Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/4a9ab8b7-7957-36fc-9d25-f11f15ac7c73.roa
File:                     4a9ab8b7-7957-36fc-9d25-f11f15ac7c73.roa (raw, json)
Hash identifier:          WEChNqdvpxkor/qL8V3a6qEtDeIhLky1EgBHgLrRbq4=
Subject key identifier:   8C:5A:4F:10:E7:FB:6D:D2:16:8A:F9:52:67:F1:DE:4D:8E:0D:F6:78
Certificate issuer:       /CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08
Certificate serial:       010D0C9F4328584882809C80E01B9DC29E912300
Authority key identifier: 62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/4a9ab8b7-7957-36fc-9d25-f11f15ac7c73.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     26703
IP address blocks:        66.102.222.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:9c:80:e0:1b:9d:c2:9e:91:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=850e951a-d264-4a44-8323-6e116c851db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:56:bb:dd:0c:ba:9d:12:6d:9e:c0:aa:77:47:
                    33:0c:d1:7c:ba:3e:b1:34:e3:03:a8:4e:41:20:0a:
                    90:04:a8:d1:a5:61:84:6f:d4:c3:16:6d:e8:37:15:
                    03:3d:09:63:e7:9d:75:47:7a:74:52:fa:72:21:f1:
                    82:16:44:6a:f2:9c:98:eb:3b:9d:c0:30:a0:84:92:
                    7b:13:99:af:7d:27:00:51:77:01:67:ba:f8:27:68:
                    8d:ee:da:84:f9:15:81:51:fa:ac:e3:56:73:db:e7:
                    d4:39:cf:c5:fb:76:63:8a:d7:2f:41:d7:3b:ee:b2:
                    a8:8e:b1:ec:23:bd:5b:72:f6:43:39:98:80:e2:93:
                    f0:d3:47:86:e0:6e:4e:53:6d:5f:4c:99:b8:8c:ec:
                    2c:73:78:5d:c0:1d:a4:44:9c:02:bc:7d:28:f4:65:
                    d9:50:3f:3f:d2:26:46:6b:36:3d:cd:f3:c8:5c:bc:
                    7b:99:dc:83:db:b0:63:99:1d:a9:9d:fd:f1:98:4a:
                    42:55:6d:1d:e0:30:ae:12:5c:02:2d:d7:bb:6f:b1:
                    8e:14:53:bb:51:a3:b1:0f:e4:f9:72:93:e4:18:2d:
                    ee:e4:a3:4c:14:9e:6a:3a:70:bf:d2:05:cb:51:a0:
                    f8:01:b1:b4:c0:db:0c:dc:1f:fa:87:fa:6b:64:af:
                    d4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5A:4F:10:E7:FB:6D:D2:16:8A:F9:52:67:F1:DE:4D:8E:0D:F6:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/4a9ab8b7-7957-36fc-9d25-f11f15ac7c73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl

            X509v3 Authority Key Identifier:
                keyid:62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.102.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:f0:32:b0:05:08:09:04:78:8c:01:5d:e1:ea:fc:f3:6e:df:
         fd:46:d8:62:af:6e:c9:71:5e:20:07:7b:b9:b2:1f:b6:e8:c5:
         8a:9d:48:f0:4d:c5:79:fb:a9:6a:1a:cd:4c:7f:65:fb:24:10:
         42:54:03:43:35:ca:15:69:2b:1a:71:be:c0:2a:8c:80:c2:29:
         40:f3:44:50:62:ae:22:22:ab:c0:0e:66:67:76:d0:9b:4c:0e:
         b2:cb:31:51:94:7b:54:d3:ab:95:be:87:2b:ea:95:30:64:7f:
         c0:87:d9:e9:73:de:b4:11:32:4c:61:32:bb:dd:39:f5:d7:b1:
         69:02:57:0e:37:de:35:cf:5d:87:4b:d0:54:28:a2:ae:22:a1:
         58:20:86:e6:b9:fc:c2:0a:ce:aa:ad:aa:a0:a6:40:51:05:bf:
         7e:dd:18:23:8f:1f:ff:de:0e:50:01:6b:dc:f2:a0:e9:8a:9b:
         4c:d4:2d:90:5a:3e:70:c3:e7:18:ad:9d:e0:da:0d:7c:d5:a8:
         1a:cf:b0:84:79:fb:93:d3:f8:e8:00:cb:73:8d:14:7d:74:de:
         34:e3:d2:71:58:8f:16:d0:95:c4:9c:cf:22:8a:13:b5:01:07:
         36:00:1b:53:d8:09:f7:62:2d:18:19:ff:7a:15:ae:ef:14:55:
         75:b3:95:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:00:36 2025 by rpki-client