Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8bd2a269-a726-338e-a711-7ec1f47933d9.roa
File:                     8bd2a269-a726-338e-a711-7ec1f47933d9.roa (raw, json)
Hash identifier:          YvLOKdIpyO6RSV9npCV1ytqM1laL1sjG6TGceYRa+Nw=
Subject key identifier:   A4:B5:F5:03:DA:76:5A:B0:1D:47:BD:89:AB:B6:6A:54:78:7C:4E:BD
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D136F0614ECA798E790700
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8bd2a269-a726-338e-a711-7ec1f47933d9.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     10838
IP address blocks:        75.87.248.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:36:f0:61:4e:ca:79:8e:79:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=df452023-d073-4113-9165-60ef85843aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:99:71:71:a3:dc:09:91:d5:24:46:ee:d6:06:
                    bc:9a:80:1f:b2:61:a2:64:92:5d:84:61:d7:18:44:
                    f9:0f:0a:d0:43:bc:bf:fe:10:59:90:e0:38:ca:3f:
                    ea:18:da:20:10:83:ea:bf:7e:23:a1:9f:aa:71:fb:
                    db:e9:67:91:78:8a:dd:ec:fd:2d:41:69:c4:27:c5:
                    34:d6:9a:ef:5f:23:c7:57:d3:93:9d:b5:45:9b:ad:
                    89:fb:09:36:61:d6:be:e6:49:65:e2:62:f5:25:24:
                    f0:23:d1:f0:ac:55:1a:39:37:d3:aa:ec:ea:07:5f:
                    61:a1:97:71:b6:83:1e:68:f9:c0:82:c4:34:d8:c2:
                    d9:76:03:08:8f:a2:c5:5b:5e:0d:35:12:00:ed:a5:
                    c4:8b:15:73:54:c9:ad:41:f3:aa:9e:70:b6:c2:b8:
                    79:fc:ad:6e:06:e0:2f:8a:e5:61:01:8c:96:79:a0:
                    46:d5:55:eb:77:a3:ff:2a:11:17:35:c0:94:f0:ed:
                    2f:cd:6a:06:ae:6a:4a:66:59:54:2c:a8:eb:fc:4f:
                    1a:60:67:3b:68:a9:7d:23:7e:f7:5d:9e:2a:a5:e5:
                    41:21:f8:65:cc:1e:a1:51:25:ef:0c:48:72:ce:24:
                    59:19:87:f5:57:f7:a6:6f:b1:d7:b8:fc:c7:22:4d:
                    83:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B5:F5:03:DA:76:5A:B0:1D:47:BD:89:AB:B6:6A:54:78:7C:4E:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8bd2a269-a726-338e-a711-7ec1f47933d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.87.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:c5:a8:8c:b1:f4:13:19:d9:3c:2e:0d:16:9a:91:92:cf:de:
         b2:fe:dc:3e:16:cb:21:70:37:a8:4c:0a:04:bb:9c:3e:04:f2:
         89:2a:d4:94:99:6b:36:24:66:5d:08:d0:4c:3c:f1:98:62:51:
         cc:48:14:dd:a3:1f:ed:5c:a0:d4:c3:05:d2:ec:a8:82:60:84:
         0e:47:61:28:d2:de:ae:37:72:0d:99:e0:69:ee:18:69:60:82:
         6e:01:d8:a9:e3:a5:69:66:22:fb:43:0e:1f:d8:44:3b:88:d4:
         fa:af:74:9b:ee:47:53:4c:83:3c:a9:39:c7:60:92:71:95:64:
         14:2c:21:cb:69:bb:96:27:11:f1:67:40:29:7d:87:03:bd:fe:
         68:ba:51:de:30:44:78:af:c0:b1:72:e4:ff:fe:99:db:27:79:
         4e:d2:fc:91:fe:63:bc:9a:a4:26:2f:c0:4a:58:90:79:1a:04:
         bc:7a:3f:06:9e:23:8a:c0:3c:da:03:2d:58:53:26:93:85:d7:
         84:b1:07:4a:71:da:8d:37:5d:f2:c4:e5:59:f3:f5:48:ea:54:
         48:56:8e:36:28:6d:81:e1:a9:d4:ae:38:55:d0:9c:f3:93:17:
         dd:7d:e4:ef:e5:c1:e0:6e:a1:09:93:06:34:f1:78:8b:a3:92:
         80:c8:99:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:33:51 2025 by rpki-client