Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6d283250-512c-3e85-8685-7b83d5940971.roa
File:                     6d283250-512c-3e85-8685-7b83d5940971.roa (raw, json)
Hash identifier:          8EQmFaUh6+0ghCAtxNm+urH76o8JHPH8MtIilPgKV+A=
Subject key identifier:   BF:6B:44:A3:BE:CC:C9:77:D2:73:82:6C:BE:48:BB:97:98:55:8F:42
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1C8A3182DFA7762EFC580
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6d283250-512c-3e85-8685-7b83d5940971.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     11427
IP address blocks:        67.48.128.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:c8:a3:18:2d:fa:77:62:ef:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=94894678-f23e-4404-9501-438794d0ac1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a8:be:8b:a6:8a:9d:5b:94:45:a9:c9:7c:42:
                    ae:3f:72:ed:c9:84:ee:61:7e:46:7a:30:1c:52:62:
                    5f:a2:61:ba:74:62:0f:d5:c6:11:eb:b2:c4:1e:11:
                    4b:7c:c5:b9:d3:88:34:b5:5b:53:95:cc:9b:ef:ff:
                    89:06:e9:7b:d2:c0:81:6f:19:a5:13:f0:8b:91:18:
                    e6:02:94:54:11:64:11:42:cb:fa:a0:40:e0:54:80:
                    48:97:45:cc:dd:6a:37:7e:6f:fe:8c:dd:e1:96:42:
                    49:81:e2:39:a0:bd:e2:a4:67:7d:39:7f:5a:cb:c7:
                    0c:50:c2:33:7d:3f:21:bb:95:5a:cb:99:85:91:02:
                    2b:b8:ab:41:20:e1:18:1f:5b:f4:50:81:b4:90:07:
                    8b:24:ee:b6:9f:d8:fe:be:75:96:a1:8a:6e:1b:d7:
                    06:3b:cf:b9:5d:9c:b7:26:76:6a:88:c8:21:ef:55:
                    9c:5a:42:8a:7c:15:3f:5c:6f:1d:3e:5e:25:70:56:
                    f5:94:af:b7:5e:50:a0:f7:78:61:d8:9c:e1:b2:2d:
                    21:b9:ac:f8:27:e1:b8:0a:c1:3c:1b:35:e2:d9:b6:
                    f1:47:b3:9f:e8:aa:e9:91:da:56:e2:72:3c:f1:73:
                    87:13:3f:55:f4:4d:a4:95:4c:1a:58:55:91:78:9c:
                    39:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6B:44:A3:BE:CC:C9:77:D2:73:82:6C:BE:48:BB:97:98:55:8F:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6d283250-512c-3e85-8685-7b83d5940971.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.48.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:bc:4f:6f:c2:a4:31:04:08:be:35:6e:0b:ac:12:be:30:f7:
         e9:77:62:88:f2:a2:32:08:e3:03:2a:74:ce:60:aa:82:ab:e3:
         6d:d9:f2:9c:bd:c7:72:cd:a4:8e:6c:32:19:09:4c:9a:34:d3:
         fe:57:d3:85:3a:20:5a:81:3d:da:38:46:75:9b:c2:8d:d1:40:
         b2:66:4f:b0:19:12:59:5e:f7:1f:1b:6a:a3:48:27:74:ef:63:
         02:bf:58:28:1d:fb:78:50:f0:46:68:20:37:c9:d3:d1:c1:58:
         31:c3:de:12:66:30:bf:05:99:68:bb:7f:20:d2:40:9f:e0:91:
         f5:3f:a2:83:35:18:b0:4c:f2:62:19:8f:05:52:34:06:d3:bf:
         c4:b8:9b:49:97:f9:53:fb:47:5d:c1:db:bb:93:61:d2:ce:5b:
         35:85:3c:cc:3e:27:99:08:90:81:1e:e5:a2:b4:b8:b3:09:c2:
         09:b2:14:96:f0:62:c1:01:c0:0c:65:6b:d6:0f:5c:a0:b7:bc:
         10:74:45:f5:e0:70:5f:13:d5:e2:28:73:af:7d:22:70:a8:bf:
         62:98:7f:80:30:eb:98:bf:ba:f6:1f:78:25:25:35:a8:aa:9e:
         34:c8:cb:f9:81:f0:1b:7f:d5:b7:93:06:63:7e:af:91:94:3a:
         7d:7b:1e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:01 2025 by rpki-client