Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d77ca76d-8349-3a23-8e8b-8eaa620ef3d4.roa
File:                     d77ca76d-8349-3a23-8e8b-8eaa620ef3d4.roa (raw, json)
Hash identifier:          b/OjahjhNLIOllTimrxoR3lW4YPxGBeI4cvBUEuhaAA=
Subject key identifier:   23:F9:69:9E:72:0D:4E:7A:CB:CA:E7:78:96:43:5C:29:C2:33:67:B5
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1C7187205C1933D2F1A00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d77ca76d-8349-3a23-8e8b-8eaa620ef3d4.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     11427
IP address blocks:        24.242.0.0/15 maxlen: 15
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:c7:18:72:05:c1:93:3d:2f:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=3b65a5ed-91b0-4e34-b5f8-c03eaaf58b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:07:cb:5c:d2:7d:a4:f5:29:4c:cb:39:6c:47:
                    a7:96:82:d3:d4:98:cc:0d:ad:3b:53:3c:1a:29:b0:
                    99:97:6a:ad:f4:cc:98:d4:47:db:ad:63:63:30:4b:
                    79:cb:f6:fc:7e:11:25:bf:20:f2:73:2d:44:f0:4f:
                    5f:46:eb:4b:88:51:80:22:22:ca:e8:56:13:b9:7d:
                    a6:c5:f6:70:a1:d5:86:f3:a7:5c:76:b2:e0:1d:72:
                    a2:8a:69:a8:58:84:6a:19:18:51:fc:8a:47:3d:45:
                    81:f3:10:d4:5a:22:30:ff:b4:48:16:ed:5d:ad:4b:
                    08:68:0c:fe:4c:f8:86:c9:e3:01:6e:8c:83:f9:1d:
                    a8:68:f8:d7:b6:94:2a:b2:07:d7:99:96:9e:4e:7a:
                    f1:04:6e:b4:06:d0:dc:73:a9:b8:51:88:bb:44:fc:
                    95:6c:5c:3d:15:ca:f5:3b:1e:77:83:78:93:f1:3d:
                    84:d1:c8:b9:7d:8c:0c:8d:cb:4d:c0:14:f0:c9:e5:
                    43:b6:db:b7:2f:d2:92:80:2a:b3:61:b7:bd:9d:ba:
                    0c:47:f8:d1:cb:8e:fd:c9:e3:7a:82:6f:99:53:2d:
                    e1:75:74:cb:d2:40:eb:e3:30:e7:da:23:1a:a0:10:
                    83:5a:94:48:e7:62:30:d8:e4:15:83:dc:c5:46:53:
                    16:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F9:69:9E:72:0D:4E:7A:CB:CA:E7:78:96:43:5C:29:C2:33:67:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d77ca76d-8349-3a23-8e8b-8eaa620ef3d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.242.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:02:01:d2:65:40:fc:16:ca:51:0a:22:20:ff:5a:b9:63:4d:
         b8:01:64:ad:49:81:68:91:da:f5:ae:c1:6c:f1:e9:eb:35:59:
         2d:40:f0:f8:5d:95:1d:1a:bc:59:5f:b3:b3:94:6e:78:55:2b:
         aa:82:39:00:19:06:ac:54:71:8e:c5:c7:09:bd:f5:a1:b6:58:
         6d:47:08:e3:c6:6c:76:a9:57:c7:5c:1b:48:73:06:0f:ce:69:
         d6:61:85:5f:8b:5f:b6:47:38:62:97:3d:5a:a8:35:f2:8d:42:
         39:b4:2e:87:69:99:8e:f3:7b:1c:9d:10:f7:9d:17:09:d8:0f:
         db:e2:16:c5:26:07:78:94:60:58:49:82:95:55:64:ef:21:96:
         a1:6f:df:e9:a4:ee:b5:94:e7:dc:0b:6a:f0:00:f6:b6:14:3a:
         b4:f1:d3:05:bb:b4:64:8e:48:0d:85:cc:ac:10:e2:69:64:1f:
         1a:51:0d:ad:b3:f6:69:b1:3c:1e:78:43:b3:61:d4:8e:f0:0a:
         b5:c5:94:14:6a:9b:54:39:64:0c:4c:44:84:06:f9:91:c2:55:
         e9:60:50:57:07:e9:37:90:a1:cd:e7:08:26:e7:c4:af:01:a8:
         b7:ac:53:f4:20:78:9e:42:b7:cc:05:94:47:4b:f3:6b:15:76:
         1f:c1:3e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:19:57 2025 by rpki-client