Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/efb06f2a-09b2-3c54-8bf6-4b4954484a31.roa
File:                     efb06f2a-09b2-3c54-8bf6-4b4954484a31.roa (raw, json)
Hash identifier:          M5CMDWS/b6RKcuA5vxZvizUvc9zq6FS8+9ARMs1JpUs=
Subject key identifier:   7D:1E:E9:F7:9C:09:4E:2D:C7:3E:96:E1:30:8D:F3:41:5A:39:B5:52
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858483E1ABF07620822D1E0C11780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/efb06f2a-09b2-3c54-8bf6-4b4954484a31.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     46450
IP address blocks:        108.165.72.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:bf:07:62:08:22:d1:e0:c1:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=8e14aa9a-9f45-48d1-ac0a-40edd433dc5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:56:54:a4:af:d8:65:97:fb:63:1d:99:a6:7a:
                    ca:35:39:8a:3c:ea:45:38:c2:4b:aa:f9:96:ee:65:
                    31:2b:33:04:68:7f:01:60:98:5e:34:53:27:aa:58:
                    9c:89:0f:a3:78:ce:42:44:18:5e:77:49:57:54:18:
                    68:2d:10:2d:af:7c:1e:94:a0:c5:2b:48:fb:fe:0c:
                    46:cb:cc:39:67:81:c9:6d:b6:0b:f0:f7:64:51:85:
                    3e:82:27:83:7a:34:c7:75:44:a0:28:63:76:4c:67:
                    55:9b:b6:56:94:13:cd:68:f5:55:22:f6:85:96:e4:
                    38:5a:5f:b2:b2:78:04:4a:7b:22:4e:ec:ec:a9:76:
                    b9:2c:d7:10:29:39:55:d8:7f:4e:8a:79:a8:8a:0f:
                    d2:08:fb:8a:9a:f1:ba:db:fd:3f:55:a6:56:86:64:
                    c5:db:37:0f:04:2f:a5:d9:2d:ff:06:af:f4:18:05:
                    70:fb:3d:b3:2d:f3:44:e1:6f:3e:dc:8b:cc:f9:f4:
                    ba:ed:3f:b7:f2:54:63:1a:8e:3c:06:3e:d3:20:36:
                    60:8b:55:2e:9d:a9:f9:b0:d9:1f:24:94:67:79:e5:
                    69:ed:54:83:4a:97:d8:83:09:8c:97:6a:73:80:14:
                    e6:11:30:c1:6a:9f:75:54:54:0f:a6:3b:f2:ec:37:
                    85:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:1E:E9:F7:9C:09:4E:2D:C7:3E:96:E1:30:8D:F3:41:5A:39:B5:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/efb06f2a-09b2-3c54-8bf6-4b4954484a31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:ac:36:e4:22:40:95:64:d3:cb:25:ea:9c:03:40:98:47:ba:
         fb:41:d6:01:7e:55:7d:6c:9b:5e:95:6d:d4:f6:04:b8:86:1d:
         0c:9b:27:ac:fa:df:b5:73:40:1b:91:06:0c:8a:80:91:3f:cd:
         4b:cc:57:0f:5c:47:bc:03:6c:e2:81:9d:f0:f1:5d:13:ca:ce:
         56:e4:cc:25:2b:43:30:d2:c4:72:1e:ab:43:99:4f:7c:fe:ab:
         0b:f2:0c:3e:e6:4f:fa:bd:a4:7c:c5:b2:dc:c9:9b:40:bc:0d:
         ac:d6:96:8b:84:81:e8:29:e1:f6:6b:39:61:21:95:b4:9f:42:
         4c:4e:fa:b7:ce:f3:06:8a:84:c6:17:0c:4a:5f:3c:86:68:70:
         3d:d1:1b:a4:bd:64:01:64:a2:8b:82:79:a9:98:30:9f:9e:26:
         55:ef:a0:2f:fc:86:3d:5c:12:9f:a3:10:55:ce:ba:a3:03:0c:
         8d:9e:3c:96:7f:82:f8:9e:29:22:a3:70:79:36:51:b1:9b:c5:
         31:fb:59:4c:dd:37:ea:ef:e2:fb:a9:0d:8b:67:a7:83:ea:22:
         93:b9:3e:6f:da:5b:c1:35:a9:55:a9:75:b5:de:80:4d:e1:c1:
         e9:4d:36:04:46:a2:e2:bf:79:21:4c:8d:e4:65:45:34:fc:6e:
         c2:54:49:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:18:33 2025 by rpki-client