Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/1fc49e72-4f98-3528-913d-d7b1db05a2df.roa
File:                     1fc49e72-4f98-3528-913d-d7b1db05a2df.roa (raw, json)
Hash identifier:          aAlW3uPNvMvr0tCLpWXFcQb2lJWf9BNqPuGAn/Y0M0g=
Subject key identifier:   E8:DD:C0:5F:DB:0B:9A:F6:13:90:D4:B3:00:CF:5C:2A:41:79:B3:DE
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F432858482A8FE033225880056EF493C0
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/1fc49e72-4f98-3528-913d-d7b1db05a2df.roa
Signing time:             Wed 11 Dec 2024 02:00:38 +0000
ROA not before:           Wed 11 Dec 2024 02:00:38 +0000
ROA not after:            Tue 11 Mar 2025 01:00:38 +0000
asID:                     36007
IP address blocks:        66.55.76.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2a:8f:e0:33:22:58:80:05:6e:f4:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Dec 11 02:00:38 2024 GMT
            Not After : Mar 11 01:00:38 2025 GMT
        Subject: CN=13e7e157-b14c-4492-8980-ea0f8d804246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a9:8f:87:98:b8:e1:6a:a4:22:c7:41:7c:82:
                    c2:0f:6c:ae:29:41:ef:76:2d:04:c0:97:f8:e7:95:
                    f1:58:40:a5:88:3b:c2:25:52:99:96:23:d3:1b:60:
                    77:9c:4d:77:5d:26:bd:5f:0a:f8:11:51:9c:b6:62:
                    d2:24:01:ac:c5:50:ad:ad:8a:38:d4:ed:56:26:84:
                    c7:23:d5:7b:41:4e:f2:33:71:02:e5:ed:71:ad:4d:
                    06:3a:47:d6:23:ce:2e:ac:79:d2:c9:a2:97:e1:ba:
                    f6:7f:78:93:5e:24:3e:04:2b:31:96:73:31:d3:42:
                    35:e7:be:97:f6:da:53:da:36:97:66:cb:2e:56:d6:
                    d1:c3:4f:e6:2c:cd:55:b1:da:66:0f:51:8a:14:56:
                    31:3f:4d:be:dd:51:d8:e4:d4:1d:8e:e0:0f:b2:04:
                    4d:16:68:84:3b:72:4f:3c:71:25:5b:f0:28:df:e4:
                    3c:ee:19:fa:d7:69:cb:b6:8d:05:81:4d:1d:8e:00:
                    5c:85:c8:f9:58:df:cd:c9:53:91:5b:34:a7:75:e0:
                    c6:bd:67:00:cb:10:b9:23:b9:fa:9f:00:76:29:49:
                    06:dc:07:81:64:bb:e0:d5:48:13:70:1f:20:9a:0c:
                    4a:ec:65:dd:7f:49:a8:c1:96:26:d4:53:bf:12:2f:
                    51:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DD:C0:5F:DB:0B:9A:F6:13:90:D4:B3:00:CF:5C:2A:41:79:B3:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/1fc49e72-4f98-3528-913d-d7b1db05a2df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.55.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:f6:59:de:4f:21:ae:d3:6b:ea:ec:8c:84:dc:5d:a0:c2:9e:
         e7:05:98:55:0c:f9:69:17:5c:96:0c:60:84:60:b7:55:41:f3:
         69:0c:c4:60:3f:31:02:f3:63:44:6b:2b:9c:69:40:0b:0e:b1:
         94:0b:25:83:f7:01:7e:a0:c8:f6:b5:92:01:ca:11:c7:08:16:
         4e:57:77:d1:1f:f8:72:95:d6:09:1d:56:74:d1:33:a0:7f:ae:
         21:a1:b9:0a:b1:b2:d1:1d:44:d6:e4:24:ad:46:51:e0:75:63:
         a4:d7:86:0e:66:3c:44:77:ab:09:e8:40:b8:10:76:93:28:9a:
         0f:75:2c:09:09:bf:ea:78:a5:c0:d7:8e:6f:75:ab:be:d6:f2:
         07:cd:97:a5:dd:55:77:23:04:cb:59:ef:db:63:e4:32:c6:f1:
         2d:b3:d7:fd:88:54:2a:ce:5e:10:c8:01:69:a9:18:af:72:41:
         28:a0:68:94:4e:fa:37:7a:aa:21:0d:58:d2:f1:ba:b6:67:d7:
         bb:6d:f1:9e:c8:e4:b7:48:87:ee:1a:2e:7c:c0:e6:95:1c:46:
         68:9a:70:fb:b1:d0:99:4a:56:fb:71:62:99:7e:2f:6c:55:d4:
         ce:91:21:8d:4f:bd:81:69:c9:54:c3:b3:cc:86:9f:27:2f:7e:
         b2:8c:77:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:24:31 2025 by rpki-client