Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d2c78023-410d-3641-bfed-7f18a7e1a0d1.roa
File:                     d2c78023-410d-3641-bfed-7f18a7e1a0d1.roa (raw, json)
Hash identifier:          MeCAPBzoLKimqIQFeqh8244osoBOgmTnonoGlo5oBVA=
Subject key identifier:   1D:4C:14:B8:D0:BD:B6:B5:F1:4B:67:96:C6:40:7B:B9:70:95:9B:20
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848530AEC090077AFAD8E1AAE80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d2c78023-410d-3641-bfed-7f18a7e1a0d1.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     44477
IP address blocks:        166.1.30.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0a:ec:09:00:77:af:ad:8e:1a:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=1b400c27-974d-48fa-951f-7159305313f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0a:98:b4:66:7c:5b:63:b1:d5:cb:e8:6d:8b:
                    57:57:04:ed:a2:cd:6d:23:69:9a:8b:94:da:61:57:
                    9a:ad:22:02:2f:6e:e1:d4:1f:b5:c8:48:51:cf:22:
                    db:33:8c:9d:d5:8c:e8:e7:e9:44:46:05:a4:92:63:
                    2f:80:bf:7a:37:fa:df:fe:d1:95:cb:21:8d:1b:74:
                    23:4b:3f:e0:f2:95:6e:ad:af:b0:aa:37:6d:55:05:
                    c7:dd:e8:3c:66:5d:61:7a:04:9b:36:d0:fb:8c:7f:
                    84:50:53:a2:e9:ad:47:05:e1:95:11:05:64:c3:ba:
                    f8:34:f4:55:09:98:33:87:26:3d:8a:20:a7:6c:e0:
                    42:9b:32:f6:5c:41:5d:cc:65:d2:26:3b:10:3c:0c:
                    26:26:87:d0:b1:eb:2c:99:03:84:2d:7e:3f:2b:83:
                    f3:34:66:d7:84:bc:94:f7:64:bf:a5:ca:fa:a8:93:
                    dd:7a:f3:70:aa:d8:c8:cf:3b:87:49:20:67:a9:5b:
                    90:15:e0:32:32:81:d8:ef:43:a6:69:b0:75:56:3d:
                    23:81:4f:cf:55:19:d5:c9:9c:18:d7:90:56:c6:10:
                    42:aa:d9:c0:90:81:92:6a:be:45:73:3e:07:cd:38:
                    85:af:41:69:dc:0d:a4:09:ff:9e:12:ef:8f:15:84:
                    14:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:4C:14:B8:D0:BD:B6:B5:F1:4B:67:96:C6:40:7B:B9:70:95:9B:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d2c78023-410d-3641-bfed-7f18a7e1a0d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:f5:7c:35:9b:5d:93:34:69:c3:d4:68:0b:bd:77:f7:50:4a:
         39:04:88:98:ff:19:70:85:d5:c8:df:70:23:2d:78:8a:f5:ba:
         fb:d9:82:90:3c:97:fb:ae:83:ef:7a:fd:a5:fc:d7:53:a6:86:
         d8:f2:32:43:3b:ec:9c:ab:c0:ac:49:9f:79:90:a6:86:66:e8:
         8c:81:fd:84:d5:cf:ce:83:ff:92:8b:33:fc:64:d7:c6:2b:bc:
         9a:2b:ce:dc:e9:8c:82:07:5f:2b:6d:ca:40:4c:01:9d:11:68:
         68:49:f8:11:5a:a1:45:6a:69:9f:2c:81:f6:1f:5e:c6:bf:6d:
         6a:09:c6:08:da:6d:5f:b1:d4:b1:37:11:e2:d9:5e:d8:eb:79:
         18:cd:2f:37:28:bd:89:60:bc:0f:08:a7:ab:80:51:ac:e7:50:
         5f:d8:f3:42:b4:5f:9e:b1:dd:88:79:df:77:6d:2b:38:8c:67:
         83:92:f9:80:de:d1:5f:09:48:ae:01:c0:00:eb:cb:4a:65:2f:
         02:8f:ec:12:1c:27:40:d9:ed:8a:c8:7c:8f:25:c0:0f:13:0f:
         99:8b:86:e7:7a:e6:ca:58:35:6a:96:ba:b5:86:7d:d7:a5:8e:
         6e:2c:fd:10:f0:c1:dc:0e:32:06:db:66:b6:ef:ca:18:b6:53:
         a4:48:c8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:28:11 2025 by rpki-client