Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/949d87e7-29ac-3a5e-9e4a-fed987988e81.roa
File:                     949d87e7-29ac-3a5e-9e4a-fed987988e81.roa (raw, json)
Hash identifier:          E0WVJa6QbBefuFYXC1FDuP1IhLVKPlW09l7gcdfpdQg=
Subject key identifier:   C8:49:9F:8A:95:EA:2E:83:3E:62:0D:B8:0A:CA:B2:47:4D:C4:05:D6
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1C28B7FE76AF35EBBA600
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/949d87e7-29ac-3a5e-9e4a-fed987988e81.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     11426
IP address blocks:        70.61.192.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:c2:8b:7f:e7:6a:f3:5e:bb:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=3e9b32be-6ec4-4fd8-936d-e3f33f31a62a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6c:c2:32:84:10:5b:d2:98:ec:49:08:41:1f:
                    65:d1:ec:9d:71:a1:42:33:7a:be:6f:f5:02:e3:d8:
                    b8:58:f5:20:0f:5e:01:ba:f8:ad:5d:ed:72:c9:3f:
                    b3:0c:bc:c6:46:a4:a3:02:4b:bc:8d:c8:39:ce:8c:
                    a0:3e:12:5d:10:f6:df:73:47:96:fe:ca:57:93:36:
                    80:fd:d7:78:93:fd:09:cb:37:b1:d3:e4:c4:6a:e5:
                    c2:c2:9c:49:fa:59:84:fc:42:62:70:ac:d6:29:91:
                    59:ba:c2:ec:cd:d6:12:88:8c:ea:c8:a4:22:30:b5:
                    8f:bf:e4:e3:5a:b1:3a:f0:95:29:b6:8c:d3:f8:8d:
                    a6:72:e7:da:eb:eb:8c:1f:25:9b:12:89:c9:03:5a:
                    f7:07:c0:9b:b4:cf:4e:24:dc:88:34:0b:20:64:ec:
                    c5:b7:d4:3c:d4:9d:c1:2d:2b:aa:0a:33:8a:43:ef:
                    d3:08:2f:66:bc:6d:1c:6f:6b:d6:28:bc:2d:37:b1:
                    a6:fe:6d:af:35:ea:46:af:ba:57:43:7a:8f:fc:b7:
                    10:ff:0f:56:88:7e:cd:4a:62:79:b7:43:29:d0:e0:
                    7c:96:66:74:2e:1c:89:b5:69:17:7e:ff:74:a7:a1:
                    37:3c:a9:00:8e:88:86:03:2a:1a:fd:f2:38:67:7f:
                    37:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:49:9F:8A:95:EA:2E:83:3E:62:0D:B8:0A:CA:B2:47:4D:C4:05:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/949d87e7-29ac-3a5e-9e4a-fed987988e81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.61.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:25:e5:41:0c:4b:70:e9:22:e3:f2:b5:fa:e9:20:ba:d3:49:
         89:93:f6:de:b2:7b:9d:6d:9e:47:e7:0d:19:7a:f6:d2:ab:02:
         40:0e:06:c6:80:37:d3:06:06:8e:79:68:7e:e4:97:33:4b:4a:
         d7:89:09:92:07:82:53:f3:34:49:33:ba:27:cc:65:ce:0f:c2:
         0e:79:83:9d:8d:cd:f0:dd:da:eb:7c:4f:b8:f4:3b:04:b6:0e:
         bb:68:1e:d6:f2:c1:b2:07:89:88:88:79:b0:30:e2:0f:59:01:
         8c:3e:4f:4b:fe:ef:75:49:61:e0:17:67:5a:3f:cf:3c:a8:df:
         99:ab:18:45:7a:10:90:92:f1:09:36:87:c9:6c:61:82:aa:99:
         be:13:55:dc:39:d0:63:f8:ad:a2:b4:f8:1e:94:c3:43:f9:2d:
         bd:f9:d3:97:63:82:dd:f5:ee:19:eb:a0:34:64:59:03:6d:09:
         6f:7c:a7:f9:0c:e8:88:4a:df:15:f1:11:63:e1:70:2e:a8:55:
         9b:df:11:49:0b:2b:3c:02:84:31:7e:95:a8:e6:46:60:92:04:
         19:97:b5:43:a8:11:4b:a5:33:19:41:89:f4:27:7e:8f:b0:f0:
         1c:94:86:5b:98:86:2e:2c:3d:2c:1d:c5:50:4d:c6:69:f4:35:
         3b:39:a2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----