Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fd8bac9c-0096-358d-80de-b7e3a9a160ad.roa
File:                     fd8bac9c-0096-358d-80de-b7e3a9a160ad.roa (raw, json)
Hash identifier:          ow1GT51P4Aq/ps+TwfbR6tJiPM+wQPmduoQaptNsYH4=
Subject key identifier:   3D:07:35:2F:4F:76:71:A4:16:B3:E4:71:55:63:C0:BD:D3:42:EF:BC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584849457A622CD06743A9B6B500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fd8bac9c-0096-358d-80de-b7e3a9a160ad.roa
Signing time:             Sun 22 Dec 2024 02:00:39 +0000
ROA not before:           Sun 22 Dec 2024 02:00:39 +0000
ROA not after:            Sat 22 Mar 2025 01:00:39 +0000
asID:                     22168
IP address blocks:        50.114.88.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:49:45:7a:62:2c:d0:67:43:a9:b6:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 22 02:00:39 2024 GMT
            Not After : Mar 22 01:00:39 2025 GMT
        Subject: CN=1157742e-ed1f-43c7-820b-70478bec25b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:29:c2:02:ea:80:53:65:a0:db:88:25:49:6e:
                    b0:4c:d1:5e:41:b6:10:c9:9d:42:f1:be:40:93:33:
                    95:f8:7f:59:80:d2:76:4a:50:ef:11:e6:8f:48:41:
                    4b:b4:db:07:49:81:ea:ff:fe:7a:2e:6b:c5:ff:3f:
                    00:2f:91:a8:7c:55:c1:91:05:a2:14:9e:8c:d4:1b:
                    8e:b9:9e:47:64:ce:68:e2:80:82:d0:c0:8f:b3:51:
                    0d:ba:8a:8d:2c:d4:7c:c6:52:cd:38:27:f3:08:e7:
                    66:7e:24:fb:62:5c:ab:59:82:ea:4a:9c:7e:2e:50:
                    b3:d3:4d:3a:39:73:78:b8:53:1b:b1:d5:07:0f:d7:
                    c4:a6:bb:ca:63:eb:0d:14:b8:d6:68:7d:3f:5f:7a:
                    24:21:21:71:f6:c3:8f:4f:4c:9f:ad:93:9f:ff:8d:
                    95:ea:33:7a:2e:c4:c5:79:a1:89:12:07:2f:b8:b9:
                    de:e1:c7:f1:93:b5:2d:81:a0:39:29:bf:2a:fd:d5:
                    91:15:bb:4d:14:ab:e0:9b:91:ea:fb:28:26:62:35:
                    fe:0f:e7:bf:a8:4a:4f:ed:b0:bf:d6:9a:1e:a6:e1:
                    4c:27:3c:d9:83:b0:8f:08:55:d9:14:da:83:eb:bd:
                    b0:cc:12:4a:f6:b1:28:62:6f:da:c9:5c:be:fe:6d:
                    43:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:07:35:2F:4F:76:71:A4:16:B3:E4:71:55:63:C0:BD:D3:42:EF:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fd8bac9c-0096-358d-80de-b7e3a9a160ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:d3:d7:87:b8:83:90:cb:0b:43:d4:23:4e:4a:aa:3f:a1:1d:
         ca:fa:30:dd:dd:f7:10:24:a8:70:ff:be:0a:09:16:31:13:f7:
         42:02:46:0f:f3:55:d2:dc:24:b8:73:1c:23:6e:11:48:27:41:
         2a:6a:d6:48:3c:3f:01:74:6d:d1:3e:7c:fd:6e:e4:b4:10:c2:
         4d:fc:b4:6c:59:6f:6d:62:bb:a3:e4:b8:b4:26:5f:db:84:7d:
         53:5d:73:58:68:be:66:7f:11:3b:2b:e5:af:16:d7:de:22:f8:
         e7:9b:b6:59:44:44:4e:ad:8b:04:54:3b:46:34:ff:7c:fb:3c:
         01:3a:24:76:9b:e4:54:8b:31:91:34:7b:d1:72:80:36:17:a3:
         4d:32:ba:21:f7:d2:9a:f2:de:95:6f:dd:a8:2f:e7:c0:60:29:
         f5:0f:1d:30:91:32:6b:3b:09:c3:c6:24:f4:23:f7:36:42:fa:
         e5:41:d9:5b:ed:86:9d:c7:bc:3a:bf:80:4a:fa:30:1f:d0:c5:
         25:7a:28:c7:a2:b0:c5:57:8d:1e:a7:02:c8:f6:98:59:93:eb:
         7a:29:9f:70:be:fc:d5:36:f9:59:c1:3f:a7:e6:f0:e5:f7:af:
         a1:68:51:c3:fb:d5:54:70:44:52:91:55:47:6a:01:3a:cf:00:
         f5:28:ec:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:07:17 2025 by rpki-client