Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ac48ea22-3c5a-3b43-a42b-7bb7d1e8f2a3.roa
File:                     ac48ea22-3c5a-3b43-a42b-7bb7d1e8f2a3.roa (raw, json)
Hash identifier:          PA+Yh+q6eJxzlr1kzTaz+oI47nvtXG8NIbfcT4sNrfw=
Subject key identifier:   8B:32:DF:B7:98:60:03:12:FF:B1:73:B6:97:A3:01:45:63:AF:B6:1F
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F432858485F9ADDF9AEF7C0A7DF5BB940
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ac48ea22-3c5a-3b43-a42b-7bb7d1e8f2a3.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     29802
IP address blocks:        66.206.0.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:dd:f9:ae:f7:c0:a7:df:5b:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=d2ce42a6-607f-4442-8f83-c322a484cd78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6e:a3:a4:a9:9c:00:bf:92:58:cd:04:28:ae:
                    e4:d2:fd:15:cd:41:31:b9:88:5d:00:78:b5:fd:3b:
                    a0:93:a7:d1:7c:12:09:23:ee:e7:f0:5e:32:5a:8c:
                    a9:47:35:d9:59:09:30:de:76:0c:a1:66:51:d3:32:
                    33:bd:c7:16:eb:f4:7e:53:d9:25:11:f5:13:d3:c9:
                    6e:f0:f9:45:71:20:83:21:86:93:a9:22:ac:70:8a:
                    7e:22:88:f9:6e:b8:ac:ce:70:c1:54:50:b7:e7:32:
                    46:ad:6d:fb:cc:de:a8:cb:b5:5c:fa:61:c6:77:3e:
                    d4:c5:39:18:ec:d1:b6:9d:b3:9d:7a:22:3f:6d:0d:
                    13:5e:f6:86:eb:5d:7b:46:d8:64:c0:9b:a0:48:fd:
                    d1:e7:7c:bd:a9:fa:68:a2:81:66:33:c0:63:ee:f5:
                    f2:cf:f7:83:86:32:7d:52:5c:60:40:38:d7:24:0c:
                    ab:c8:b6:ae:3f:dd:0c:6c:70:d3:76:ba:bc:69:fb:
                    35:92:8c:08:ee:80:8d:6b:51:f3:7a:c6:d9:ae:46:
                    a7:0a:ed:7c:5b:a5:0f:8d:47:76:10:ba:f7:55:3a:
                    2b:88:fc:30:26:f6:61:0a:26:5b:56:3f:5b:16:6c:
                    e5:a2:0f:3d:f3:78:38:87:ca:b2:6e:74:1c:be:89:
                    54:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:32:DF:B7:98:60:03:12:FF:B1:73:B6:97:A3:01:45:63:AF:B6:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ac48ea22-3c5a-3b43-a42b-7bb7d1e8f2a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.206.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:20:ac:81:b5:75:5a:28:10:5c:19:ef:27:42:2d:23:30:90:
         11:c4:1f:74:aa:73:7e:13:04:f4:50:fa:a0:c8:48:28:c4:2e:
         37:72:cc:18:70:75:1c:4f:3a:e3:00:d4:eb:86:6b:84:39:35:
         79:10:8e:ee:cb:32:d3:88:24:25:34:47:89:fc:fe:d8:d5:0a:
         e5:2d:80:8c:69:31:98:d4:fa:60:fa:43:9b:80:21:b3:69:97:
         0b:1c:1c:d4:17:a8:02:8e:6c:ab:7b:ee:af:2e:4b:b8:70:6c:
         48:a8:c3:8f:d0:2e:a4:9d:b0:7c:b0:63:3f:64:21:4c:01:75:
         07:0c:54:30:31:3a:37:bc:54:04:96:a6:c2:52:b4:36:bd:df:
         10:af:29:4d:84:61:ab:44:68:5f:dd:dc:d4:15:8f:ee:e1:25:
         3d:18:36:47:11:44:33:91:ee:ef:7d:9c:7e:10:85:49:b7:11:
         d0:13:b8:05:94:7e:07:d0:42:2a:50:23:44:c9:4c:97:f2:25:
         02:c1:e3:76:ee:78:13:0e:db:99:72:39:b1:6b:ba:67:a4:4e:
         1c:77:16:82:d5:84:0d:db:74:08:e2:09:13:63:7f:6c:84:ab:
         91:27:bd:d5:1b:3a:9e:20:c4:c1:b1:f2:ab:20:e7:42:48:9d:
         ad:dc:31:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:45:46 2025 by rpki-client