Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c84662f6-7ac5-3d29-a124-8f9007afca9b.roa
File:                     c84662f6-7ac5-3d29-a124-8f9007afca9b.roa (raw, json)
Hash identifier:          nY+GBOZfsN9HIfpnU1brAGZwmOBuuQ7rsTvVAFpRUHs=
Subject key identifier:   6D:A4:14:D0:15:81:9D:FA:E6:CF:14:4D:03:92:50:7B:6B:EF:0F:C8
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858483F8031A312CB1BF2B35227A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c84662f6-7ac5-3d29-a124-8f9007afca9b.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     62240
IP address blocks:        166.1.215.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:31:a3:12:cb:1b:f2:b3:52:27:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=58e776f9-3e7f-491f-be50-119dba64957c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:20:3d:5f:7e:30:c4:b5:17:84:d1:7e:7e:34:
                    3b:3f:ee:02:4b:3e:84:33:b8:1c:e7:c0:f1:1d:5b:
                    27:b3:49:ff:b4:1d:f1:32:aa:84:e2:d8:6a:fe:e3:
                    c6:08:7c:71:ce:5f:de:17:1f:b0:9c:9a:59:33:61:
                    64:53:50:e4:6c:f3:b5:89:bf:07:1f:aa:b0:06:0f:
                    e1:3c:49:e0:cd:fc:6f:15:5b:ed:6c:26:ee:cc:ce:
                    8d:63:98:c6:84:e7:76:40:e0:76:24:b4:5d:3a:a9:
                    f8:8a:1d:2d:bf:14:71:a6:03:1b:b1:4c:eb:b5:b7:
                    d2:2e:0b:10:31:20:b0:44:cc:f6:f6:96:66:c5:fe:
                    22:3d:e5:f9:63:a7:fc:98:7b:de:8e:1b:89:80:53:
                    30:af:94:7f:46:70:41:e7:51:3e:17:5a:8d:f8:7e:
                    04:d4:84:9a:eb:54:35:47:87:2a:d3:43:1d:88:55:
                    d8:52:94:67:c0:0e:d8:db:0a:9b:b1:b9:f0:aa:18:
                    34:42:8d:3b:3f:74:9a:55:1e:24:09:de:8a:c7:da:
                    02:5c:4d:8d:3d:b0:c0:5e:74:51:77:e9:8b:bd:bb:
                    36:04:5d:44:a4:c5:73:19:91:cb:46:f0:e6:56:c0:
                    29:d8:ed:31:d3:7f:9c:c5:59:87:df:a0:9e:52:16:
                    2a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A4:14:D0:15:81:9D:FA:E6:CF:14:4D:03:92:50:7B:6B:EF:0F:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c84662f6-7ac5-3d29-a124-8f9007afca9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:ea:1d:fb:e0:76:73:a7:d7:fe:a4:be:9d:55:b8:65:34:cc:
         6d:bd:a3:ba:5a:cf:c4:d0:65:fd:27:2e:d8:aa:00:f4:a0:d5:
         dd:72:ff:0c:54:44:e1:12:bb:54:79:15:9a:dd:4a:c2:2a:9c:
         42:8f:93:ca:33:4e:61:a7:d5:50:9c:df:6f:92:e9:b1:97:f2:
         2c:f4:17:33:2e:8c:2e:2a:20:8f:b1:46:90:99:a0:d6:ec:bd:
         68:3b:98:76:0d:fe:56:52:fd:14:a4:b7:6c:c4:73:22:46:52:
         85:5c:f7:5d:45:7e:36:f8:a3:d7:da:a4:98:a9:74:ca:0e:94:
         89:19:90:7b:75:a4:99:98:b3:ef:07:8a:7f:f2:29:31:fb:a1:
         7d:37:c0:55:79:fc:d3:06:6b:fe:02:ba:c1:0a:01:95:ab:17:
         38:1c:92:17:30:de:8d:58:c6:d6:a3:73:a8:29:41:7d:0a:e4:
         8c:cc:6d:0d:99:51:77:91:ea:44:b1:5b:e1:60:f5:d1:9a:fa:
         18:61:d6:ee:13:ed:d0:5f:01:51:b2:9c:35:4d:97:32:ae:0f:
         f0:a2:86:5b:14:8b:dd:7a:59:be:a5:35:3b:9a:b5:ed:30:2c:
         c2:10:8a:e9:50:eb:09:de:8a:70:c2:d8:7d:e4:fb:5e:3b:55:
         96:14:0b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:30:18 2025 by rpki-client