Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7eeeec95-99cf-382d-9736-ddac281319b5.roa
File:                     7eeeec95-99cf-382d-9736-ddac281319b5.roa (raw, json)
Hash identifier:          8qMXoY8j68c18Rd5jVgAGvv5VJ3IlXhCIIS9JMnchVg=
Subject key identifier:   7F:02:10:FA:09:A4:A9:03:04:1E:D5:7B:90:9E:5E:09:75:C7:9A:48
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D13069130258CBDA360B60
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7eeeec95-99cf-382d-9736-ddac281319b5.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     10796
IP address blocks:        74.143.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:30:69:13:02:58:cb:da:36:0b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=143d57a3-28d2-4715-aa68-b58b1f5f3959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4c:af:1e:f1:80:70:82:f2:f5:35:ff:99:83:
                    dc:29:60:e8:df:54:c5:93:65:35:7c:12:a2:be:1e:
                    e1:b6:a6:18:4c:10:d9:94:be:aa:7b:3d:22:12:e5:
                    a0:83:65:bf:5f:c4:94:75:6d:13:8c:fc:e9:5d:25:
                    e5:c4:ce:f7:fa:ce:2d:2f:bf:e5:4a:ca:a1:64:bb:
                    93:cf:9a:68:37:d2:46:38:05:e2:20:32:f4:c7:42:
                    45:da:b9:0e:99:c8:9e:ce:5b:df:c6:ef:48:02:f3:
                    46:34:80:35:4c:50:c6:97:c1:91:ca:25:01:0e:c4:
                    d0:14:23:c8:c6:dc:a4:6a:ee:5d:f2:90:46:1e:f7:
                    f8:b2:70:d7:e5:6a:fd:bd:10:28:e8:fc:1b:03:2f:
                    7a:76:07:65:e4:54:0b:38:9d:d3:24:cd:be:b3:c0:
                    80:ba:e7:b0:d4:84:79:3f:19:9e:6d:bc:91:18:d1:
                    08:7f:8a:56:29:18:09:04:aa:e1:7b:64:43:9d:ad:
                    5a:1d:cc:bf:ce:54:91:a2:d2:32:fd:bc:f4:be:d1:
                    60:3f:5f:1d:0b:7d:9d:2e:d5:07:3a:13:16:d7:1e:
                    a3:fc:79:da:6e:d1:ba:77:08:b3:f9:ac:0d:04:cf:
                    97:18:a7:87:2c:73:83:0b:34:07:bd:43:dc:c1:46:
                    8e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:02:10:FA:09:A4:A9:03:04:1E:D5:7B:90:9E:5E:09:75:C7:9A:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7eeeec95-99cf-382d-9736-ddac281319b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.143.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:7e:63:54:16:94:5a:72:9f:d4:21:bf:68:cf:c3:25:66:99:
         f5:bc:20:79:a6:e9:a7:2d:f2:12:55:eb:84:90:d0:c4:b4:17:
         e8:f1:20:2d:99:6f:88:50:8c:c9:eb:1b:a0:97:30:a0:94:57:
         c7:21:90:98:a3:61:d9:2b:a3:b7:4f:36:df:7e:74:93:86:28:
         5f:7f:02:fa:ed:fe:ae:d8:73:ce:72:51:9d:f9:25:4d:be:7e:
         62:0d:83:c9:0f:15:54:6f:e2:f6:a6:b8:3b:89:b1:32:22:67:
         8b:6d:52:8d:8e:29:5b:1e:a4:98:c6:82:90:04:28:2a:ea:ed:
         3a:99:3b:66:09:f2:27:31:b5:4a:f8:9b:14:61:a0:77:cf:2f:
         7c:57:ee:30:6f:bb:92:f3:ff:a9:0d:ae:8c:bf:09:04:9f:07:
         78:9a:d1:fd:5a:35:42:8b:1a:a1:f8:af:8d:e3:8a:79:33:d0:
         73:4a:7f:9c:62:44:55:64:02:fa:db:af:e7:b4:ba:db:c6:08:
         06:cd:92:a9:af:2c:46:51:82:58:64:0e:d8:69:a2:52:86:24:
         c3:c6:0e:04:8f:4a:84:17:83:47:b1:49:1e:2f:b4:48:20:9f:
         98:ed:f2:87:20:1a:6c:8c:d6:0e:ab:e1:19:b8:c9:70:4f:ae:
         be:dd:3a:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0TBpEwJYy9o2C2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
MTQzZDU3YTMtMjhkMi00NzE1LWFhNjgtYjU4YjFmNWYzOTU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEyvHvGAcILy9TX/mYPcKWDo31TFk2U1fBKi
vh7htqYYTBDZlL6qez0iEuWgg2W/X8SUdW0TjPzpXSXlxM73+s4tL7/lSsqhZLuT
z5poN9JGOAXiIDL0x0JF2rkOmciezlvfxu9IAvNGNIA1TFDGl8GRyiUBDsTQFCPI
xtykau5d8pBGHvf4snDX5Wr9vRAo6PwbAy96dgdl5FQLOJ3TJM2+s8CAuuew1IR5
PxmebbyRGNEIf4pWKRgJBKrhe2RDna1aHcy/zlSRotIy/bz0vtFgP18dC32dLtUH
OhMW1x6j/HnabtG6dwiz+awNBM+XGKeHLHODCzQHvUPcwUaOFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH8CEPoJpKkDBB7Ve5CeXgl1x5pIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvN2VlZWVjOTUtOTljZi0z
ODJkLTk3MzYtZGRhYzI4MTMxOWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASo8PMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEN+Y1QWlFpyn9Qhv2jPwyVmmfW8IHmm6act8hJV64SQ0MS0F+jxIC2Z
b4hQjMnrG6CXMKCUV8chkJijYdkro7dPNt9+dJOGKF9/Avrt/q7Yc85yUZ35JU2+
fmINg8kPFVRv4vamuDuJsTIiZ4ttUo2OKVsepJjGgpAEKCrq7TqZO2YJ8icxtUr4
mxRhoHfPL3xX7jBvu5Lz/6kNroy/CQSfB3ia0f1aNUKLGqH4r43jinkz0HNKf5xi
RFVkAvrbr+e0utvGCAbNkqmvLEZRglhkDthpolKGJMPGDgSPSoQXg0exSR4vtEgg
n5jt8ocgGmyM1g6r4Rm4yXBPrr7dOlo=
-----END CERTIFICATE-----