Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/843a7bc0-ba40-3899-a79f-a86d4c85c631.roa
File:                     843a7bc0-ba40-3899-a79f-a86d4c85c631.roa (raw, json)
Hash identifier:          f3g5EckeEAjXEewhL74nZcnLy7lauuov7/H05d6O4AA=
Subject key identifier:   52:51:F4:2D:62:3D:2A:95:96:EE:D7:B6:F5:CE:03:C4:F6:33:4A:9D
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858484C10BF5E2494E572086B7C80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/843a7bc0-ba40-3899-a79f-a86d4c85c631.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     26383
IP address blocks:        166.88.164.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:bf:5e:24:94:e5:72:08:6b:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=f0e31d84-d559-4b1b-be67-cbcfe771f6ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ed:c5:ec:05:c0:43:cb:43:2e:e8:18:06:61:
                    aa:7e:0b:f0:83:cb:17:c2:15:40:8a:45:34:ff:e2:
                    74:b7:30:fb:35:00:df:cb:0d:7d:8d:33:1d:a6:b3:
                    2e:7c:1d:00:ca:5b:4d:1e:58:fb:97:e2:c7:a8:e6:
                    28:42:76:0d:ae:d0:28:73:61:bf:f5:f4:db:36:b0:
                    6c:ce:fe:4c:bd:a1:30:01:aa:54:de:87:da:9a:8e:
                    fb:f5:94:f1:b4:5f:83:dd:fd:79:45:21:d6:dc:67:
                    73:fc:ae:d2:ab:bc:45:f5:f5:b6:38:41:0e:9f:e3:
                    bb:4f:40:95:5a:5b:9d:24:ad:e8:3a:a6:1f:08:2a:
                    40:91:1a:e1:c7:1a:d9:f9:73:c0:94:b2:2f:9e:76:
                    40:88:87:0b:a5:61:fe:ef:81:51:9e:00:df:e5:c9:
                    6b:02:c4:76:fc:92:a3:57:04:d3:4f:88:be:fe:56:
                    cd:67:20:17:54:3a:95:71:10:73:19:22:19:8e:7a:
                    30:83:17:97:a5:8c:bd:db:58:73:c7:d2:24:c0:6a:
                    7b:f9:99:04:1e:13:55:39:fe:27:aa:94:73:4a:cc:
                    ad:bd:ae:10:27:4d:38:c4:17:d0:36:ed:39:22:47:
                    8f:b6:b5:58:d7:de:8f:91:b4:ed:d2:71:5d:a7:db:
                    ba:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:51:F4:2D:62:3D:2A:95:96:EE:D7:B6:F5:CE:03:C4:F6:33:4A:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/843a7bc0-ba40-3899-a79f-a86d4c85c631.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:f7:69:8e:eb:8b:7f:3a:a4:41:36:d0:fb:f6:4a:dc:b3:a0:
         92:b5:dd:9c:15:2d:4b:d6:4a:6b:ce:89:9c:03:ae:2f:ec:db:
         4a:4a:50:e5:0e:09:fd:14:db:fa:21:5c:af:0d:b7:77:5d:6f:
         5c:5e:36:49:93:1c:0a:81:b0:69:1c:a4:48:f3:29:7e:5c:96:
         8f:00:b8:44:f1:c4:b1:8e:a7:03:86:c6:c5:9c:2b:88:3d:72:
         aa:b6:27:1b:46:ac:b1:53:7f:0f:f5:6a:fc:7f:15:6d:7e:d6:
         71:a7:5f:1b:6e:96:13:9a:0c:62:84:0d:27:a5:df:27:65:3c:
         76:95:27:af:96:cf:41:2c:f9:11:37:c6:24:a3:5b:8d:e7:6b:
         0e:8f:d9:28:a9:c0:93:3a:48:dc:91:30:c4:b1:5a:d6:77:59:
         08:67:ea:48:41:c8:6a:fe:63:88:24:b9:58:5f:11:0f:fd:88:
         74:ff:0c:19:b8:a9:8e:ac:65:67:ff:44:4a:93:71:33:80:5c:
         21:9c:52:1b:ce:a8:eb:38:dd:64:79:2d:a3:e1:e8:be:ae:b4:
         da:56:22:af:d2:d8:40:42:03:1f:94:73:ef:4b:bd:cd:2c:4c:
         de:01:f2:a7:60:aa:da:dd:83:ad:4f:f8:8a:25:c0:54:90:43:
         5f:a0:ad:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:33:30 2025 by rpki-client