Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/87b8f551-243a-3ba8-ab76-8fab6fa7f01a.roa
File:                     87b8f551-243a-3ba8-ab76-8fab6fa7f01a.roa (raw, json)
Hash identifier:          iCQaen79OtwC63pamzaqCuPw744kQpXMKlc/FzXDSJ0=
Subject key identifier:   EE:9B:EA:41:C7:43:F9:82:DB:68:87:1B:1D:96:30:B2:4F:2F:CE:E0
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1281FDBB740B2697A0C00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/87b8f551-243a-3ba8-ab76-8fab6fa7f01a.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     10796
IP address blocks:        174.100.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:28:1f:db:b7:40:b2:69:7a:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=cbbeed91-341d-4b15-a279-0eddb1889160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:55:3c:36:54:e7:fc:5f:aa:8c:04:2f:9f:51:
                    ee:db:48:cf:0f:53:36:f0:60:1e:af:14:18:fa:74:
                    2f:dc:4d:d0:de:f9:d4:7f:2c:ac:06:1e:7c:80:ab:
                    7a:14:8c:5a:b6:53:2c:55:5c:a4:9e:6a:f7:6e:00:
                    0c:12:09:09:e0:ab:47:16:82:42:2f:0a:83:74:32:
                    3f:53:b9:66:45:03:34:e3:e2:1d:5b:c2:5f:0a:78:
                    86:57:d0:b8:e3:f7:82:92:6e:55:e3:44:d1:7a:be:
                    27:bd:ab:05:0a:d9:b7:f9:7a:a1:83:82:aa:38:bb:
                    80:ad:67:da:5b:fe:fc:9e:ed:b6:ea:98:55:e4:35:
                    58:ca:57:2b:2c:ac:3f:4d:0f:e7:4b:dc:ed:91:96:
                    41:34:9b:f7:97:36:fe:4d:dd:7c:71:63:c1:2c:e3:
                    2a:1f:8f:83:d7:9b:18:c8:e4:51:a7:e3:bc:41:89:
                    88:db:26:10:3a:f8:33:7d:40:f1:db:38:1e:37:1d:
                    da:95:6b:80:c1:ab:61:37:3a:f3:2c:62:a9:19:e4:
                    ab:fa:00:3b:a5:38:89:da:e0:eb:79:50:2d:cf:93:
                    fd:70:98:6a:9f:c2:9f:8c:13:20:de:21:72:69:d0:
                    7b:04:61:a8:ff:4b:af:2b:a4:2e:4f:cc:78:46:de:
                    31:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9B:EA:41:C7:43:F9:82:DB:68:87:1B:1D:96:30:B2:4F:2F:CE:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/87b8f551-243a-3ba8-ab76-8fab6fa7f01a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.100.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:40:ed:f1:fa:d6:80:6e:6d:d0:4e:2a:b6:ae:27:99:de:bd:
         f9:33:05:9e:cf:12:cc:76:70:b6:b4:a2:d3:50:ff:b8:80:4d:
         53:c0:65:27:05:4b:e4:ad:10:42:d4:f3:d9:12:af:b4:27:05:
         ee:a5:19:93:f1:a4:b5:eb:79:34:f8:bf:97:86:c3:df:b8:03:
         bb:1d:91:12:0d:b6:98:c7:ce:17:75:fc:de:92:ba:d0:6f:92:
         8f:89:27:d0:43:2a:0c:9d:63:a3:54:d6:71:d5:a5:4a:df:80:
         29:9a:c8:e8:b8:60:ca:8c:65:e8:74:c3:db:1c:2e:d4:c7:cf:
         3c:ee:13:bb:7a:3c:5a:9f:12:18:82:65:07:04:94:7d:32:d4:
         e3:79:58:6d:51:7f:9f:00:98:3d:8e:e0:9d:83:df:04:45:6f:
         89:65:9e:14:01:ad:0c:ff:11:07:b1:18:f2:98:35:94:9d:82:
         41:3b:00:e8:b2:86:44:d0:85:f1:1a:38:d3:5a:7c:9d:ca:c9:
         71:6d:63:c5:6c:71:61:80:b1:3b:bb:43:c8:7d:49:2c:84:b6:
         8c:ee:b5:2d:34:b4:f2:52:5f:8f:39:77:c7:d8:df:e1:55:35:
         cc:69:ad:0f:58:ab:25:4d:73:de:c6:34:bb:ce:76:4a:45:2a:
         1d:1f:27:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:07:26 2025 by rpki-client