Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e774ae0c-ce9b-34cd-b151-96a5aceaa589.roa
File:                     e774ae0c-ce9b-34cd-b151-96a5aceaa589.roa (raw, json)
Hash identifier:          0V1rsCfyIBF7dOInmTyqxFNFp3LFBFyqosgVbO02TRs=
Subject key identifier:   80:B5:20:7A:64:15:94:61:92:8E:6B:BE:84:D6:62:46:28:31:61:9D
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F432858481C9A8BE421AE620C4460E200
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e774ae0c-ce9b-34cd-b151-96a5aceaa589.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     19905
IP address blocks:        64.18.66.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:8b:e4:21:ae:62:0c:44:60:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=4a553a33-8249-490a-989e-9c0d6431794c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:61:d1:92:0b:80:3c:ef:f3:96:c8:ef:a1:bf:
                    0b:cc:81:72:24:14:e5:7b:b5:c5:28:22:c9:e7:70:
                    c2:ec:4a:c9:7a:7c:ff:d8:c7:d0:d5:f7:97:b2:4e:
                    48:3a:13:8d:91:50:df:60:9f:9f:0f:45:ba:48:f4:
                    c6:d3:49:d6:bb:c4:a2:fb:c0:63:98:56:7d:9b:21:
                    7b:13:fe:41:b8:d2:f9:03:b9:28:9e:48:79:39:e0:
                    92:69:3e:8d:be:60:5c:0e:36:1f:72:58:71:5e:1e:
                    4a:35:ec:52:4d:e3:e1:85:09:77:31:ab:af:a8:16:
                    1d:53:98:28:e5:e0:15:2d:e0:c9:e0:9e:ea:51:d2:
                    82:86:5f:69:c9:ec:e9:5e:63:1b:ea:91:44:51:69:
                    09:fc:43:41:2d:b7:28:e5:1f:99:db:66:5a:d9:1e:
                    64:41:7e:f6:00:43:60:cb:69:d9:d7:d2:48:d1:98:
                    66:36:1f:80:b2:11:62:5b:08:60:4c:f1:9e:1f:04:
                    57:98:ab:14:aa:ba:43:4c:31:5b:47:47:8f:e5:40:
                    98:bc:6b:f2:c8:70:bc:b7:f8:a3:d2:30:71:af:21:
                    ad:09:09:b1:fe:91:60:10:60:d7:66:22:77:42:52:
                    de:81:ec:5f:f0:2f:f7:33:43:11:fe:44:57:5f:5c:
                    ba:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B5:20:7A:64:15:94:61:92:8E:6B:BE:84:D6:62:46:28:31:61:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e774ae0c-ce9b-34cd-b151-96a5aceaa589.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.18.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:b0:e1:48:68:06:4e:39:5b:e0:c8:f8:f2:27:be:21:5c:71:
         d0:36:33:ec:93:67:71:00:07:a6:89:30:6e:50:71:5b:09:47:
         50:33:6c:65:2e:aa:43:f7:7b:e3:2d:8b:a5:18:28:5f:97:1a:
         0d:c0:63:e0:22:16:c7:ee:cd:35:2f:53:39:28:f5:db:46:ed:
         1d:8e:c5:18:31:e2:69:98:eb:ea:21:ef:3e:6e:86:5a:88:f5:
         90:2c:a1:3c:b6:ba:22:4d:e3:b4:f8:b0:33:5d:31:86:00:67:
         6d:ef:3c:b8:f9:8a:cd:a1:f6:52:fa:fa:7e:09:b6:a6:d6:8a:
         de:ad:7a:12:83:91:e4:de:32:85:1f:ed:9a:dd:05:75:18:04:
         f5:1e:7e:b4:67:70:4b:e9:12:8d:7a:69:51:93:e3:cf:99:40:
         99:74:16:db:1a:ea:f3:66:9d:10:cb:89:7e:51:1c:36:f5:71:
         20:91:b2:4b:b8:89:f0:4f:72:3d:0a:ff:5b:8b:85:32:01:67:
         8a:c6:7b:17:39:4e:f7:22:36:59:bb:3d:80:67:32:7c:b4:8f:
         33:2b:e1:1c:93:de:d4:6c:80:fe:90:fb:30:4c:e2:78:a4:d4:
         88:a1:50:7e:53:4e:09:dd:1c:51:78:f8:9d:00:6d:3c:bd:8d:
         47:c3:9a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:56:47 2025 by rpki-client