Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a/85bd442b-ff54-31da-8177-81f7c28bd362.roa
File:                     85bd442b-ff54-31da-8177-81f7c28bd362.roa (raw, json)
Hash identifier:          ZnzmDYdawejAet+NcKUJY2wZgNWUl5FX081n3ZYX/qs=
Subject key identifier:   2F:47:2B:CA:14:50:40:7E:72:6B:2C:D2:F7:5D:12:26:79:A2:64:09
Certificate issuer:       /CN=6fd31e81-6599-4bac-8a74-7bbe9233374a
Certificate serial:       010D0C9F43285847EC1E384F0528CC1CEF8EB980
Authority key identifier: 0C:99:41:69:D2:E3:D1:01:11:72:83:86:2D:E7:07:E4:D0:14:29:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a/85bd442b-ff54-31da-8177-81f7c28bd362.roa
Signing time:             Mon 18 Nov 2024 17:11:37 +0000
ROA not before:           Mon 18 Nov 2024 17:11:37 +0000
ROA not after:            Sun 16 Feb 2025 17:11:37 +0000
asID:                     16509
IP address blocks:        66.218.6.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ec:1e:38:4f:05:28:cc:1c:ef:8e:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fd31e81-6599-4bac-8a74-7bbe9233374a
        Validity
            Not Before: Nov 18 17:11:37 2024 GMT
            Not After : Feb 16 17:11:37 2025 GMT
        Subject: CN=c93dea8a-2b26-4af2-a558-8ff154dbd8a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3f:27:3f:13:fd:b0:b4:a4:15:1f:02:3c:a8:
                    4b:4c:3c:55:79:6e:5e:40:62:8d:27:9e:bd:6d:67:
                    25:5b:79:3f:33:fe:cc:59:5d:1c:c2:39:3f:44:15:
                    c1:6d:53:49:aa:69:50:18:4e:d0:9b:df:11:40:a2:
                    53:b6:a2:8f:ba:03:45:56:99:7f:71:72:f3:15:91:
                    8a:c5:28:3d:64:dd:bf:ef:80:7d:51:e1:b8:aa:a6:
                    7c:30:20:3f:cc:3d:90:71:fa:a3:c8:74:82:ea:39:
                    4b:9c:0f:dc:78:52:88:21:dc:79:d7:31:9f:e8:9e:
                    9c:e6:d3:9b:48:a3:16:4a:54:e1:a6:c2:3b:10:cf:
                    3f:b9:12:06:6f:76:8d:b0:18:2b:85:41:49:64:31:
                    a3:61:ca:21:2d:9a:5d:b2:e8:81:e3:d2:b0:83:46:
                    98:8e:94:97:bf:45:98:3b:6e:ea:21:aa:20:5b:33:
                    78:59:ca:77:f1:38:25:40:0c:ad:8f:7e:6b:91:51:
                    34:42:3e:29:9e:fa:55:b9:7a:51:e3:12:cd:14:d9:
                    65:20:f9:86:fd:e6:20:34:1b:e4:29:04:4d:ac:b7:
                    de:7a:37:03:f4:61:18:fb:6f:41:02:9f:44:62:04:
                    27:2d:d4:b4:68:ef:24:7a:b6:69:5c:a2:9b:45:55:
                    cd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:47:2B:CA:14:50:40:7E:72:6B:2C:D2:F7:5D:12:26:79:A2:64:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a/85bd442b-ff54-31da-8177-81f7c28bd362.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a/6fd31e81-6599-4bac-8a74-7bbe9233374a.crl

            X509v3 Authority Key Identifier:
                keyid:0C:99:41:69:D2:E3:D1:01:11:72:83:86:2D:E7:07:E4:D0:14:29:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.218.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:49:73:0e:42:7c:99:c9:b6:48:72:37:3f:be:a5:f0:4b:0a:
         bf:90:c4:e1:db:ea:c3:5d:26:5a:47:7d:17:38:ec:cc:da:82:
         ba:85:dd:f8:19:ca:d6:6c:c6:7e:63:39:94:56:ed:80:28:f7:
         47:ac:3e:53:4d:91:a9:f8:f8:50:b6:97:ca:f9:39:82:f2:b5:
         bb:80:fc:9d:55:e9:5b:bd:ce:5d:96:db:c4:c3:ed:eb:7d:ad:
         b5:8f:b9:f4:b0:6c:e0:89:a4:96:34:bf:ab:1d:b9:f9:90:e1:
         02:4e:ad:47:3f:bb:32:8e:64:a2:86:d6:2d:57:49:ef:c9:52:
         ba:9d:97:5a:7e:5e:17:62:a7:7b:b8:ff:4d:bf:d2:e2:09:fe:
         5e:f5:6a:d8:29:63:3d:f7:09:3c:b6:81:4c:e7:bd:f9:45:41:
         ad:ca:43:e8:d4:6e:ea:cb:f4:34:4f:91:c2:05:f3:4f:fa:16:
         9f:dd:61:f1:e9:4e:dc:f9:04:1e:63:34:cf:5b:ab:cd:2a:3a:
         de:87:cb:50:3c:3b:61:4d:90:9e:2f:5e:4d:74:69:de:17:8d:
         17:4d:33:8d:05:65:ad:3a:f8:ba:43:7e:d9:93:35:9b:06:1c:
         ea:0b:95:5b:ad:52:7f:e5:d7:c3:dc:eb:41:97:00:59:b3:9d:
         2e:6f:40:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfsHjhPBSjMHO+OuYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmZkMzFlODEtNjU5OS00YmFjLThhNzQtN2JiZTkyMzMz
NzRhMB4XDTI0MTExODE3MTEzN1oXDTI1MDIxNjE3MTEzN1owLzEtMCsGA1UEAxMk
YzkzZGVhOGEtMmIyNi00YWYyLWE1NTgtOGZmMTU0ZGJkOGE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD8nPxP9sLSkFR8CPKhLTDxVeW5eQGKNJ569
bWclW3k/M/7MWV0cwjk/RBXBbVNJqmlQGE7Qm98RQKJTtqKPugNFVpl/cXLzFZGK
xSg9ZN2/74B9UeG4qqZ8MCA/zD2QcfqjyHSC6jlLnA/ceFKIIdx51zGf6J6c5tOb
SKMWSlThpsI7EM8/uRIGb3aNsBgrhUFJZDGjYcohLZpdsuiB49Kwg0aYjpSXv0WY
O27qIaogWzN4Wcp38TglQAytj35rkVE0Qj4pnvpVuXpR4xLNFNllIPmG/eYgNBvk
KQRNrLfeejcD9GEY+29BAp9EYgQnLdS0aO8kerZpXKKbRVXNgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC9HK8oUUEB+cmss0vddEiZ5omQJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82ZmQz
MWU4MS02NTk5LTRiYWMtOGE3NC03YmJlOTIzMzM3NGEvODViZDQ0MmItZmY1NC0z
MWRhLTgxNzctODFmN2MyOGJkMzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNmZkMzFlODEtNjU5OS00YmFjLThh
NzQtN2JiZTkyMzMzNzRhLzZmZDMxZTgxLTY1OTktNGJhYy04YTc0LTdiYmU5MjMz
Mzc0YS5jcmwwHwYDVR0jBBgwFoAUDJlBadLj0QERcoOGLecH5NAUKaswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS82ZmQzMWU4MS02NTk5LTRiYWMtOGE3NC03YmJl
OTIzMzM3NGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQtoGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFtJcw5CfJnJtkhyNz++pfBLCr+QxOHb6sNdJlpHfRc47MzagrqF3fgZ
ytZsxn5jOZRW7YAo90esPlNNkan4+FC2l8r5OYLytbuA/J1V6Vu9zl2W28TD7et9
rbWPufSwbOCJpJY0v6sdufmQ4QJOrUc/uzKOZKKG1i1XSe/JUrqdl1p+Xhdip3u4
/02/0uIJ/l71atgpYz33CTy2gUznvflFQa3KQ+jUburL9DRPkcIF80/6Fp/dYfHp
Ttz5BB5jNM9bq80qOt6Hy1A8O2FNkJ4vXk10ad4XjRdNM40FZa06+LpDftmTNZsG
HOoLlVutUn/l18Pc60GXAFmznS5vQB8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:17:51 2025 by rpki-client