Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/0d758ae1-58b0-3646-ba88-3d0811f79226.roa
File:                     0d758ae1-58b0-3646-ba88-3d0811f79226.roa (raw, json)
Hash identifier:          2hJcoH5LD4Aztc4yk6PwzYEz0GZq2Di3dE0dLjCH4HA=
Subject key identifier:   F0:07:5F:21:31:C0:1C:46:82:49:E4:4F:E8:36:D8:59:BC:50:DC:1F
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F432858481C9A95318D8989C29CCEDB80
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/0d758ae1-58b0-3646-ba88-3d0811f79226.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     30059
IP address blocks:        66.42.206.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:95:31:8d:89:89:c2:9c:ce:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=99ea7dd8-9cba-49fb-8c1b-18acee383707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ce:65:e2:6f:7f:c5:6c:fc:d6:cf:f5:b9:a3:
                    30:f5:22:3c:0a:d3:b7:e5:24:02:5b:a5:f3:8f:3c:
                    42:b9:10:8c:1e:d3:4e:a0:5e:fa:19:f4:9e:a0:b9:
                    93:7a:38:9e:1a:6b:5e:9d:3c:39:ce:27:17:e6:80:
                    fc:97:c9:ae:36:da:03:8f:d8:4c:de:a7:a3:e4:ae:
                    1a:05:c2:98:9b:e2:f0:ab:e6:f0:eb:24:50:7f:a1:
                    20:03:d5:93:ca:0f:12:e9:45:98:bd:74:71:cb:14:
                    0c:71:f2:50:2b:b5:04:c8:4c:25:21:dc:2d:3c:57:
                    84:c4:79:db:57:e9:38:6c:4d:01:00:b1:a1:2f:8a:
                    ee:49:52:44:4c:7b:cd:7d:d8:1c:8a:55:8d:6a:4a:
                    a2:ad:92:c3:3c:c1:cc:62:f3:2b:38:8a:2a:b8:ed:
                    60:00:7c:43:08:3a:9b:16:24:eb:90:e6:ee:ac:cb:
                    00:1d:e9:48:34:c2:01:16:0f:69:11:9e:a3:d7:e6:
                    05:70:2b:a4:15:dc:10:14:41:e4:a4:21:eb:97:18:
                    35:10:4c:93:d0:33:1b:2a:d7:c1:3c:5b:08:a3:d7:
                    28:bd:f6:53:4d:ee:6f:a8:29:c7:4b:df:c5:dd:9f:
                    5f:df:ee:79:20:2f:8b:06:fa:50:00:b4:d9:62:6f:
                    00:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:07:5F:21:31:C0:1C:46:82:49:E4:4F:E8:36:D8:59:BC:50:DC:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/0d758ae1-58b0-3646-ba88-3d0811f79226.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.42.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:4b:16:9d:93:bc:ef:b8:05:03:34:17:6f:aa:3d:71:ce:96:
         eb:3d:26:a7:39:c0:85:6d:c3:9e:09:25:ed:32:c1:5d:2b:38:
         ba:d9:6b:23:d7:68:3b:fa:7d:1e:ed:d8:92:54:59:17:0f:83:
         6e:d4:5d:ed:d9:b6:21:92:f5:ac:82:a7:ab:28:62:b7:5b:ad:
         6c:ed:3e:4a:76:eb:cb:08:89:3b:6e:c0:91:ba:7e:c9:d3:16:
         04:5a:84:e0:d8:73:e8:a0:f2:59:9b:bb:83:c7:23:7f:4b:ad:
         ad:ae:5b:2c:7c:07:71:ee:16:5d:fe:7e:d6:a8:b9:58:e9:ed:
         59:52:a2:55:05:d5:aa:53:ac:fc:64:27:d2:79:74:b3:21:d0:
         65:61:e5:80:39:99:93:1a:e2:a9:d5:1d:32:c8:ad:d9:d6:b6:
         91:2c:ca:e8:eb:1f:91:2a:b9:40:87:db:98:49:c2:0d:4c:92:
         52:6e:d5:61:3a:97:f9:b2:2f:0f:d5:5f:49:0f:a3:65:44:a2:
         71:eb:b5:af:ea:f6:95:d8:15:f0:37:de:7c:4b:94:82:26:ee:
         4a:36:76:c0:db:73:20:ac:52:3c:68:cf:51:94:45:d0:1e:17:
         25:3e:fb:ef:e7:88:5d:42:9b:19:3b:7c:02:18:40:6a:dc:68:
         da:30:3d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:04:13 2025 by rpki-client