75:36:bd:8f:a7:79:ab:ef:3e:9a:ab:
                    f8:d9:32:83:cb:51:63:fa:10:c7:a4:41:ef:6d:01:
                    d7:d7:1c:b9:59:74:b8:9f:27:58:39:bd:da:26:59:
                    56:86:35:53:94:45:f1:39:17:ec:dd:35:69:72:db:
                    7b:f3:96:bd:e1:99:e7:b0:48:a2:62:ff:d0:3a:8d:
                    de:e6:39:65:65:c7:df:2d:3c:f4:de:11:62:a3:ee:
                    0d:b3:5a:94:08:3d:fa:3b:96:0e:76:3d:12:f8:f6:
                    01:2d:64:c9:8f:a0:b5:3b:d1:67:11:60:89:d5:a9:
                    67:79:e8:72:e2:81:9f:00:96:80:db:07:aa:5b:2f:
                    79:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A3:25:47:D6:4C:1B:80:E1:13:56:E0:F4:1D:53:30:84:68:0B:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6c6dfb4a-7123-31b8-b067-ca5904a126b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.183.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:8c:3c:39:a0:bb:16:55:a3:93:55:c2:68:1b:e0:91:83:f5:
         fb:86:f2:8e:30:55:96:b9:a3:d1:34:b0:95:4f:e1:eb:dd:7c:
         1f:3b:80:f0:1d:66:58:9d:fb:49:60:be:8c:87:de:49:41:82:
         7d:de:56:2a:29:f4:d9:94:3b:a2:8b:4f:9a:0c:d7:46:ea:51:
         cf:63:4f:c8:06:72:a5:4e:2f:38:22:df:9a:6f:0e:ab:0a:2f:
         3f:63:1d:2a:88:a4:9c:bd:ef:76:9c:08:2a:d8:d1:20:c4:eb:
         aa:4e:0b:c7:84:60:3e:a6:bf:cf:13:49:7c:d7:f2:bd:ea:25:
         b8:af:5d:a0:ac:a9:74:85:98:ec:93:a0:a8:22:e7:19:77:91:
         72:a4:ec:c2:71:cb:03:39:a0:cb:c4:c2:1e:08:4f:75:fd:8b:
         19:ec:e1:73:8e:89:06:87:06:45:11:9e:61:64:53:9e:0a:c9:
         a6:86:e8:05:5f:f8:bf:85:eb:97:28:b2:bb:bc:77:b7:69:9b:
         f3:aa:e1:81:04:ea:c0:fe:9d:f2:d7:66:2c:49:fb:c9:dd:7b:
         c8:23:90:bd:03:09:d3:7b:80:ee:ee:3e:98:4c:af:b0:fa:6c:
         5e:a7:ef:26:2f:09:cf:e8:e4:12:b2:cd:b8:32:f2:81:31:98:
         ce:cf:be:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:15:54 2025 by rpki-client