Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b2612998-1523-3ee7-8c71-fe97b9c6746d.roa
File:                     b2612998-1523-3ee7-8c71-fe97b9c6746d.roa (raw, json)
Hash identifier:          SVVOlc/D4okIHco0+PIVXVvikkJ4uR51k6RqEbbxN74=
Subject key identifier:   4A:04:84:89:4E:8A:BA:63:F7:CC:2E:8E:98:1E:7A:82:E4:30:B5:99
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858483F80310B51322D21D9467400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b2612998-1523-3ee7-8c71-fe97b9c6746d.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     62240
IP address blocks:        166.1.203.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:31:0b:51:32:2d:21:d9:46:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=d376108e-2924-475d-bb31-8552ed274f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f2:07:05:83:cc:ea:e7:9b:d7:c8:a9:91:57:
                    f4:a0:4a:d9:69:3d:eb:8f:c5:df:9a:65:b7:c2:a3:
                    67:f6:f2:55:38:aa:de:5c:db:d1:17:97:33:95:e6:
                    d1:70:64:ff:ea:43:2d:b5:db:82:9e:db:89:f2:36:
                    16:bc:51:9d:61:49:ba:6c:50:05:93:a6:59:d6:80:
                    9e:ba:b6:02:42:42:6f:4f:9e:d8:e1:fb:98:26:8c:
                    5c:38:52:87:4a:4b:95:32:17:b5:2c:70:9a:7f:a7:
                    15:fb:aa:15:7f:83:ca:97:fa:a1:b1:d7:f1:a2:85:
                    6c:9f:cb:ab:1a:cd:e9:2d:df:06:5c:27:53:a1:87:
                    3e:4e:9a:e4:06:b5:e0:67:1b:7b:bc:e9:e3:3c:c9:
                    66:f5:3e:95:c5:a7:ff:d8:23:ad:01:6e:b7:d2:b0:
                    9e:0a:b9:6e:fb:5b:a2:78:51:aa:e6:bf:b9:16:5e:
                    c3:6c:82:62:9b:b2:9b:59:c8:b1:cc:3d:39:5b:5e:
                    3c:72:69:00:87:f5:00:dd:92:11:77:6e:71:dd:dd:
                    dc:ae:26:26:b3:b1:86:73:99:90:a3:5c:4f:ba:d2:
                    76:92:4b:0b:83:11:c6:bb:fc:87:d4:97:9f:21:84:
                    33:94:77:b0:e9:3c:67:ae:63:e5:e8:1d:71:79:85:
                    3e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:04:84:89:4E:8A:BA:63:F7:CC:2E:8E:98:1E:7A:82:E4:30:B5:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b2612998-1523-3ee7-8c71-fe97b9c6746d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:4d:f3:8e:1b:16:8b:c5:a3:76:aa:7b:96:9e:f0:1f:91:59:
         f2:aa:12:0f:ca:df:a1:15:f1:f6:9f:cd:37:32:bd:a3:d7:3f:
         cd:b1:94:63:04:9b:e5:c5:5f:2c:17:a8:42:1a:c7:24:0c:23:
         ee:e2:ec:12:3d:2d:7b:f1:e1:7c:06:3f:6b:6c:01:7f:21:76:
         f1:f4:f4:52:b5:7c:c6:42:67:11:24:82:57:e2:db:30:aa:4d:
         df:a8:52:06:a3:a6:f0:19:75:a8:49:52:b9:cd:cc:aa:16:9e:
         78:0b:c2:97:eb:8c:d6:ea:5d:0d:82:79:21:72:8a:29:02:cf:
         57:4f:87:38:89:fa:26:cf:ee:63:64:ad:26:06:7f:89:13:27:
         ca:36:96:90:cf:11:f6:54:59:d3:79:13:43:22:dc:13:fd:b6:
         f0:3f:cd:77:36:51:90:0d:af:25:f1:f8:c7:56:a1:24:03:f9:
         99:31:c0:ac:bc:cd:1c:70:50:af:b6:23:dc:75:3b:30:7a:2b:
         9c:fb:e0:aa:3a:59:18:c5:21:03:d4:87:7a:d3:57:8d:6d:44:
         42:f6:22:c3:5e:94:ab:6d:b2:6d:27:b7:ac:3f:97:36:37:51:
         1f:f4:24:53:0f:4d:12:04:45:c7:f3:49:7a:69:dd:3e:a5:34:
         dd:d0:4c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:26:38 2025 by rpki-client