Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4654830d-6096-317f-a65b-4cf46a3605e0.roa
File:                     4654830d-6096-317f-a65b-4cf46a3605e0.roa (raw, json)
Hash identifier:          ap1ef01+8cwUeXE/brqReuUPXCEjkSMBNbyBaRzl5Xk=
Subject key identifier:   DC:94:B8:C6:3C:07:BB:B7:C0:5F:AE:CF:74:F1:59:18:4D:93:F2:F0
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848116FF8E53CCDC036D9998780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4654830d-6096-317f-a65b-4cf46a3605e0.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     58061
IP address blocks:        166.1.92.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:6f:f8:e5:3c:cd:c0:36:d9:99:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=635616d0-6ce8-489f-95d3-9c499b55ceb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f5:09:b3:13:e3:a1:15:24:85:a4:1a:6b:37:
                    6d:3c:92:2f:f9:b4:77:03:23:4e:89:df:28:cc:ba:
                    ea:17:3c:5a:9c:cc:ea:f4:57:5c:76:43:19:35:58:
                    10:bd:84:8d:96:26:92:1c:6b:0e:e3:e8:21:9e:c3:
                    78:b9:40:fe:ab:8c:70:4f:01:52:99:38:8f:5f:26:
                    77:63:d5:4e:c1:fa:27:13:03:ab:d3:14:88:be:d1:
                    1c:44:b8:4f:49:e4:14:11:1e:06:97:22:04:8f:9d:
                    1c:ea:44:fc:d9:16:b7:81:c3:f1:56:5e:ed:cb:66:
                    27:b6:ea:dd:51:c9:e5:57:29:c4:d2:46:5a:c2:bb:
                    98:51:98:8c:95:dd:4d:c5:0f:e6:1a:f9:d4:df:c8:
                    9b:12:eb:a9:d4:ef:1b:da:c5:17:64:a5:5e:69:a1:
                    f6:9a:82:95:84:c0:c9:ed:c6:ba:78:a8:e5:20:7d:
                    57:b7:c4:e4:35:17:f6:fe:af:c7:e9:36:ca:c7:03:
                    a7:76:b5:6e:6e:a4:4b:9c:71:95:51:73:6f:72:97:
                    b1:8f:29:56:28:dd:49:e4:31:46:b2:89:3a:6c:5d:
                    96:15:4d:e7:4b:29:23:c3:c1:4a:7f:88:60:6a:f2:
                    d6:38:05:07:af:92:ce:b9:24:fb:6f:90:0c:13:b9:
                    90:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:94:B8:C6:3C:07:BB:B7:C0:5F:AE:CF:74:F1:59:18:4D:93:F2:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4654830d-6096-317f-a65b-4cf46a3605e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:f4:3e:c9:2b:cc:af:0f:34:04:8b:52:83:41:47:a0:ee:69:
         d7:e9:b9:62:a1:0c:61:c2:80:a4:2d:c5:de:1e:db:20:0c:a4:
         87:af:7d:81:dc:7c:47:33:b8:7b:55:22:50:75:cf:1c:96:98:
         ad:98:f5:2f:ba:2e:37:62:cd:54:a5:39:f8:05:a9:49:60:77:
         ca:1f:05:4b:ec:00:be:e9:81:67:ff:e6:b2:49:7b:46:f6:da:
         f0:7b:22:40:ef:2a:87:2d:17:fe:88:7e:67:ba:f3:b7:d6:72:
         eb:c1:f0:c5:e9:ae:a0:6e:3f:70:da:dd:c9:5d:50:69:9e:6d:
         90:28:e2:98:77:50:a7:9f:48:b0:bf:2d:ea:42:c8:94:ce:91:
         ca:28:9d:ed:e4:41:49:0c:02:88:ab:cc:96:60:da:fd:f9:c2:
         bc:0c:0b:85:89:05:22:be:7f:f7:f7:99:b1:69:8f:07:0f:3a:
         95:8c:a4:8c:11:b9:f2:35:ba:0b:1c:e3:25:75:b6:c5:f4:d7:
         83:7b:c0:87:13:ee:48:da:5a:63:81:81:47:c8:12:dd:66:e7:
         ae:66:70:5e:4e:99:ed:5c:4c:e0:17:4f:5d:c6:5e:c5:c7:cf:
         bc:0f:11:dd:75:3a:8d:0a:ae:13:51:64:79:b9:97:16:2c:f4:
         62:54:25:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:06:04 2025 by rpki-client