Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b651d8e3-f19b-374e-a4a7-6cab913ea68b.roa
File:                     b651d8e3-f19b-374e-a4a7-6cab913ea68b.roa (raw, json)
Hash identifier:          6T/CfBggpfIcs8dAIlDPyvu3NuP1taRfjDkLpn0ykIw=
Subject key identifier:   1F:55:BD:58:B0:B3:A0:0E:A2:27:13:91:43:D7:0D:BE:F2:38:99:A3
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D14088AA5663E6B8CFBE80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b651d8e3-f19b-374e-a4a7-6cab913ea68b.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     11426
IP address blocks:        65.184.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:40:88:aa:56:63:e6:b8:cf:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=687ba1d5-084e-4ab6-a460-efb6a73cb806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:68:f7:55:5f:73:75:d2:76:2c:ce:37:fd:66:
                    90:cf:0c:92:69:f8:32:d4:31:11:d1:f3:86:87:67:
                    ea:ae:6e:7b:c5:84:a2:d4:39:96:db:b6:eb:dc:6a:
                    c5:91:16:59:d5:97:7c:64:7c:4b:57:8d:e1:b4:17:
                    e6:d0:e9:91:d5:98:6b:b6:c2:b4:43:12:03:1c:29:
                    86:da:a2:53:4c:35:10:cd:4e:18:37:0e:31:9f:20:
                    71:54:7a:be:8e:be:9c:7e:31:6d:04:60:0a:ce:20:
                    6d:8a:1f:a6:ce:13:1e:78:bf:5c:97:b4:e2:eb:ca:
                    31:92:b2:6e:56:b9:0d:d7:6f:95:eb:64:2e:27:7b:
                    a5:74:a5:95:a2:5d:53:39:62:fe:f3:a3:05:71:08:
                    36:d5:64:47:95:c0:c0:54:2b:89:e6:c5:c9:5b:21:
                    63:ee:ae:66:f7:11:a4:25:9d:f4:0a:5a:47:08:cb:
                    17:0d:f0:1e:55:2f:d5:3d:26:c8:31:b0:f6:95:4a:
                    dc:02:45:38:12:a9:06:ef:60:ef:1f:6a:08:73:ce:
                    3f:db:15:20:4f:ef:76:ef:85:1e:7f:47:fa:81:e7:
                    1a:04:d0:13:8e:45:19:50:f0:01:59:d5:23:ce:55:
                    77:5b:35:4c:ac:3c:e9:39:df:94:6a:b8:28:5b:eb:
                    38:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:55:BD:58:B0:B3:A0:0E:A2:27:13:91:43:D7:0D:BE:F2:38:99:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b651d8e3-f19b-374e-a4a7-6cab913ea68b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.184.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:b6:62:f0:2e:51:db:cb:e3:c1:33:f9:1f:d2:25:6b:f4:36:
         62:a1:c7:32:51:d6:38:37:38:3b:4f:91:e2:06:06:ee:18:fc:
         69:ea:c7:34:2d:b9:90:8f:05:b6:0e:ad:d2:94:2f:ed:d5:f5:
         7f:54:33:87:ea:d0:f4:e1:77:66:30:05:5b:0a:d9:60:fa:0b:
         29:e7:94:e2:53:44:26:b1:f2:88:74:c7:ee:a2:05:3b:c6:89:
         8e:24:84:5e:13:b1:f7:2e:21:9a:11:66:e6:d8:7d:e9:21:ae:
         bd:d0:42:8d:14:d9:1d:a0:6f:97:e3:97:86:0a:48:02:69:39:
         75:dc:24:7b:c8:67:72:a5:60:55:e2:4e:d5:98:eb:eb:0b:a8:
         6b:c5:20:92:04:73:ff:fa:af:ea:8c:ca:92:73:43:1b:90:30:
         14:15:f8:c1:8d:4a:90:b4:b2:90:fc:ec:82:29:64:b6:9c:a8:
         51:95:14:6d:64:59:41:43:bf:3a:41:4c:39:ad:c9:b8:4c:82:
         0c:6f:2a:20:45:48:7b:b2:59:3c:d7:01:dd:9d:d9:d8:4c:b7:
         f2:41:8b:76:63:ed:30:72:7b:75:7e:89:45:c4:06:25:71:81:
         2b:fc:b5:95:6c:61:61:8d:20:68:15:7d:b1:f2:0c:69:ec:61:
         98:71:32:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:35 2025 by rpki-client