Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6f041c87-2976-3a92-aa35-7ec58c944191.roa
File:                     6f041c87-2976-3a92-aa35-7ec58c944191.roa (raw, json)
Hash identifier:          Nej8oIaUtbn+lc1m+nQ+9KEs5h9x+f9qMY5EiP4txSw=
Subject key identifier:   B4:CC:C2:03:AC:D8:94:51:24:40:5C:F7:2A:BA:E2:FD:CE:87:C5:F7
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1375CD31024CEEDD82800
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6f041c87-2976-3a92-aa35-7ec58c944191.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     10838
IP address blocks:        65.28.216.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:37:5c:d3:10:24:ce:ed:d8:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=6eb52f2e-509f-4a1f-89e8-65dfc248f279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3c:ff:90:be:59:36:9d:9e:62:36:20:46:30:
                    81:da:d9:80:e9:2b:79:fd:1c:5f:ba:1d:b7:57:c1:
                    7c:2e:1a:21:02:5a:fb:1f:70:3b:63:3a:a1:0a:1a:
                    ba:da:d9:8a:bf:72:aa:33:c2:02:c2:1c:c4:9d:c4:
                    3e:76:5e:4b:97:ff:e1:23:07:54:2d:fd:ac:bf:1a:
                    50:3d:30:1b:77:88:97:2c:cc:9c:03:5a:3e:2a:f7:
                    d7:77:14:63:8f:01:2e:02:47:2f:de:95:6f:67:21:
                    25:d4:ac:c2:e5:5d:c3:e0:2b:96:b3:8b:f8:58:18:
                    6c:e4:83:8d:cc:a1:9d:ab:a8:e6:ef:63:97:10:09:
                    2d:60:eb:a7:fb:90:23:26:82:85:f0:82:65:ae:6a:
                    ad:fc:cd:b0:36:58:5c:5d:39:4b:79:7f:40:78:78:
                    a6:45:9d:e2:72:da:fb:05:a2:c9:ce:6e:bb:f2:0b:
                    54:31:81:ea:d9:c7:51:b5:a3:af:2d:f8:81:b1:8f:
                    16:6a:29:bd:67:11:81:f6:dc:99:f0:dc:00:f6:1d:
                    c6:45:56:ae:4f:0f:e8:30:1c:fe:0b:ff:61:ab:1d:
                    89:3d:02:e8:91:60:b9:0a:a5:f0:ab:9a:42:25:c9:
                    30:3f:ae:4e:35:a0:65:31:6f:61:e3:56:13:6f:80:
                    8f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CC:C2:03:AC:D8:94:51:24:40:5C:F7:2A:BA:E2:FD:CE:87:C5:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6f041c87-2976-3a92-aa35-7ec58c944191.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.28.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:4f:71:5a:22:02:de:c1:1a:54:02:76:6c:27:1b:44:63:6b:
         69:7e:e5:01:a5:83:83:17:f9:6d:68:5e:17:d6:06:e9:ce:40:
         de:00:99:b1:9b:62:c6:0c:f8:0f:7c:aa:cc:74:4a:b2:94:cc:
         3f:94:f2:26:b2:6e:a9:39:45:dd:d2:54:71:02:05:a0:bc:c6:
         5b:0d:0f:93:97:56:08:fc:b9:09:f5:c7:87:b5:dd:0e:d4:cf:
         69:a8:65:7f:33:f6:69:5f:26:94:6a:b2:70:40:20:22:55:4e:
         56:f0:80:41:be:a8:e7:fb:b8:6a:32:3f:55:c8:90:61:dd:20:
         b9:90:79:47:c8:8f:09:16:1a:c3:be:43:97:3e:95:ac:69:49:
         12:b6:4d:c2:1b:fa:39:0d:ff:e8:84:15:ca:a4:43:6b:9c:20:
         b8:e9:f4:fd:95:00:60:36:ab:14:a7:0e:85:bc:c0:26:e2:3f:
         62:c3:02:ea:c7:6a:3d:13:d2:97:75:72:22:d8:7b:bc:03:b5:
         35:34:06:6a:01:bb:83:4c:8d:9a:7f:db:47:f5:ea:9a:ad:47:
         4f:fa:5a:d7:47:f5:e8:c2:30:15:e1:b9:d7:fe:ac:80:5d:d3:
         68:3f:95:42:ed:90:6a:ef:13:42:45:8b:11:6f:4c:a9:a6:37:
         7d:71:14:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:53:57 2025 by rpki-client