Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/8bd5efe1-cfef-3ef4-a09e-ff3c2d932fdd.roa
File:                     8bd5efe1-cfef-3ef4-a09e-ff3c2d932fdd.roa (raw, json)
Hash identifier:          eyEPRNktFG5ez/gu7CqXmpF2nIrcVEsVy1jUkxaO4pw=
Subject key identifier:   4C:82:65:AF:1A:74:E1:11:46:62:E7:21:40:05:EF:06:42:5A:61:55
Certificate issuer:       /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial:       010D0C9F432858483B50136B3FCC7D453DA69700
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/8bd5efe1-cfef-3ef4-a09e-ff3c2d932fdd.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     7106
IP address blocks:        66.209.140.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:13:6b:3f:cc:7d:45:3d:a6:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=cf90649b-a5c5-4c99-a390-3eca2ae3cf4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:25:fa:cc:d6:55:7c:9f:3d:0a:99:4b:2f:62:
                    69:72:ba:5d:81:b9:cd:39:d2:c6:0e:c9:e3:9e:80:
                    6f:ad:8b:3b:17:39:c7:4e:e8:27:9f:15:a5:2f:1e:
                    bb:bb:52:59:17:28:22:e7:f1:98:34:62:36:a4:11:
                    41:46:1d:c9:88:63:17:61:d6:6a:b1:2e:2e:ef:b3:
                    a7:57:2c:73:9b:34:35:92:88:b4:e4:cd:0c:22:ff:
                    e8:a1:bd:00:51:39:ef:51:73:2f:7a:09:4d:11:7e:
                    3c:a0:bb:b2:42:69:a3:ef:f4:65:3c:41:d8:9a:8b:
                    1d:7f:7b:2d:35:dc:00:ef:75:08:ac:30:62:3a:68:
                    c9:9d:9f:b0:c7:38:c7:78:11:d5:ae:d2:84:f0:0e:
                    96:b0:10:e9:aa:da:4f:2a:b7:0c:3d:c9:bc:b4:4a:
                    ef:76:76:8b:81:14:08:bd:1d:01:4e:8f:d0:62:11:
                    85:d7:d4:f0:ea:01:23:36:5d:cc:44:7e:6c:24:d1:
                    45:a2:d4:6f:d4:8d:65:f3:10:4e:16:92:0a:e5:17:
                    79:9e:0c:c5:20:c6:df:b5:8c:f4:ad:f4:47:1a:3c:
                    ac:98:a2:64:d9:01:ea:c0:81:0a:94:a1:2b:fc:f3:
                    dd:05:b7:c7:a3:67:a5:88:eb:eb:bf:36:1f:a0:f8:
                    5f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:82:65:AF:1A:74:E1:11:46:62:E7:21:40:05:EF:06:42:5A:61:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/8bd5efe1-cfef-3ef4-a09e-ff3c2d932fdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl

            X509v3 Authority Key Identifier:
                keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.209.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:01:c3:75:cc:82:4a:7f:53:fe:4d:c2:c3:7f:97:25:ae:92:
         f2:f5:0e:74:48:e3:32:ba:ce:21:39:9a:75:f6:ad:2d:6a:c5:
         81:a3:7b:25:3b:3f:8b:bb:88:7c:bf:ca:44:f5:50:4a:8f:bf:
         4d:c2:30:0c:47:67:1f:06:f2:1d:09:1b:61:a5:97:42:3a:c1:
         3b:cb:ad:40:2b:ac:12:cc:3f:19:81:f1:cf:b0:1d:88:4e:f5:
         b3:44:aa:f9:38:50:2b:20:04:80:c3:a9:28:de:2e:38:32:09:
         16:e4:23:02:b2:24:08:a0:67:86:65:8a:b9:87:ec:e5:21:ed:
         2b:c3:6e:cd:3f:c6:91:5d:58:db:15:30:e0:9c:a2:ba:c5:c1:
         0b:b6:d9:e7:6b:59:51:6a:55:67:02:86:89:e5:a9:b0:17:09:
         d1:73:79:94:96:f3:c9:fb:27:56:01:29:bf:89:2b:cb:1b:5d:
         6e:90:c8:48:07:86:82:b3:8c:02:5c:cd:19:41:de:e4:95:91:
         86:b3:9b:9c:5c:bc:23:18:ed:d2:a4:f5:6b:24:8e:e9:6e:b5:
         75:bc:da:08:e5:97:09:2c:55:68:cd:1b:13:08:1a:1b:48:db:
         63:35:21:7e:65:57:4b:29:ee:ba:9a:33:13:7a:73:5d:15:48:
         ca:6e:37:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:27:14 2025 by rpki-client