Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d7008e77-551f-3866-87dd-b1b59ddb6702.roa
File:                     d7008e77-551f-3866-87dd-b1b59ddb6702.roa (raw, json)
Hash identifier:          qKAQD7rXpd8ZPE5T1S4GRs8GJQ7essDcrmQ3Xj67A8w=
Subject key identifier:   59:30:FE:7B:B7:DB:0F:5E:5C:89:34:8C:B1:3D:99:34:15:65:F9:B8
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1D9218B5222DE92FD3980
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d7008e77-551f-3866-87dd-b1b59ddb6702.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     397426
IP address blocks:        96.11.71.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:d9:21:8b:52:22:de:92:fd:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=58fcb2ab-1f08-485e-b0e6-75d21665398f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ec:4c:2c:96:2f:4f:d4:8b:8b:bf:c7:30:0d:
                    2b:e7:2c:f7:cb:63:8e:40:98:f4:7a:3b:c8:2f:90:
                    5c:e2:09:7b:1d:f4:b2:59:67:0f:40:7e:12:8a:75:
                    b8:5b:91:86:3a:ce:0f:ce:00:60:c3:ba:07:b2:8b:
                    08:e9:cb:94:6b:52:5d:11:a8:40:59:3b:f3:78:f4:
                    fe:57:e5:fc:8f:d9:29:ee:e4:de:95:0e:47:a5:a0:
                    c5:64:3c:d0:0b:05:ff:a0:29:b6:c3:63:3f:89:fa:
                    f0:a9:d5:6e:89:ce:51:e2:89:46:e3:8a:ff:b3:5f:
                    17:73:a5:89:7a:14:47:78:5b:f8:37:9e:7d:54:9a:
                    43:0c:76:80:e4:12:df:f3:5c:f8:01:11:08:e6:46:
                    83:7f:dd:db:7e:2e:c6:22:27:d3:4b:e5:d2:3d:1b:
                    cd:61:ec:05:83:31:7b:d0:0d:b3:be:4b:c2:81:2c:
                    96:bc:39:19:96:be:d3:26:55:59:13:06:92:6d:4c:
                    ff:4d:88:23:82:5e:d6:a1:78:b5:fc:e3:93:8c:6f:
                    3a:d0:0e:a4:17:f0:0c:35:24:70:99:fa:b2:ef:8a:
                    6c:f3:13:78:ee:8f:7d:00:f7:30:82:83:88:57:bb:
                    11:82:87:d7:7c:bc:26:a9:75:40:50:08:c9:57:bc:
                    90:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:30:FE:7B:B7:DB:0F:5E:5C:89:34:8C:B1:3D:99:34:15:65:F9:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d7008e77-551f-3866-87dd-b1b59ddb6702.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.11.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:8c:aa:da:ab:b3:f8:30:20:8b:e4:b7:6a:1e:b3:95:79:28:
         01:b5:9a:b9:86:4f:eb:62:01:69:8b:1c:69:e7:4b:5e:55:c1:
         b1:5d:2a:17:5f:52:49:0b:15:62:0d:51:ae:e1:ea:ce:b9:05:
         40:f4:66:13:a3:54:41:7e:b1:94:51:22:88:a3:38:2f:54:25:
         6f:70:c1:3c:c4:a2:f0:20:cd:51:35:56:0e:c6:f6:9f:50:ce:
         15:94:e3:34:11:e9:29:d7:c1:c7:c0:00:0e:9d:24:08:26:bb:
         8b:15:90:47:51:65:8c:49:a1:52:de:f3:4f:6a:d7:49:16:b4:
         0a:b6:46:3d:c2:cf:92:29:92:e8:b2:e8:b3:58:d2:9d:1e:59:
         50:cd:a5:b4:d8:05:75:59:a8:43:83:a3:42:9d:52:b4:2c:a4:
         85:0c:cc:ab:eb:ae:48:b7:fe:78:8d:bb:15:2d:96:0e:9a:f9:
         fc:3e:ef:25:94:cc:82:b7:f1:2b:77:d2:4c:60:08:42:95:7f:
         96:ca:f8:b7:72:d9:b1:74:1e:31:ae:ac:2b:59:68:cf:04:20:
         5b:76:2c:17:81:d4:89:07:0b:b3:0a:ce:bd:6d:8d:0d:3c:e2:
         5c:73:c2:d0:b2:88:51:38:04:a1:75:ee:64:27:2f:9f:b5:33:
         ce:c5:08:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:01:10 2025 by rpki-client