Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/742d443f-44dd-3da9-98ba-c84b2553e62a.roa
File:                     742d443f-44dd-3da9-98ba-c84b2553e62a.roa (raw, json)
Hash identifier:          1qzwVcAFwtZCVV8S/X22ZMmZboG581Z4yNGbkL4IkUE=
Subject key identifier:   FB:8D:F1:3F:85:33:49:CD:E2:04:01:0A:61:EF:B1:BE:49:54:27:B6
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1C7504D3EAF834B23AD00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/742d443f-44dd-3da9-98ba-c84b2553e62a.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     11427
IP address blocks:        67.52.222.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:c7:50:4d:3e:af:83:4b:23:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=f949e617-2801-4e32-9303-e3c0059d14b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bd:16:a9:47:6b:46:a8:35:e9:20:e5:ae:4a:
                    c7:a6:aa:62:74:df:7e:4a:d0:b8:d7:24:25:62:2e:
                    6f:28:d4:fd:67:68:f5:82:c9:51:f6:26:c4:f1:1b:
                    bb:e6:5b:f8:9b:9f:98:48:6b:df:7f:c5:ac:d6:7a:
                    f8:e7:19:dc:ce:2c:9c:d8:bd:45:33:6d:2a:7b:58:
                    4f:ab:2d:a9:e6:66:93:ac:3c:f9:b7:61:3d:b8:88:
                    e8:ef:88:d3:51:4e:e1:64:2b:d7:ee:8a:39:52:b9:
                    7d:1a:e7:8d:11:68:74:ee:4c:f6:18:66:37:e0:5e:
                    6b:60:fe:49:66:c6:71:5d:8b:ec:03:f1:19:c6:27:
                    28:83:a6:da:79:f1:90:0b:f9:2f:44:57:58:b4:d3:
                    c2:9b:9b:0d:7e:36:1c:d1:ea:56:76:f7:6f:4e:25:
                    44:d5:c9:7c:64:8a:9b:95:3b:dd:b7:33:c4:fd:b2:
                    d2:d5:07:14:9b:46:ba:df:46:b0:ff:e0:e5:03:63:
                    dc:0b:24:45:79:a8:fb:6f:02:96:4c:f3:4c:5b:cb:
                    c3:11:08:d8:74:dc:75:f9:eb:64:25:37:36:10:9f:
                    5e:c0:6e:4f:b7:73:06:2f:a1:27:ad:77:27:c4:9f:
                    e4:5a:17:1d:88:bd:f5:4c:7e:0a:8c:5a:8a:f3:94:
                    7b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8D:F1:3F:85:33:49:CD:E2:04:01:0A:61:EF:B1:BE:49:54:27:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/742d443f-44dd-3da9-98ba-c84b2553e62a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.52.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:a1:27:0d:7e:bd:29:3a:1c:6a:c0:d7:c7:7f:96:7e:e9:96:
         be:96:57:32:19:af:2c:c0:14:bb:e9:54:52:4e:e3:90:91:35:
         6e:60:9a:50:76:4a:2c:9d:d8:90:83:cd:8c:d8:f5:69:57:0d:
         8d:17:09:54:97:6b:d7:f2:26:ae:a4:47:a7:15:95:b8:24:12:
         c8:61:ef:51:68:bb:2c:b1:b8:24:9e:7c:89:f2:0f:bb:b5:e4:
         d8:dc:e8:4f:c4:f5:a1:2e:e3:90:2a:f4:1d:c8:fa:82:34:06:
         96:1a:57:1a:3f:d6:74:fe:81:bf:08:bf:a3:15:d3:57:45:28:
         fe:71:1e:d7:11:84:bd:07:d8:9b:6d:16:94:4c:e3:fb:6e:df:
         77:d9:cb:40:af:58:f7:99:cb:1c:79:a8:80:65:8c:a5:7a:8c:
         dc:21:83:55:03:a8:6d:fc:31:ea:b2:4a:99:25:2c:ae:f7:d6:
         af:90:dd:78:b0:50:d8:c0:84:d6:09:9e:dc:09:d8:a3:53:4c:
         67:95:fd:e5:ec:d2:59:5b:0e:e6:c4:06:54:a4:63:d4:d3:58:
         1a:ae:07:51:8c:cd:97:58:ce:79:3d:63:b7:6d:e2:96:42:33:
         c3:ce:47:97:bc:af:86:18:dc:4a:3a:d8:da:7a:ea:67:7a:f1:
         8a:93:3c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:25 2025 by rpki-client