Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/da9d5e8c-b0e7-3cf2-bdda-e86ceb4289c7.roa
File:                     da9d5e8c-b0e7-3cf2-bdda-e86ceb4289c7.roa (raw, json)
Hash identifier:          XgntEOcMEabixDDv1bBajXsGVkXhmPfmYXLfBb2Z3VY=
Subject key identifier:   2B:E7:BB:DC:B6:F7:7B:E0:FF:0F:8E:F2:E8:22:92:3C:02:6F:6D:62
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D15C14D37E11D6750ABC60
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/da9d5e8c-b0e7-3cf2-bdda-e86ceb4289c7.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     40715
IP address blocks:        74.219.154.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:5c:14:d3:7e:11:d6:75:0a:bc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=772749e2-9ae7-4e2f-84cf-06bacf59d505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a3:ef:4e:a3:1e:6d:85:0f:17:3f:c1:4d:0c:
                    2e:af:22:1c:e8:c6:e6:20:20:47:1a:8b:fa:86:37:
                    7e:57:55:be:98:4c:e8:e4:41:5f:3b:1d:20:ba:34:
                    8a:cd:c0:bc:63:4a:0c:fa:97:da:29:d6:00:56:95:
                    69:52:b5:42:5b:3d:ab:37:6f:56:39:8b:3d:0a:9d:
                    9e:c6:86:19:f6:b1:fa:6c:e6:6b:a9:9d:bb:50:64:
                    cc:89:12:a9:18:fe:8b:73:ae:cf:ad:e1:6a:c2:64:
                    39:ce:6a:1b:ee:f9:8e:6c:b4:f0:63:d3:c1:80:bf:
                    f7:f8:86:a6:d3:a1:3a:3a:85:26:c5:0c:9f:60:08:
                    1a:26:7c:e0:22:5d:5c:d4:33:d5:77:0b:6d:f2:62:
                    7e:6c:34:d4:30:d1:7c:ea:83:f7:f7:1b:3d:37:70:
                    fd:1f:d1:02:d8:b9:97:25:88:d2:0f:00:e8:22:1e:
                    d7:b1:09:62:74:2f:0a:dc:5a:0a:21:70:7f:56:52:
                    35:54:3f:66:68:59:97:42:c2:0c:e3:05:ae:86:d5:
                    b9:b6:df:33:73:48:fb:d5:e6:da:5a:26:44:99:54:
                    8f:de:58:ce:7d:63:fc:8a:78:df:2f:4a:07:82:ac:
                    94:4e:68:c8:56:3f:78:b8:46:e9:57:63:99:72:c8:
                    1a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E7:BB:DC:B6:F7:7B:E0:FF:0F:8E:F2:E8:22:92:3C:02:6F:6D:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/da9d5e8c-b0e7-3cf2-bdda-e86ceb4289c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.219.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:9a:c4:ef:15:61:08:75:c3:11:4a:6a:24:0f:e7:6d:14:d5:
         76:79:1c:f5:11:a3:22:9d:41:d3:fa:bc:2d:cc:84:1f:5c:3c:
         46:b4:99:3c:d3:d0:e2:1c:ab:d7:44:f9:db:ac:ee:76:8e:0b:
         87:d1:a5:3e:e2:74:c1:cf:4a:59:bb:c1:a3:ed:d6:0a:99:ed:
         71:15:66:ca:e4:4b:66:ec:bc:80:10:c9:62:6f:39:6f:39:34:
         a3:a7:7e:23:5d:93:a0:0d:0d:30:71:7d:3e:9a:e3:94:55:79:
         39:fe:0e:d0:71:bc:49:34:1a:6a:f2:c9:55:d1:0f:bf:cd:2e:
         f8:0d:89:3d:1c:0b:35:5f:d7:c2:e4:8c:9b:3b:bb:d9:ae:3f:
         c8:f1:85:f1:30:2a:7d:4d:65:5f:e9:a9:e2:4b:37:a6:c0:44:
         62:67:b0:44:2c:55:7c:b1:1d:16:38:81:7f:1d:a8:25:05:5f:
         29:2e:4d:54:36:82:0a:28:56:e7:34:09:c0:00:da:12:30:30:
         ef:17:92:e1:92:f5:16:26:5b:ef:fe:84:80:a8:72:bc:7f:bc:
         fd:fa:d9:bd:cd:6c:0c:cf:05:6e:e5:a7:4f:1f:06:83:fc:39:
         6a:1f:9e:ed:c9:e0:dc:a4:79:d0:a0:18:9b:f2:ad:2d:e7:29:
         33:e1:ad:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:28:08 2025 by rpki-client