Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/96abe370-66b4-3f01-a5f2-ac0d8006f9ea.roa
File:                     96abe370-66b4-3f01-a5f2-ac0d8006f9ea.roa (raw, json)
Hash identifier:          R0iL9M1kwMiAfaRjOmu2r/5UKK3YW2loVvKgKqzHBYs=
Subject key identifier:   6E:8F:A6:45:A0:9C:B0:8B:5A:20:F3:3C:92:C5:13:B5:D9:85:81:78
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1418317758B03E170FA40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/96abe370-66b4-3f01-a5f2-ac0d8006f9ea.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     11427
IP address blocks:        67.10.0.0/15 maxlen: 15
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:41:83:17:75:8b:03:e1:70:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=dcae9970-0235-49ed-a9d8-179e3379c7a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4c:10:ca:77:99:98:75:3a:c7:49:fa:de:dc:
                    c0:99:cc:5b:3f:0b:39:eb:82:55:a3:7c:8d:c9:5a:
                    6c:3d:8e:6c:30:67:ec:37:71:44:41:b1:50:87:81:
                    1d:a2:f7:b2:8b:ab:83:4d:d9:a1:9a:96:a2:d6:d1:
                    95:3e:ad:63:f5:a0:53:ca:34:00:78:a1:94:02:ff:
                    56:c6:c7:e8:dc:21:dd:25:b4:ce:be:6e:75:e7:10:
                    39:27:01:05:21:f8:2e:04:98:77:24:4e:91:24:06:
                    6e:4d:be:9d:48:7c:a8:f0:64:4c:17:3c:30:d3:49:
                    67:3f:fe:88:26:82:e7:1e:1a:b3:e5:6b:3d:34:c7:
                    95:9c:68:90:a9:a5:1d:1a:b7:5d:61:5f:ac:03:87:
                    84:0f:01:bd:7f:e2:8c:ed:eb:9a:84:f6:b3:54:a5:
                    1f:71:27:a6:bc:7f:c4:f9:6f:6a:a9:a8:80:ab:9b:
                    43:4b:a5:b2:c9:70:a7:58:04:8f:14:2c:c3:f1:82:
                    cb:72:b7:3c:c5:87:fd:75:de:cf:8e:6c:30:30:1e:
                    72:41:1e:f1:3f:7a:7a:2d:90:cd:68:8b:7f:ae:ac:
                    93:ba:e0:f0:e1:bf:b9:23:48:f1:ba:c7:70:94:92:
                    ce:41:73:9d:4d:4f:54:c0:4d:62:05:5c:21:78:ea:
                    65:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8F:A6:45:A0:9C:B0:8B:5A:20:F3:3C:92:C5:13:B5:D9:85:81:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/96abe370-66b4-3f01-a5f2-ac0d8006f9ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.10.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:64:f2:25:6a:7f:42:69:c9:e4:f8:0f:3b:fe:0b:53:ee:87:
         1b:8f:66:0b:7b:ed:f9:17:7d:ef:2a:c7:5c:c6:7f:f5:c5:e1:
         69:a0:fb:c8:95:f9:71:dd:af:09:c2:ca:ef:67:bb:26:56:d5:
         5f:de:68:f8:32:43:50:3b:e7:93:b0:de:9d:8f:42:aa:9a:25:
         dd:50:4b:92:e7:16:75:c0:4b:86:a2:09:7a:ca:a8:7d:b7:94:
         08:00:68:cb:01:b3:3f:5f:f4:27:bf:91:df:25:37:e8:c0:c4:
         3c:b6:c9:76:6b:db:98:e3:40:7f:7f:da:85:c1:01:64:9f:ff:
         70:24:c3:84:76:8e:10:00:99:e3:b7:47:52:93:78:ea:03:27:
         8d:d4:58:2a:11:f9:12:f7:36:55:d2:dc:55:ab:ed:0d:45:81:
         e4:ea:24:77:6f:92:45:20:cc:f3:5e:42:5a:1b:19:cd:9e:b1:
         e4:e0:5b:a0:2a:b9:04:df:8d:8c:80:c5:3c:28:6b:e7:00:39:
         42:cd:ba:93:cf:98:0b:c9:62:b0:72:6c:22:da:58:1e:50:f2:
         69:da:5e:7b:0e:fa:15:36:60:54:b3:d1:7f:01:45:75:74:f1:
         de:2f:8c:c2:8d:a6:90:3e:71:d8:0d:ed:bb:5d:5e:83:84:82:
         9d:84:19:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:20 2025 by rpki-client