Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9aa6cf76-4287-3ac7-9869-33b7749b2f75.roa
File:                     9aa6cf76-4287-3ac7-9869-33b7749b2f75.roa (raw, json)
Hash identifier:          E7wrnHIm/fGnpSWrDI19ADBHrxailw3TC3nGMbxSARA=
Subject key identifier:   02:5A:5C:9B:FD:61:17:78:AA:3B:60:1E:DD:1F:9F:EF:EA:8C:73:E9
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584854701C6A81EA68B9E1342900
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9aa6cf76-4287-3ac7-9869-33b7749b2f75.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     214196
IP address blocks:        166.88.225.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:1c:6a:81:ea:68:b9:e1:34:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=9ce72279-812e-481d-857d-be49e055f091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2e:b8:01:73:7a:60:27:0c:58:8f:0a:ea:a4:
                    84:e0:2e:4d:50:5c:62:4e:2b:61:5b:d1:df:fb:4c:
                    37:4d:56:9e:b6:a6:34:ee:e2:3f:2f:06:06:78:be:
                    b6:6c:ec:be:ba:7a:73:e3:66:73:af:ac:f1:fb:05:
                    57:91:4e:c7:4e:7b:6b:c2:0b:c2:42:f0:f4:81:9d:
                    4f:d9:97:66:c2:f0:1f:68:2e:88:cf:b6:d5:5f:c8:
                    60:3d:2f:64:b4:70:a0:7b:76:c6:77:ed:76:3d:91:
                    99:51:08:28:1e:90:47:42:60:3b:b3:8c:ea:ed:7c:
                    31:93:9b:09:2c:d2:0d:1b:e0:a0:13:17:bb:07:60:
                    5d:4a:cd:ab:e4:dd:70:a8:4d:40:e9:d2:38:9c:b2:
                    26:73:f9:ee:a3:c8:1a:af:61:5c:16:ab:0e:39:32:
                    95:fb:07:38:29:c8:60:2a:13:e5:15:8b:79:87:d7:
                    21:a6:2e:70:78:3a:de:7c:8f:34:1e:5a:2c:dd:a4:
                    10:d7:7a:66:a3:7e:1d:f7:5a:c5:25:be:5a:18:b1:
                    42:e8:8f:9c:d7:82:f1:68:57:1c:21:e3:29:80:23:
                    5a:ae:ad:38:f4:27:dc:6d:b3:4a:ab:0f:c4:54:de:
                    bd:18:08:14:6f:1b:90:ea:10:03:16:b7:3a:3c:dd:
                    ed:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5A:5C:9B:FD:61:17:78:AA:3B:60:1E:DD:1F:9F:EF:EA:8C:73:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9aa6cf76-4287-3ac7-9869-33b7749b2f75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:5f:62:67:2f:9a:e1:4d:0c:bd:d9:93:59:45:b4:42:ee:f2:
         5a:03:ea:91:75:90:9a:c2:66:63:9e:ae:1d:28:e6:38:5b:78:
         a7:fb:27:5d:3a:15:30:ae:86:b1:a3:12:f5:5b:20:75:42:36:
         3b:74:92:6a:1d:3d:bb:a4:8e:9b:5e:b2:a2:4e:46:71:24:91:
         6d:5b:3a:97:8c:58:41:83:88:b6:c4:1e:eb:0f:a9:fc:64:22:
         96:f9:8a:65:83:50:23:de:96:07:70:0f:84:56:1e:76:ce:61:
         17:a9:cb:78:b8:00:5e:d6:48:e3:cf:c5:5e:e6:ca:d4:31:0d:
         69:e1:c0:bc:12:ea:e2:77:6c:a1:ba:8a:a0:f0:41:75:22:d9:
         0b:49:d8:f9:75:dd:17:51:bc:8f:84:c7:95:0d:1e:87:12:bb:
         0e:68:7c:33:27:6b:9f:9b:f1:5f:10:7e:23:9d:01:c1:a8:6e:
         e4:8c:6e:2f:4f:dc:4f:e0:8e:b8:c4:b3:09:ca:13:a4:3f:bf:
         b2:79:4e:e2:32:9b:c8:12:80:f4:4b:2e:91:78:fc:1c:6a:6d:
         da:5f:40:73:87:9a:94:1d:5a:f8:d3:db:af:f9:d6:63:22:28:
         be:51:04:09:3a:c5:ca:cc:26:3e:09:83:65:cc:92:ee:58:c7:
         7e:2f:33:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:56:41 2025 by rpki-client