Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/5e80c34e-1cd1-3db4-a203-4ece44604f75.roa
File:                     5e80c34e-1cd1-3db4-a203-4ece44604f75.roa (raw, json)
Hash identifier:          WEEXwZ7SjmHW27PANPjK2JxyjQOIe0ePzzWcMmnWZCk=
Subject key identifier:   62:5C:31:CC:4A:65:42:71:01:50:F9:F6:43:25:41:84:10:61:B4:84
Certificate issuer:       /CN=0a2d75f1-8f4b-49d3-9661-209643086151
Certificate serial:       010D0C9F43285848318AAD4A7FF5D4D0E10FCF80
Authority key identifier: 0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/5e80c34e-1cd1-3db4-a203-4ece44604f75.roa
Signing time:             Fri 13 Dec 2024 14:00:50 +0000
ROA not before:           Fri 13 Dec 2024 14:00:50 +0000
ROA not after:            Thu 13 Mar 2025 13:00:50 +0000
asID:                     33296
IP address blocks:        66.118.48.0/24 maxlen: 24
                          66.187.197.0/24 maxlen: 24
                          66.187.198.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:31:8a:ad:4a:7f:f5:d4:d0:e1:0f:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a2d75f1-8f4b-49d3-9661-209643086151
        Validity
            Not Before: Dec 13 14:00:50 2024 GMT
            Not After : Mar 13 13:00:50 2025 GMT
        Subject: CN=1cd6a767-66aa-4b58-9b17-57a9909d3370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:79:ef:c5:0f:4f:05:a9:7a:0c:0f:63:e6:95:
                    c4:ba:eb:8d:31:e3:fc:77:af:07:d5:5e:b8:5b:bb:
                    fc:06:f3:65:c5:f5:cf:a9:e7:48:ee:8c:4d:26:41:
                    7d:02:58:b3:94:6f:71:37:e2:d4:b4:b5:05:56:25:
                    2f:4d:f3:31:ab:b5:f3:30:05:f9:c3:0f:b1:de:bd:
                    3f:36:44:4d:15:b9:ca:c5:0d:a4:f9:5d:e1:b8:e1:
                    6d:f4:67:26:f0:8b:d6:19:2e:92:30:10:10:80:2e:
                    61:2e:ed:b5:c4:4c:b4:80:07:eb:db:6c:50:2c:72:
                    a7:7d:aa:c9:8b:9b:f1:16:d8:a8:d2:36:17:1b:ee:
                    69:3f:2d:9c:8d:1a:e9:bb:9b:1a:0e:fc:ef:c0:f0:
                    04:99:02:ca:7e:45:75:42:0a:92:72:e6:a2:aa:3b:
                    6f:97:9d:64:e7:5d:42:2f:9f:e3:b9:8d:af:5e:de:
                    72:ea:b2:7e:49:37:c8:be:b0:c7:4c:6e:4e:53:4b:
                    33:03:0f:d6:13:ba:99:84:7d:40:f7:12:bc:a3:7a:
                    33:3f:18:3f:31:e9:07:1c:fd:82:fd:91:a6:a7:b7:
                    3f:fc:c2:da:a1:c0:16:67:30:c5:9f:fb:4d:ad:0d:
                    f9:d1:3a:de:c7:f6:5c:0b:a0:51:9e:09:65:59:3f:
                    37:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5C:31:CC:4A:65:42:71:01:50:F9:F6:43:25:41:84:10:61:B4:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/5e80c34e-1cd1-3db4-a203-4ece44604f75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.crl

            X509v3 Authority Key Identifier:
                keyid:0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.48.0/24
                  66.187.197.0-66.187.198.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:ea:76:aa:85:a3:4f:59:83:c2:b7:60:db:d9:9e:0a:45:a6:
         78:86:c8:d9:9b:0b:14:27:55:a5:33:9b:ec:1d:10:bc:ce:a7:
         4e:f2:ac:43:7d:02:18:1a:ae:f5:34:6e:b4:c2:4c:09:9d:c0:
         cb:91:dd:f5:a6:95:cf:1c:4b:f1:c7:c3:66:ff:d1:67:7b:9e:
         79:a1:47:0c:2a:41:20:5e:44:cb:71:d0:75:18:80:51:a9:76:
         b4:60:81:88:22:39:5b:a4:f8:eb:b1:58:74:3c:18:a8:1a:fc:
         3d:1e:fb:e4:a5:c2:fe:87:fa:72:d7:a3:6b:47:0d:4c:df:2e:
         f2:9e:8c:80:d0:43:c5:aa:a7:58:01:00:56:ab:22:4f:65:66:
         76:64:9f:eb:6d:ac:61:2f:70:7a:9d:52:6a:ce:18:96:cc:23:
         03:8e:b8:5f:6a:9b:59:48:87:6c:33:55:52:74:3d:22:85:b2:
         5c:32:34:0c:1c:08:ff:f2:d6:3c:5a:48:63:40:71:1b:72:21:
         b9:13:65:ed:78:56:2f:eb:60:8e:72:e5:fb:ab:b3:4e:ec:7c:
         86:ca:11:48:dd:76:49:76:e0:83:4b:c2:6f:c5:72:20:56:d8:
         a7:0d:94:9b:7b:ff:0f:c8:fc:ba:19:61:d2:a4:e0:e1:0c:ce:
         ce:ae:5d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:46:57 2025 by rpki-client