Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/91dfef52-b4dc-3561-8384-4763a863db3b.roa
File:                     91dfef52-b4dc-3561-8384-4763a863db3b.roa (raw, json)
Hash identifier:          5i6n8DWY4nsD80GzdABCmhn+C1kUQ1dHbrMt72t9DsE=
Subject key identifier:   B6:C8:40:4F:F9:09:D7:17:90:27:25:63:00:01:9D:3D:C6:06:C8:D2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858487E507010CA450FADD817FF40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/91dfef52-b4dc-3561-8384-4763a863db3b.roa
Signing time:             Fri 10 Jan 2025 02:00:40 +0000
ROA not before:           Fri 10 Jan 2025 02:00:40 +0000
ROA not after:            Thu 10 Apr 2025 01:00:40 +0000
asID:                     26548
IP address blocks:        108.165.77.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7e:50:70:10:ca:45:0f:ad:d8:17:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan 10 02:00:40 2025 GMT
            Not After : Apr 10 01:00:40 2025 GMT
        Subject: CN=aa69a8d4-0760-4fb3-ae88-e39d50647f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:db:49:65:fa:b6:92:eb:61:95:32:6b:19:be:
                    2e:d2:11:64:0f:26:dd:29:7f:70:47:50:e6:63:ab:
                    90:37:93:f4:b4:59:ae:db:01:b2:c3:d2:27:a2:18:
                    79:47:1f:ee:24:2a:ae:d0:31:b4:f7:7c:50:d4:04:
                    81:14:bf:c6:f9:8f:d9:7c:94:3d:9d:ed:eb:81:46:
                    40:b8:14:78:da:4b:e3:9c:61:e6:86:df:03:12:d2:
                    94:e9:3d:a7:22:64:ba:72:7e:0d:ef:e0:11:7b:e8:
                    16:bf:67:51:a3:62:b8:86:ca:7a:e9:c9:49:ee:78:
                    82:65:4e:b9:15:3b:0a:68:d7:64:7c:fd:88:44:36:
                    ac:eb:2f:9c:c2:45:74:8e:54:e1:62:92:02:4f:5f:
                    53:02:59:5d:0b:a6:53:41:60:bd:12:eb:c5:ae:d5:
                    46:05:31:ec:03:27:66:da:70:72:db:4a:26:f7:8b:
                    6c:18:1d:9e:e8:ad:69:b5:42:3c:f9:a7:87:85:0a:
                    9a:cc:66:d9:f1:fc:cb:f6:db:81:01:b6:a4:73:df:
                    7b:2f:85:8e:38:bf:b2:3d:b6:16:9e:cd:21:4c:f3:
                    a9:eb:28:36:ec:eb:5c:64:d3:fe:e5:69:c0:67:32:
                    54:28:1f:8f:86:fb:a6:aa:34:16:29:44:0c:3f:68:
                    57:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C8:40:4F:F9:09:D7:17:90:27:25:63:00:01:9D:3D:C6:06:C8:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/91dfef52-b4dc-3561-8384-4763a863db3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:65:11:d7:de:2a:1d:a4:1f:ab:4e:37:4f:13:80:d6:c1:21:
         b5:a9:56:e9:e4:25:73:c2:d4:ca:0d:cc:95:f1:24:ee:30:93:
         73:79:28:8f:dd:99:57:e7:1e:6c:a2:51:a6:37:be:ff:cb:c5:
         f4:b0:5d:52:e8:5a:ad:2c:4a:72:52:37:ce:56:91:7f:aa:72:
         76:05:fa:10:ce:f9:e1:df:7d:0a:7d:1a:48:42:7e:cc:2f:50:
         19:90:c2:b4:23:92:25:40:23:36:9e:19:d4:c1:cc:f6:0e:e6:
         56:64:50:65:66:f3:00:bb:f1:88:cc:07:6a:a8:e0:ff:f1:33:
         29:7b:4d:9b:fd:7f:57:ed:76:ac:08:dc:1d:d5:cb:ad:aa:7c:
         86:fe:46:14:6b:b1:ef:24:98:de:46:d9:60:c4:44:d3:ce:fa:
         63:8c:21:d5:0b:7b:85:4e:02:ab:4c:64:a4:dc:7a:64:6f:ca:
         e5:c8:e7:9a:2b:29:f8:4d:62:e0:ec:7c:c5:cb:54:15:18:ab:
         40:98:d8:ac:a8:6a:60:da:80:27:3f:d5:70:77:18:4c:5f:6e:
         63:46:22:ef:a3:8d:5c:a0:35:93:da:3c:fa:c1:c6:81:fb:eb:
         0b:e5:b0:b6:3e:5d:80:b8:02:a1:29:0b:25:57:48:d7:fb:44:
         67:d4:05:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh+UHAQykUPrdgX/0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDExMDAyMDA0MFoXDTI1MDQxMDAxMDA0MFowLzEtMCsGA1UEAxMk
YWE2OWE4ZDQtMDc2MC00ZmIzLWFlODgtZTM5ZDUwNjQ3ZjFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9tJZfq2kuthlTJrGb4u0hFkDybdKX9wR1Dm
Y6uQN5P0tFmu2wGyw9Inohh5Rx/uJCqu0DG093xQ1ASBFL/G+Y/ZfJQ9ne3rgUZA
uBR42kvjnGHmht8DEtKU6T2nImS6cn4N7+ARe+gWv2dRo2K4hsp66clJ7niCZU65
FTsKaNdkfP2IRDas6y+cwkV0jlThYpICT19TAlldC6ZTQWC9EuvFrtVGBTHsAydm
2nBy20om94tsGB2e6K1ptUI8+aeHhQqazGbZ8fzL9tuBAbakc997L4WOOL+yPbYW
ns0hTPOp6yg27OtcZNP+5WnAZzJUKB+PhvumqjQWKUQMP2hXlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLbIQE/5CdcXkCclYwABnT3GBsjSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOTFkZmVmNTItYjRkYy0z
NTYxLTgzODQtNDc2M2E4NjNkYjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEdlEdfeKh2kH6tON08TgNbBIbWpVunkJXPC1MoNzJXxJO4wk3N5KI/d
mVfnHmyiUaY3vv/LxfSwXVLoWq0sSnJSN85WkX+qcnYF+hDO+eHffQp9GkhCfswv
UBmQwrQjkiVAIzaeGdTBzPYO5lZkUGVm8wC78YjMB2qo4P/xMyl7TZv9f1ftdqwI
3B3Vy62qfIb+RhRrse8kmN5G2WDERNPO+mOMIdULe4VOAqtMZKTcemRvyuXI55or
KfhNYuDsfMXLVBUYq0CY2KyoamDagCc/1XB3GExfbmNGIu+jjVygNZPaPPrBxoH7
6wvlsLY+XYC4AqEpCyVXSNf7RGfUBRM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:38:33 2025 by rpki-client