Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aa8a35a1-f400-3d6c-a94d-9d12d0844309.roa
File:                     aa8a35a1-f400-3d6c-a94d-9d12d0844309.roa (raw, json)
Hash identifier:          rmKhd4f8fl5h1/pASm4yC+G0pPA52JAnEh5QfEu0zaM=
Subject key identifier:   48:90:56:AB:88:11:43:7E:81:7D:76:C7:3A:49:7C:7F:17:59:2F:2A
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1C43F55248BC4BF1F6B80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aa8a35a1-f400-3d6c-a94d-9d12d0844309.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     11427
IP address blocks:        69.23.160.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:c4:3f:55:24:8b:c4:bf:1f:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=ae39790e-936d-4475-ad33-8218646ad8ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b6:fe:1d:db:26:c7:82:3b:6e:dc:75:c2:7f:
                    ad:3f:f5:ae:f5:ad:95:8b:de:46:58:c3:d9:6a:11:
                    33:a1:9b:6d:87:2d:e2:cd:db:51:20:3b:fe:3e:6d:
                    97:4b:89:79:8a:33:4f:59:2d:4a:8a:24:e9:9f:45:
                    aa:77:06:8a:4e:9d:ea:fc:79:3d:5b:b4:57:69:79:
                    f3:20:67:3d:a8:10:1b:b3:67:21:23:ca:b6:fd:c9:
                    c7:00:78:cc:13:1c:11:65:3b:8e:42:b1:fe:c1:d7:
                    4f:61:1c:ed:6b:76:d1:1a:8e:e1:81:54:65:6d:0b:
                    fa:cc:c0:39:e1:fc:af:07:62:ca:fd:3a:b8:3c:99:
                    0a:10:f9:b0:fd:f4:2c:54:d3:8f:86:8c:1e:f4:be:
                    ac:27:06:7e:fc:99:f9:3c:54:4a:20:da:44:02:fc:
                    83:59:5f:e8:69:2c:0d:c9:7b:28:fe:07:41:f0:23:
                    05:c9:43:ae:9c:78:e6:26:17:6d:d2:c9:e2:41:b9:
                    93:7c:e5:7d:c7:ba:ca:bb:db:72:a3:c2:2c:7b:ce:
                    3d:75:60:13:d0:9f:d5:76:07:c5:62:b6:24:83:22:
                    8a:2f:b0:f9:b2:14:40:32:7c:55:12:1e:5c:7a:85:
                    af:98:87:ec:1d:0a:52:34:84:eb:7f:ad:c2:bf:c9:
                    d4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:90:56:AB:88:11:43:7E:81:7D:76:C7:3A:49:7C:7F:17:59:2F:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aa8a35a1-f400-3d6c-a94d-9d12d0844309.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.23.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:68:49:58:52:07:b2:7e:20:5c:aa:e0:67:14:34:c2:1d:96:
         4a:02:7a:7d:b6:63:78:82:dc:89:de:bc:42:83:86:95:9f:7d:
         91:94:9a:42:84:1a:8b:cd:69:91:58:ee:cf:6b:cc:fa:20:a4:
         50:e8:f1:05:05:61:03:f7:cd:08:ca:24:6b:fd:df:2c:6b:6e:
         39:c9:0d:20:51:fb:85:2d:82:ef:c1:80:25:3b:e7:19:b8:4c:
         1d:c7:dd:bb:0a:e6:f5:98:71:f2:a6:b4:fa:61:9e:3b:f5:79:
         34:d4:ff:8e:c7:a2:12:ef:39:be:af:12:fb:1c:9c:7f:5d:00:
         37:b1:81:e5:62:ee:0f:d8:7e:96:bc:57:73:0b:93:25:b6:8f:
         28:27:07:13:ad:02:a8:7c:8e:09:3a:fd:a9:7b:2f:54:00:b8:
         eb:14:21:f3:18:06:31:d7:6e:58:50:80:ad:a1:be:ca:a0:60:
         77:25:d5:a4:87:45:63:18:f0:f7:90:0f:e0:ee:1e:bd:54:7b:
         46:2b:d7:7e:68:43:a4:2c:3f:f3:ef:1d:76:fa:57:cb:6e:44:
         75:5e:a0:96:87:31:32:2f:68:10:59:d8:69:0a:36:6c:5a:4f:
         5c:95:29:14:cc:38:ac:e1:a4:04:a9:40:5f:9f:c0:df:70:0d:
         c5:6b:fd:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0cQ/VSSLxL8fa4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
YWUzOTc5MGUtOTM2ZC00NDc1LWFkMzMtODIxODY0NmFkOGNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbb+Hdsmx4I7btx1wn+tP/Wu9a2Vi95GWMPZ
ahEzoZtthy3izdtRIDv+Pm2XS4l5ijNPWS1KiiTpn0WqdwaKTp3q/Hk9W7RXaXnz
IGc9qBAbs2chI8q2/cnHAHjMExwRZTuOQrH+wddPYRzta3bRGo7hgVRlbQv6zMA5
4fyvB2LK/Tq4PJkKEPmw/fQsVNOPhowe9L6sJwZ+/Jn5PFRKINpEAvyDWV/oaSwN
yXso/gdB8CMFyUOunHjmJhdt0sniQbmTfOV9x7rKu9tyo8Ise849dWAT0J/VdgfF
YrYkgyKKL7D5shRAMnxVEh5ceoWvmIfsHQpSNITrf63Cv8nUYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEiQVquIEUN+gX12xzpJfH8XWS8qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYWE4YTM1YTEtZjQwMC0z
ZDZjLWE5NGQtOWQxMmQwODQ0MzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRRegMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIdoSVhSB7J+IFyq4GcUNMIdlkoCen22Y3iC3InevEKDhpWffZGUmkKE
GovNaZFY7s9rzPogpFDo8QUFYQP3zQjKJGv93yxrbjnJDSBR+4Utgu/BgCU75xm4
TB3H3bsK5vWYcfKmtPphnjv1eTTU/47HohLvOb6vEvscnH9dADexgeVi7g/Yfpa8
V3MLkyW2jygnBxOtAqh8jgk6/al7L1QAuOsUIfMYBjHXblhQgK2hvsqgYHcl1aSH
RWMY8PeQD+DuHr1Ue0Yr135oQ6QsP/PvHXb6V8tuRHVeoJaHMTIvaBBZ2GkKNmxa
T1yVKRTMOKzhpASpQF+fwN9wDcVr/VQ=
-----END CERTIFICATE-----
Generated at Wed Apr 9 03:00:11 2025 by rpki-client