Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec2240cc-d515-4cf6-9c7a-914117fee035/e5380eca-3a33-3f78-8a68-959ba62a5d27.roa
File:                     e5380eca-3a33-3f78-8a68-959ba62a5d27.roa (raw, json)
Hash identifier:          F+ksnQXHJYWDxtbQWC74z1n0Ev+2eeLw9rloSV0raas=
Subject key identifier:   80:C3:AF:11:4A:FA:B3:DA:9A:D1:C7:E2:58:79:6E:DA:F9:33:C2:50
Certificate issuer:       /CN=ec2240cc-d515-4cf6-9c7a-914117fee035
Certificate serial:       010D0C9F432858483E1ABCAEB885ABC0B462FB00
Authority key identifier: 05:4C:1F:37:3D:4E:5C:1E:4A:67:7A:6F:F0:BB:95:55:B9:BF:49:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec2240cc-d515-4cf6-9c7a-914117fee035.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec2240cc-d515-4cf6-9c7a-914117fee035/e5380eca-3a33-3f78-8a68-959ba62a5d27.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     46346
IP address blocks:        66.163.209.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:bc:ae:b8:85:ab:c0:b4:62:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec2240cc-d515-4cf6-9c7a-914117fee035
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=012ef1b0-2853-4b71-b5dc-13dbd49cb7d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b4:d1:d5:52:d1:4a:5b:4d:3d:14:86:80:c6:
                    9d:8c:1b:76:27:2c:0d:a9:8b:c5:ad:26:94:cc:ed:
                    78:53:46:1a:cb:87:e7:8d:5c:48:03:64:f0:0f:51:
                    43:f6:43:79:17:aa:6c:7f:8f:11:fd:b1:53:87:e1:
                    2e:06:78:10:fb:51:39:c1:ff:dd:f5:fa:84:6a:ed:
                    67:de:34:52:3f:c8:5d:6a:68:41:ff:a1:52:32:e1:
                    9f:12:e9:ec:d4:2e:10:98:56:a1:64:ef:14:ee:e9:
                    c5:e6:7f:41:80:af:01:3f:a3:77:98:4f:37:75:74:
                    63:5a:96:c7:5e:a4:7a:c7:da:13:42:b9:c8:b3:06:
                    a1:24:1f:3e:6d:4a:39:3c:84:d0:0c:d5:0a:dd:dc:
                    55:23:dd:42:96:46:03:d4:c5:4b:ac:5a:7c:cd:b0:
                    15:6e:a4:8c:08:f1:52:fc:03:01:d8:97:cf:69:bc:
                    d6:4f:1d:0d:7e:b8:15:77:09:e2:26:c5:d8:b4:b9:
                    f5:a7:12:b9:d9:62:26:bc:0a:5b:68:97:98:89:06:
                    7a:7b:48:9c:a4:16:43:87:14:5c:fb:b1:49:45:ab:
                    5a:79:be:52:ad:23:80:25:96:ae:39:0f:db:9b:3a:
                    f5:55:a5:f0:2a:dc:c0:f4:c3:94:c8:73:2a:6f:af:
                    09:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C3:AF:11:4A:FA:B3:DA:9A:D1:C7:E2:58:79:6E:DA:F9:33:C2:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec2240cc-d515-4cf6-9c7a-914117fee035/e5380eca-3a33-3f78-8a68-959ba62a5d27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec2240cc-d515-4cf6-9c7a-914117fee035/ec2240cc-d515-4cf6-9c7a-914117fee035.crl

            X509v3 Authority Key Identifier:
                keyid:05:4C:1F:37:3D:4E:5C:1E:4A:67:7A:6F:F0:BB:95:55:B9:BF:49:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec2240cc-d515-4cf6-9c7a-914117fee035.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.163.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:2d:2f:e5:71:da:c1:9a:f2:60:b1:4a:4c:5f:4d:b8:c8:64:
         51:c5:b2:db:31:a0:ad:6e:7f:ef:45:12:1f:e6:9b:b9:5f:60:
         b5:db:7d:2b:16:ef:c5:a2:40:0b:fc:df:ee:48:56:6c:2b:0a:
         20:fe:9f:e4:d2:5f:7e:2f:eb:7d:2f:42:8f:af:dc:f8:9f:06:
         68:ad:11:4f:0a:67:77:93:d7:0a:b1:63:ec:1c:b7:c6:e9:b2:
         09:0e:91:78:b6:94:36:37:1b:ed:77:3d:e1:fd:4c:02:2d:2b:
         37:ff:5c:11:95:f6:8f:32:20:83:81:5f:97:02:e6:fa:a4:52:
         be:28:f8:aa:db:19:4c:27:66:2e:f5:b1:1d:6c:3b:c0:44:2d:
         26:fd:e4:5d:cb:4d:e7:95:51:32:51:9f:89:bf:d0:10:7d:f9:
         61:48:e5:9d:ec:5e:55:1a:74:6f:8b:c5:53:06:37:15:a6:80:
         25:48:a8:5b:8f:b6:9b:4f:2f:88:60:cc:27:f6:ff:78:46:66:
         11:b7:4b:dd:ba:d6:98:79:f5:aa:cc:a7:68:86:f7:39:02:31:
         dc:72:f6:6f:84:61:76:c6:9d:ae:7d:3a:0b:4d:a2:2b:1d:ed:
         5f:ab:6a:e6:ec:f8:cf:cc:2f:e9:25:59:10:b3:f5:0c:09:5b:
         e5:85:09:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:07:13 2025 by rpki-client