Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d417445f-b0ed-3c8d-8cab-ceaf03f7d2ee.roa
File:                     d417445f-b0ed-3c8d-8cab-ceaf03f7d2ee.roa (raw, json)
Hash identifier:          uCzwLBZvQ8xs3A1L+1v2V5VfCjfFmfyKfIH+7uIrx+E=
Subject key identifier:   23:4A:59:B5:5A:11:9F:9D:BA:59:A6:E1:0F:3B:56:54:02:78:7A:B6
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1A89213C97A0133783E80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d417445f-b0ed-3c8d-8cab-ceaf03f7d2ee.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     7843
IP address blocks:        107.14.121.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:a8:92:13:c9:7a:01:33:78:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=03eda3b0-ad48-4d17-9581-ab81b882d1fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:29:eb:07:33:48:6f:3c:67:77:0d:eb:91:f2:
                    27:5e:9a:d6:91:42:a4:b5:88:39:fd:8f:90:bf:7b:
                    68:74:4e:a8:33:48:15:65:3f:18:21:f2:d9:c2:0f:
                    bc:53:66:6a:51:6c:68:5d:21:10:c3:3a:db:81:4a:
                    5e:ed:e1:f3:aa:06:68:65:4d:35:e6:76:8d:27:49:
                    a9:a8:92:2b:85:3f:7b:5d:0e:94:db:b9:f6:51:e2:
                    96:23:d0:5b:e0:e5:d9:65:e0:16:05:f8:87:93:b8:
                    84:c1:9e:bd:c1:ab:6d:11:ee:79:21:f5:db:8d:aa:
                    e6:e8:cc:97:84:4e:b0:e7:5d:1a:40:48:22:95:2a:
                    6a:43:fd:fb:e3:9c:59:ca:ed:b3:b8:32:1c:84:49:
                    17:c2:9f:f9:ed:47:b0:11:6d:1b:5e:9f:ca:d4:e3:
                    74:a3:a1:2d:b4:fb:08:1c:f3:a5:6e:33:64:f5:b5:
                    62:cb:77:56:08:4d:5c:36:91:76:55:c0:10:c2:e5:
                    f9:e8:a6:d6:2f:f1:3b:1d:9b:68:e2:e0:64:0b:83:
                    57:b1:a4:54:50:c0:9a:84:3f:97:87:25:2e:47:5b:
                    c6:1f:e4:e6:20:03:19:15:2b:2c:58:d3:36:40:95:
                    c7:32:0c:06:a4:1c:24:b8:b9:44:00:a5:a9:9f:5a:
                    bd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4A:59:B5:5A:11:9F:9D:BA:59:A6:E1:0F:3B:56:54:02:78:7A:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d417445f-b0ed-3c8d-8cab-ceaf03f7d2ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.14.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:5b:33:bd:aa:6d:50:e3:c1:c7:73:27:f2:b1:1e:93:f1:43:
         9a:57:8b:76:a8:09:b7:bc:6c:c2:f5:61:76:8a:cb:89:42:c9:
         55:49:ab:15:55:07:d9:19:42:ac:e7:1c:d8:9e:e5:48:26:16:
         fb:78:af:45:2e:bf:6c:35:36:fa:e9:40:2b:04:52:80:2e:9f:
         68:1a:32:d9:04:40:40:a1:36:25:d8:63:46:50:8f:d3:85:95:
         fb:8f:cd:e9:1b:d9:f5:ef:84:83:84:d1:93:db:5d:79:f8:c9:
         15:2d:08:7a:e3:41:32:ef:91:a6:bd:09:47:a3:78:75:e2:d5:
         97:3f:75:a1:f5:b1:1f:41:16:e2:d0:99:74:cd:91:11:e1:c8:
         95:8d:7d:ce:fc:3d:95:10:97:00:93:33:af:86:38:9f:76:3a:
         56:a6:b7:21:75:88:18:41:fc:4b:a9:b5:0f:0f:5e:d4:1c:ee:
         7f:74:e4:39:e8:54:b0:dc:59:90:81:bc:b0:65:85:82:87:de:
         a1:fa:ac:12:60:c9:0a:9d:2a:16:c5:b0:de:30:6c:f7:15:2d:
         70:b6:10:d5:04:c0:5c:59:71:65:d1:0a:bf:c0:4e:6c:4c:aa:
         fa:cf:12:15:fb:61:a0:95:84:27:5c:fd:3a:43:1c:8f:eb:31:
         a4:cd:72:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:07:24 2025 by rpki-client