Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/eeac1dd6-c17e-3913-ab67-ed89c21adfe2.roa
File:                     eeac1dd6-c17e-3913-ab67-ed89c21adfe2.roa (raw, json)
Hash identifier:          nXSxFVicAU/WP7Zxy3bFMWWC6KLKjJX/TmeohDMXgms=
Subject key identifier:   74:61:A2:07:ED:12:51:5A:15:60:FA:F2:F9:AF:B7:5E:D3:20:AC:9D
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1D0D84C1ADB7931225780
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/eeac1dd6-c17e-3913-ab67-ed89c21adfe2.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20001
IP address blocks:        67.49.128.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:d0:d8:4c:1a:db:79:31:22:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=b762d196-a1da-4345-a7d2-98b5bb2d87d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:79:ea:1e:d5:c1:33:f0:8e:27:96:61:d5:4a:
                    96:27:0f:fd:56:1c:61:18:df:33:85:5a:c8:b4:b0:
                    b6:e6:1d:65:a7:86:ab:e2:6f:db:0e:10:be:21:b4:
                    47:c0:b7:eb:d0:8d:f6:25:66:31:cf:b5:81:d9:8f:
                    88:25:4e:a7:0d:ec:37:8c:c8:fd:6a:f3:5e:ca:7f:
                    48:73:a3:59:f2:0e:16:9d:9b:35:13:1c:9b:2d:ad:
                    30:9b:d3:74:9a:c1:89:3e:9d:b4:e9:f0:56:0b:da:
                    b5:ca:3d:ad:5e:f0:7c:b1:ae:bf:7d:aa:8f:91:df:
                    2d:0a:ed:d7:8a:c5:2e:dd:ce:18:d1:a8:00:34:89:
                    d4:a2:a8:5e:a5:ff:08:33:75:27:21:35:3a:e9:6d:
                    07:50:11:81:51:fe:c5:83:1c:67:58:ed:25:15:f6:
                    7c:2e:87:24:af:2f:cb:96:ba:51:15:68:1b:49:ea:
                    25:5a:10:32:74:d7:0b:ce:53:a9:e5:fb:15:fa:04:
                    d3:43:1b:f4:e0:b2:d3:72:aa:1d:a7:d6:29:75:bb:
                    35:c1:43:5d:56:f2:da:e9:00:39:39:fe:d2:5e:14:
                    70:66:64:60:69:1c:b9:22:8b:4f:30:05:be:f6:19:
                    f6:e7:05:c5:24:a5:fe:26:df:af:ca:be:7e:2f:6c:
                    eb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:61:A2:07:ED:12:51:5A:15:60:FA:F2:F9:AF:B7:5E:D3:20:AC:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/eeac1dd6-c17e-3913-ab67-ed89c21adfe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.49.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:a6:cc:55:9f:18:11:8a:13:dd:30:08:f7:6c:5c:3a:16:47:
         28:35:9d:0b:03:0b:07:6c:21:9f:78:1c:66:59:f3:9a:20:e6:
         7d:eb:f2:2b:e8:54:69:39:c6:9b:ab:bb:44:0b:a9:9e:e4:3e:
         a4:e0:9e:d3:d7:cd:3e:ec:c0:d4:6e:f7:ea:28:c4:8a:c1:52:
         6a:28:a4:11:4c:50:df:8d:b8:34:e4:2e:e2:57:73:85:5a:55:
         0c:ab:7b:58:05:e9:a7:43:da:5d:0d:73:38:56:ea:9b:3b:43:
         84:25:52:6d:b4:d0:62:09:15:0d:87:b6:ae:15:be:c4:7a:75:
         36:dd:6f:b8:c2:d7:cb:e3:ff:f7:65:64:cc:3b:23:c6:16:c9:
         e8:c8:f5:9f:fd:97:9f:eb:57:fc:32:ec:ea:44:3e:de:15:16:
         eb:b8:56:de:c7:da:fb:40:d5:c4:49:b7:eb:b5:50:37:3b:44:
         8d:93:b8:fc:fa:fa:ef:ed:31:b3:7a:96:28:50:7e:4a:6c:fe:
         6d:36:78:6f:35:5c:11:57:88:7e:3b:75:34:dc:4a:d0:6b:04:
         1d:88:fd:2d:0d:7e:92:a3:69:37:3a:f0:52:c1:51:87:d3:49:
         40:43:57:58:f9:a2:a7:fc:3d:4f:6b:ce:81:19:ab:66:7c:0d:
         90:27:ff:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:42:30 2025 by rpki-client