Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9b89b4e1-bb01-374a-b156-fd53a350e795.roa
File:                     9b89b4e1-bb01-374a-b156-fd53a350e795.roa (raw, json)
Hash identifier:          14K7xh0Lc5Zrnp6fobKvQcRF9g7y7AtNY/7UqXrXO2w=
Subject key identifier:   02:EA:7A:32:DE:09:69:12:F5:DD:BB:A6:79:2C:4F:E5:37:89:36:17
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D15C097878ED185DBC9E00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9b89b4e1-bb01-374a-b156-fd53a350e795.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     40715
IP address blocks:        70.61.246.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:5c:09:78:78:ed:18:5d:bc:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=42121248-4ef4-4152-aaf6-d8be474e5483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c4:46:ba:92:12:f2:4c:c7:96:de:a4:31:f4:
                    cd:9f:3d:41:42:3e:85:6f:f3:72:00:c5:b0:81:35:
                    b6:58:4f:4d:1f:fc:0e:fd:37:53:68:97:23:18:da:
                    53:f6:ff:97:84:7a:20:33:b1:6b:2e:bf:82:a4:01:
                    49:66:ba:cb:cb:3e:d5:19:96:e2:80:fb:73:81:88:
                    07:38:d9:1a:00:5a:c1:66:77:e7:4a:90:24:5b:fe:
                    6f:f0:d6:09:65:db:9c:0c:e3:a8:99:16:2d:5a:f9:
                    d7:67:c4:67:77:52:a7:d2:50:91:98:8a:ee:1f:f5:
                    d7:9e:f5:38:98:b3:1b:0c:ec:6b:1d:19:51:9c:e9:
                    80:ab:65:e3:0f:f3:7a:1d:c9:9a:8d:ac:74:2e:c9:
                    d6:7c:a6:93:ad:39:2e:c8:cb:07:51:25:a3:06:52:
                    1d:6d:bb:fd:ae:56:22:d7:38:d7:cb:01:f3:0f:c7:
                    f5:e5:93:02:bf:1e:8b:d1:34:3b:13:7d:92:a6:24:
                    8e:f7:39:b8:cb:17:8b:6c:ee:8a:f9:92:63:85:75:
                    05:3d:0b:36:6e:c9:24:67:df:d6:73:bc:50:50:f4:
                    3a:a1:62:f8:93:df:f0:c0:4e:ac:f7:10:b1:45:f2:
                    c5:b7:6b:47:4b:6c:f0:36:28:69:47:b5:6a:d3:62:
                    ff:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:EA:7A:32:DE:09:69:12:F5:DD:BB:A6:79:2C:4F:E5:37:89:36:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9b89b4e1-bb01-374a-b156-fd53a350e795.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.61.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:83:44:d1:6f:ec:f3:f7:52:a5:4e:02:97:d9:66:e2:c4:35:
         82:23:f6:fe:35:25:8b:7b:7b:ec:70:1c:44:cf:ff:df:2d:dc:
         8b:bf:aa:bb:6f:12:cc:80:88:af:ea:af:d4:a0:cf:a1:3c:0f:
         20:d5:0b:61:ab:67:1f:01:c4:f1:a3:2f:d9:81:9e:c6:37:50:
         38:95:e2:89:7f:15:36:4d:ab:b9:46:ad:e7:67:bb:56:3d:7d:
         94:4b:80:17:71:65:05:18:af:16:d7:7f:ed:93:73:0e:bf:09:
         df:32:ef:78:1f:0d:d6:20:c0:82:56:ee:c9:9b:99:4c:dc:4d:
         3d:5b:5e:b4:7c:25:8d:0f:b6:29:75:48:36:73:f7:a4:c4:95:
         1b:be:40:66:e3:bc:15:33:e2:78:70:ec:3a:b3:32:df:9b:6b:
         ff:3f:c8:41:6f:1d:6c:9c:ac:d3:a8:24:df:ba:13:91:43:f8:
         fb:27:26:27:1c:c9:85:6b:a1:e1:6e:1f:48:49:8c:48:f1:c7:
         ab:43:52:0e:90:11:9b:c0:58:f5:c5:99:96:90:82:b1:f8:bb:
         d3:8f:c8:e1:23:8f:65:68:36:40:aa:ac:41:69:fe:93:93:e6:
         15:e4:d9:98:2b:99:1d:47:56:03:24:c5:49:0b:61:c7:21:d6:
         82:87:a2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:44:42 2025 by rpki-client