Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1e9c86f3-90a2-309d-99be-dde17a8efba7.roa
File:                     1e9c86f3-90a2-309d-99be-dde17a8efba7.roa (raw, json)
Hash identifier:          iNHgxJDfzpW+tXhCSmTX6tmmkq0aKeBh0yczBGc71fU=
Subject key identifier:   CB:1E:CC:31:57:A8:92:1C:43:89:DD:5A:5F:7F:22:91:7B:B8:26:2A
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858495ABEE42D3823C45F691CAAC8
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1e9c86f3-90a2-309d-99be-dde17a8efba7.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     26778
IP address blocks:        67.9.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:e4:2d:38:23:c4:5f:69:1c:aa:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=bf86ef5e-957d-4645-a2b5-f4a86ad45610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e4:92:a3:bf:da:10:f9:9e:68:cb:b3:85:d3:
                    f6:e3:35:52:cb:d1:f2:ac:ac:d5:39:ea:47:b3:71:
                    25:49:c9:06:d1:6f:76:95:e8:6a:bb:06:a6:16:13:
                    5d:d0:5f:e1:e0:cb:c2:88:ae:74:8d:aa:ae:e7:d1:
                    ae:18:a0:88:f5:8d:0d:c8:95:fc:46:eb:8a:2a:fc:
                    a6:97:fc:57:f3:69:68:97:94:7e:f3:63:74:7c:af:
                    f1:7f:b6:2c:d7:ea:58:48:a8:66:54:9c:9e:ad:4d:
                    c2:47:7b:af:85:8c:91:0d:c5:d3:9d:7e:22:6b:6c:
                    bd:e7:08:90:35:e9:c9:23:be:46:6a:0a:5d:b6:4d:
                    f8:fd:66:e4:ef:23:f8:8f:09:57:4a:89:e4:0b:17:
                    1a:58:a5:b9:c3:8c:96:a9:e0:99:37:ab:e4:c9:3f:
                    44:a9:d0:b3:de:08:bb:4d:3c:cd:6d:a9:c4:6c:fb:
                    e3:04:78:0e:87:72:fa:42:58:68:a4:4f:de:67:09:
                    ee:61:ac:6e:0b:23:08:59:80:4b:5f:46:a3:5a:a0:
                    22:e1:d9:d4:75:cc:fd:cf:00:39:83:3c:b7:71:70:
                    44:d4:82:0d:77:82:3b:83:8e:a2:e7:17:b8:72:00:
                    f0:0b:2f:db:20:d5:16:27:ae:d3:f1:35:1e:36:0d:
                    f5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1E:CC:31:57:A8:92:1C:43:89:DD:5A:5F:7F:22:91:7B:B8:26:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1e9c86f3-90a2-309d-99be-dde17a8efba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.9.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:a8:46:d6:55:72:35:8b:97:c4:92:2c:d5:43:67:eb:3b:53:
         fe:f5:86:25:80:23:92:df:da:33:1f:72:2e:82:f2:b7:59:b1:
         6f:29:6f:12:ba:36:fa:b2:29:bf:bc:b4:7b:88:21:e3:e8:bb:
         09:32:93:e4:b1:60:bb:29:5d:7a:2f:6c:ff:67:13:19:0b:5d:
         2b:06:48:60:43:f6:7b:70:10:5f:76:e4:ce:ee:f6:2b:29:a9:
         cc:f7:76:a6:50:be:0a:45:1b:cb:59:e5:d2:7d:f0:7c:0f:44:
         6b:6e:7e:0d:0a:ac:10:7d:06:3b:97:1d:9d:46:b1:25:f2:94:
         b0:a2:ca:f8:30:b0:bd:07:7b:c3:b9:46:de:bd:89:b5:a4:5c:
         b7:4d:a4:af:74:ee:5f:04:c1:33:fb:e7:f9:b3:92:29:eb:ed:
         47:56:45:a1:27:8c:47:d0:6b:57:f7:72:3a:42:39:1f:0b:43:
         60:c5:99:13:ec:82:81:af:4e:35:ee:4e:d3:14:e6:49:29:95:
         0c:f5:6b:56:c8:4e:44:69:4f:d9:15:ac:c3:0b:f7:22:35:85:
         b1:8d:35:94:19:ff:f4:d3:e1:52:f7:8e:3a:6a:f5:2b:c2:09:
         45:99:05:d7:8e:ca:4d:10:e2:d2:44:fd:01:d7:0c:42:db:bd:
         88:aa:fa:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:55 2025 by rpki-client on console.sobornost.net