Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3530bd3c-c3c2-4bd2-bf7b-255fc4a87843/b5c2e085-831f-30f6-ba63-565900ece494.roa
File:                     b5c2e085-831f-30f6-ba63-565900ece494.roa (raw, json)
Hash identifier:          fdoheABF2X59Uc2pjtxCh4xgpRFolHRLSsrxP7+3rRY=
Subject key identifier:   BB:6B:31:74:0E:74:6D:20:0F:BF:53:04:BB:29:B5:7A:39:91:31:24
Certificate issuer:       /CN=3530bd3c-c3c2-4bd2-bf7b-255fc4a87843
Certificate serial:       010D0C9F43285848265FF7431A1E52FD20D11800
Authority key identifier: AE:74:F2:90:0E:6C:4F:2A:8D:4B:44:04:B9:20:A9:8F:5E:C7:61:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3530bd3c-c3c2-4bd2-bf7b-255fc4a87843.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3530bd3c-c3c2-4bd2-bf7b-255fc4a87843/b5c2e085-831f-30f6-ba63-565900ece494.roa
Signing time:             Mon 09 Dec 2024 14:00:51 +0000
ROA not before:           Mon 09 Dec 2024 14:00:51 +0000
ROA not after:            Sun 09 Mar 2025 13:00:51 +0000
asID:                     31919
IP address blocks:        66.223.63.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:5f:f7:43:1a:1e:52:fd:20:d1:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3530bd3c-c3c2-4bd2-bf7b-255fc4a87843
        Validity
            Not Before: Dec  9 14:00:51 2024 GMT
            Not After : Mar  9 13:00:51 2025 GMT
        Subject: CN=7386d86c-448b-4068-a03f-8280bc85ae8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1c:71:1e:64:ac:aa:b4:b3:7e:38:d7:4f:c7:
                    40:bd:4c:55:64:97:46:b2:33:f0:6e:ce:50:c8:db:
                    bc:75:6d:e6:04:ff:61:af:7c:39:8e:3a:ea:c7:69:
                    b6:f1:93:29:d5:0d:3b:1d:f4:6b:42:46:ff:c6:9c:
                    c2:ff:ee:21:f6:b7:27:fc:b1:19:97:37:61:7f:1d:
                    f9:4d:42:bb:13:5d:71:7d:2f:47:3b:cd:10:ce:37:
                    65:45:c7:a8:fa:45:36:07:82:57:76:e1:d6:81:e3:
                    12:6c:e8:7e:8e:a4:aa:7a:c4:8b:3d:4a:0d:e7:1c:
                    45:a8:ac:db:1f:19:a2:fd:20:e2:2f:b2:52:5f:44:
                    91:0b:d2:aa:cb:2b:1d:ac:45:48:f6:9c:6c:82:d3:
                    26:79:6b:a9:47:5a:b0:01:cf:09:9d:e9:3d:e6:f0:
                    8f:6d:78:05:4d:86:dc:26:42:8c:af:18:71:65:6c:
                    36:f1:ad:99:5a:11:0c:30:91:df:3d:6d:95:ff:4e:
                    9c:48:af:c6:08:8e:45:4e:f1:c7:cd:b9:0f:29:24:
                    57:63:33:c1:e6:13:6b:12:0c:b1:96:61:99:3f:97:
                    55:08:26:cb:ae:2b:a7:dd:1b:07:d7:df:a7:0c:a4:
                    98:12:eb:52:49:0f:c2:87:be:27:21:8c:54:03:b6:
                    7a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:6B:31:74:0E:74:6D:20:0F:BF:53:04:BB:29:B5:7A:39:91:31:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3530bd3c-c3c2-4bd2-bf7b-255fc4a87843/b5c2e085-831f-30f6-ba63-565900ece494.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3530bd3c-c3c2-4bd2-bf7b-255fc4a87843/3530bd3c-c3c2-4bd2-bf7b-255fc4a87843.crl

            X509v3 Authority Key Identifier:
                keyid:AE:74:F2:90:0E:6C:4F:2A:8D:4B:44:04:B9:20:A9:8F:5E:C7:61:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3530bd3c-c3c2-4bd2-bf7b-255fc4a87843.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.223.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:4c:d8:20:6d:7d:6d:ea:76:82:55:c4:00:bc:c8:3c:8c:b6:
         e3:96:97:a4:c9:da:58:c7:6d:8f:92:21:3f:d8:c8:a2:8e:bd:
         0c:2c:44:43:4e:e8:25:ec:16:92:2f:3d:0b:d6:78:75:31:da:
         b1:0f:0c:85:85:35:0e:73:36:d3:ef:7e:1f:b2:cd:5c:24:83:
         fd:af:e6:a2:b9:46:36:4b:e2:40:37:13:7c:6f:2a:3e:a3:61:
         d6:43:9a:ed:bc:bd:99:46:29:68:9c:de:ff:77:7f:f7:10:b6:
         52:89:f9:e2:c6:20:36:71:8b:44:00:1e:5b:15:26:79:3a:ec:
         ab:e1:da:a4:d6:00:d2:1b:cb:c8:bc:1d:37:d4:8a:c6:ea:74:
         e6:43:59:7e:0a:cf:cf:7e:dd:a0:e6:4c:81:e6:bb:17:7c:cc:
         9e:db:af:16:26:40:a2:fa:83:be:af:34:b5:95:69:55:b5:06:
         1d:99:8d:b8:ad:66:97:5b:4e:b3:03:f5:16:a0:ea:2d:12:c1:
         b9:94:c6:ed:40:ee:40:eb:6b:1a:20:0c:86:3d:42:7b:05:fe:
         19:a7:a8:94:6f:62:d5:4c:c6:ab:6e:22:20:ad:db:cb:e0:92:
         6f:5f:52:84:49:25:4b:38:f2:f8:b8:7d:1c:f3:ee:00:28:19:
         6a:7a:cd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:08:58 2025 by rpki-client