Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b491be7f-2482-328e-ba04-57829306cac5.roa
File:                     b491be7f-2482-328e-ba04-57829306cac5.roa (raw, json)
Hash identifier:          sIdOuOS0kTwu4kWNhtaWIJ0yaOCorvzqmcBGA5GfzpI=
Subject key identifier:   70:75:E6:32:42:80:90:D3:DD:3E:32:A9:2A:0B:7E:89:E3:3B:17:1C
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584905B6B715CF9D4138AAB612C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b491be7f-2482-328e-ba04-57829306cac5.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     16787
IP address blocks:        107.14.116.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:b7:15:cf:9d:41:38:aa:b6:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=073385f6-fd18-4b99-9715-d1abce1b606d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f5:3a:b2:56:27:a1:04:75:07:85:ce:06:c9:
                    e8:fb:0d:0f:c6:b1:e5:96:8b:a4:09:e8:17:bb:0e:
                    9f:89:09:69:c4:15:c9:c3:98:2c:6e:f9:fa:4a:88:
                    54:3c:c8:b1:64:24:3b:a1:ed:b7:99:62:93:87:61:
                    26:74:2f:fa:c6:b9:63:47:d1:fb:a7:53:cd:4d:75:
                    b3:cb:df:f6:34:28:74:bb:c3:66:ae:ea:b0:2e:38:
                    fc:46:b2:c6:e8:0a:38:28:20:37:c3:a5:1b:75:17:
                    43:be:a8:71:b8:c8:fe:00:6f:e8:89:62:91:6b:1e:
                    3a:e5:f6:dc:74:3e:10:a3:b1:56:92:d8:71:d4:11:
                    23:db:e0:bd:4e:47:8b:5b:27:35:29:80:7d:e7:f6:
                    45:2f:8f:6c:13:87:f0:8b:1a:22:12:68:2b:21:ff:
                    eb:29:30:4e:95:21:eb:8a:aa:fc:78:a0:cc:0c:79:
                    c7:26:76:5a:fb:d5:0f:5b:43:f1:97:48:7b:a6:df:
                    f1:ea:26:9d:fa:0e:17:90:ce:6c:19:1a:c3:ac:bf:
                    74:3e:b6:ba:ae:d2:5f:01:a5:98:73:b9:2f:40:93:
                    d9:97:05:77:31:16:7d:90:6e:28:45:26:46:c1:bd:
                    25:95:12:d5:30:64:c2:99:bd:cc:cf:e1:c6:ba:60:
                    1c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:75:E6:32:42:80:90:D3:DD:3E:32:A9:2A:0B:7E:89:E3:3B:17:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b491be7f-2482-328e-ba04-57829306cac5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.14.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:83:c2:75:c7:1e:50:55:fe:0c:b0:83:9e:42:e4:4e:b7:a1:
         f2:49:90:65:33:d3:b9:43:ca:3f:95:b4:0d:19:a8:39:85:19:
         0a:e2:f1:ca:7f:a4:57:d1:a0:b7:a7:63:38:b3:d7:a6:bb:88:
         b7:69:da:2b:7d:5e:fc:30:48:32:da:13:87:6d:eb:6e:a4:5a:
         1a:5f:4d:c5:9b:54:9e:63:55:c7:ab:85:f7:7b:1b:fc:ff:c3:
         ca:7a:33:87:d8:b5:e9:b0:48:45:2b:f9:58:da:79:e0:36:15:
         12:11:63:fd:b3:47:c5:a6:b1:99:35:a7:08:0b:49:7f:31:2d:
         a4:6f:26:93:98:ce:fc:f7:6a:14:da:0f:e5:39:5a:a6:41:75:
         f8:35:a7:f6:c6:4f:07:6c:29:14:c0:9d:3a:da:fc:6a:11:20:
         f9:8c:dd:27:26:eb:50:2c:92:14:6b:43:34:8b:ed:47:a0:75:
         f5:61:29:cc:73:19:d8:7f:29:4f:ec:dd:44:c2:7d:e5:58:db:
         f2:c2:ca:21:0f:e0:8f:e6:58:b2:8f:ab:9c:71:f0:4f:22:5d:
         a0:d8:48:13:87:d0:f7:de:f0:cd:b7:bf:6c:c2:ff:97:f2:4a:
         f5:8a:9c:0c:33:31:9d:a1:c0:17:23:69:56:f1:aa:ce:96:9a:
         4c:67:01:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:39:38 2025 by rpki-client