Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/4e15f047-c0ae-3fe7-a24b-7a26116af1a6.roa
File:                     4e15f047-c0ae-3fe7-a24b-7a26116af1a6.roa (raw, json)
Hash identifier:          pIlnpy8HCXaNDLp/4Pobg9FLEyMe4/y95RQOruzw3FE=
Subject key identifier:   2E:B2:C2:C4:D3:94:D5:14:32:98:8C:DB:F9:7A:83:6C:25:A4:A7:F8
Certificate issuer:       /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97
Certificate serial:       010D0C9F43285848417A38934E4CDABE6F338C00
Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/4e15f047-c0ae-3fe7-a24b-7a26116af1a6.roa
Signing time:             Thu 19 Dec 2024 07:00:41 +0000
ROA not before:           Thu 19 Dec 2024 07:00:41 +0000
ROA not after:            Wed 19 Mar 2025 06:00:41 +0000
asID:                     6597
IP address blocks:        66.163.224.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:41:7a:38:93:4e:4c:da:be:6f:33:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97
        Validity
            Not Before: Dec 19 07:00:41 2024 GMT
            Not After : Mar 19 06:00:41 2025 GMT
        Subject: CN=55f321f4-1c58-4d0b-b5c8-0e86bd680b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7f:9d:f9:ff:fb:73:33:b2:19:c3:aa:29:11:
                    3a:32:bd:f4:d1:72:8b:e8:a7:98:c2:17:16:61:8b:
                    39:7c:52:82:a4:93:fb:3a:11:f3:c9:92:20:40:04:
                    37:c1:3b:f6:96:04:70:1c:79:a0:43:89:80:3c:21:
                    f0:5c:ee:33:7b:d5:46:ba:06:35:0d:ac:51:9f:a0:
                    de:25:49:31:1a:69:2e:60:bf:44:c8:3c:ca:73:a5:
                    1f:3a:39:ed:ed:3c:d2:e0:ca:ba:75:34:72:91:09:
                    e2:dc:03:44:7b:bd:26:5f:2f:ca:6c:cf:6d:80:ad:
                    43:38:c0:5d:94:45:ad:50:a7:f2:b4:c2:5b:ff:ee:
                    e2:d7:a9:2f:5d:97:9a:40:6c:27:9c:5e:89:94:9e:
                    99:ce:07:12:5e:ef:20:90:a6:d1:7c:86:98:7e:1f:
                    2b:de:1c:a4:b7:6a:52:9c:6a:91:a2:a8:49:e3:cc:
                    e5:3b:66:7e:60:b9:94:5c:13:df:f0:e3:ca:17:51:
                    ad:1e:e5:63:ad:13:80:ad:4b:be:80:1c:84:f8:25:
                    50:b8:76:7b:c9:9d:5b:f9:1d:3b:a6:b5:2c:80:4c:
                    e9:42:8b:22:b7:7a:d4:85:07:72:70:28:c0:15:59:
                    1c:92:84:f9:3e:a3:46:0d:12:fc:89:9b:f7:a8:1d:
                    bc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B2:C2:C4:D3:94:D5:14:32:98:8C:DB:F9:7A:83:6C:25:A4:A7:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/4e15f047-c0ae-3fe7-a24b-7a26116af1a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl

            X509v3 Authority Key Identifier:
                keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.163.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:fd:c5:42:5b:91:2b:41:03:49:dc:74:78:cb:50:9e:26:1b:
         7b:06:10:d6:d7:37:d4:25:f0:0c:34:15:be:50:7a:01:6a:18:
         5a:90:f1:14:62:fa:37:37:8a:e1:b3:d8:bf:63:1a:04:5e:0b:
         55:71:d3:5b:d0:60:d0:90:09:35:50:de:7a:90:30:ea:1f:4e:
         ea:5d:ce:72:2a:44:ee:d8:fb:d7:69:0d:8d:74:c7:cd:d3:ce:
         34:68:34:ba:dc:46:2a:5a:ea:e9:fa:11:13:22:8e:3f:40:74:
         0c:09:9b:07:4b:d3:f2:24:cb:08:ee:b4:80:7d:66:ec:fe:48:
         51:86:a1:1f:e4:c8:94:d0:19:20:c3:6c:13:0f:9e:9f:6b:c3:
         e7:07:71:92:91:47:ce:13:1d:fe:a2:e3:df:fe:a1:14:69:09:
         1d:0e:c9:20:ce:2f:37:99:0e:66:bc:ed:53:b8:e6:8f:1c:3a:
         74:5a:78:92:d6:5a:06:18:17:c8:b5:2d:f8:48:0b:7a:72:29:
         34:36:6b:c8:0c:b8:54:53:22:f3:88:2b:e6:57:92:3f:38:41:
         9c:9f:f4:5a:f0:46:1a:fa:f4:cf:a6:4b:a1:d6:4d:f4:36:30:
         ba:f3:22:6a:a6:a5:5b:56:5c:ac:f7:2d:e9:94:96:40:35:f7:
         7e:4e:0a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:11:42 2025 by rpki-client