Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6ce8c1f4-e277-3d7d-afb4-30c872a23b7a.roa
File:                     6ce8c1f4-e277-3d7d-afb4-30c872a23b7a.roa (raw, json)
Hash identifier:          MqjwmuY5YLoL1m3VN2P7NbELDvSF3LfRDg2y9OOtD6s=
Subject key identifier:   4F:70:F2:E1:F4:A2:BA:77:E5:EC:BC:67:94:D2:A2:61:4D:F6:79:2F
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1B6AEA7A2440DB21A8E00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6ce8c1f4-e277-3d7d-afb4-30c872a23b7a.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     10796
IP address blocks:        24.123.64.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:b6:ae:a7:a2:44:0d:b2:1a:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=719d7f46-c243-4253-936f-9c86a61702ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:87:48:63:b5:18:d3:39:d0:bc:9b:26:4e:97:
                    2c:aa:92:9e:d1:d1:9e:c0:f5:50:ba:ee:ea:4f:67:
                    df:b8:56:ce:7a:ec:5e:0b:ef:9e:f8:22:d6:43:51:
                    0e:49:63:00:5f:43:b6:97:c4:30:aa:4e:70:ac:46:
                    af:30:3c:d2:5f:17:fe:fb:7b:50:32:3f:dd:c2:cc:
                    74:d2:62:a5:b0:a7:80:4e:38:dd:92:33:04:68:76:
                    88:17:af:fa:4a:c6:1a:47:48:71:a6:fc:a4:23:3d:
                    5b:f3:ec:94:cb:f2:32:f0:03:7a:ba:7a:d9:20:f4:
                    d6:75:2e:92:01:c2:66:25:d4:1c:af:4a:96:23:0b:
                    e4:4c:4c:89:67:32:9f:69:c7:11:19:0e:0c:58:9f:
                    f9:6e:50:e0:19:38:57:1b:46:92:df:6c:32:f6:ca:
                    78:63:e8:7e:9f:97:c3:2e:df:03:a5:b8:56:ab:f9:
                    ce:26:ee:37:8a:bf:49:38:b2:65:23:b7:e9:34:1b:
                    8f:31:ef:8b:e5:35:5b:f6:8e:5e:40:21:5c:dd:7e:
                    27:09:56:9f:2b:d7:00:63:53:bc:09:db:5d:a2:39:
                    c2:1d:17:ed:76:f7:ba:da:d6:d1:7d:cd:ae:fe:36:
                    a2:86:91:ff:52:47:df:18:f4:12:31:69:e8:97:4b:
                    ef:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:70:F2:E1:F4:A2:BA:77:E5:EC:BC:67:94:D2:A2:61:4D:F6:79:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6ce8c1f4-e277-3d7d-afb4-30c872a23b7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.123.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:c0:cb:dc:eb:e7:39:07:ee:93:7e:72:80:69:7e:06:ea:70:
         17:f9:60:97:48:15:d3:71:1a:e5:85:48:92:ff:d5:bd:40:f6:
         2a:91:44:44:94:1e:1f:d3:44:80:9b:fd:6f:d4:09:49:1d:56:
         1e:ed:a1:0f:97:f1:72:09:13:ab:9f:1d:7d:83:05:62:84:01:
         b4:f0:23:06:9a:4b:ae:33:06:3e:fe:c3:17:7e:18:d1:72:3f:
         23:fc:c9:81:3e:88:3c:84:cb:8a:70:b2:2a:21:00:6c:5b:43:
         7e:9b:ee:c5:a5:3c:0d:de:c6:5d:46:6a:42:4f:a9:2f:ae:51:
         37:a5:bc:21:63:21:19:68:f8:bb:41:07:3d:3e:49:2f:4e:d5:
         6e:01:9b:fc:ef:68:96:87:fd:b7:09:a7:60:a5:9d:e1:a0:bb:
         3c:17:d2:46:42:f9:c8:df:9f:bf:20:65:e7:c0:d8:6f:b4:f1:
         cf:5d:c2:79:83:9b:20:26:37:79:9f:ef:e0:0e:83:2e:2b:fd:
         3b:5e:3a:05:38:b7:1d:e3:3b:0d:b8:e8:1b:e3:98:f7:52:96:
         4c:75:ed:91:51:eb:cf:84:a2:74:8c:73:35:25:71:21:06:09:
         2b:b6:16:eb:d7:c1:4e:05:c7:f8:94:17:24:85:a2:cf:6b:14:
         cf:73:a9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:18:40 2025 by rpki-client