Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/0faa3cb7-4224-31cd-a2a3-c2532ee47086.roa
File:                     0faa3cb7-4224-31cd-a2a3-c2532ee47086.roa (raw, json)
Hash identifier:          iJsmGcf+EpTKUsuDfi/oDpiQQVxVL2g6UcqCH09WA/I=
Subject key identifier:   36:A0:21:61:17:CE:6D:D1:FC:D9:ED:CE:87:DC:B0:8A:58:78:66:93
Certificate issuer:       /CN=24558553-b258-484a-bd6f-5e8b36c98065
Certificate serial:       010D0C9F432858481612CE3E56946BC6EF796180
Authority key identifier: 9E:01:D5:E4:F7:85:25:4D:C3:43:2A:E2:94:E9:43:3B:49:7A:F5:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/0faa3cb7-4224-31cd-a2a3-c2532ee47086.roa
Signing time:             Tue 03 Dec 2024 17:52:34 +0000
ROA not before:           Tue 03 Dec 2024 17:52:34 +0000
ROA not after:            Mon 03 Mar 2025 17:52:34 +0000
asID:                     396998
IP address blocks:        66.37.159.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:16:12:ce:3e:56:94:6b:c6:ef:79:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24558553-b258-484a-bd6f-5e8b36c98065
        Validity
            Not Before: Dec  3 17:52:34 2024 GMT
            Not After : Mar  3 17:52:34 2025 GMT
        Subject: CN=7ff1e8c3-50e2-4117-b62a-a10d6ae59e1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:57:9a:37:da:be:0d:70:94:f9:64:b9:13:1d:
                    34:4b:93:7c:6b:14:c6:be:10:a4:16:81:65:93:c6:
                    e8:cd:38:31:47:8d:4a:51:40:2d:35:10:d5:00:72:
                    fb:fc:b5:65:f6:58:74:84:d9:2d:fc:77:ed:e8:95:
                    97:3a:42:8f:3c:6a:7d:5f:3f:fc:e2:c7:51:6b:6c:
                    05:88:a6:b7:cf:ca:a2:91:ee:ea:55:93:0b:db:f5:
                    21:91:92:ce:cf:98:7a:85:55:cc:38:be:28:94:29:
                    b0:00:c5:47:b2:0f:9d:40:d3:fc:85:20:e0:30:45:
                    1e:b6:d5:2f:3d:2a:85:9f:b2:79:0d:38:9f:bb:a5:
                    50:e8:95:2a:8b:61:77:c5:62:37:f9:8a:6b:23:1d:
                    f9:cb:f8:51:4a:74:f2:72:ce:c5:64:60:42:7b:bf:
                    ff:16:43:de:37:8d:16:2f:89:d6:fb:3e:6b:89:92:
                    1d:d1:96:b2:9b:c4:32:d7:c4:6a:b4:b9:3f:42:bc:
                    b9:4c:cf:73:a9:10:1a:72:36:56:d4:bf:cc:2e:8c:
                    e7:bf:ed:13:f1:8e:05:84:53:7c:71:5f:d2:5c:fb:
                    76:2c:03:7d:5a:e4:d6:10:fb:34:05:ba:ef:e5:38:
                    2d:42:16:2b:29:58:39:8a:40:9f:f8:0d:a8:bc:fe:
                    11:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A0:21:61:17:CE:6D:D1:FC:D9:ED:CE:87:DC:B0:8A:58:78:66:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/0faa3cb7-4224-31cd-a2a3-c2532ee47086.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.crl

            X509v3 Authority Key Identifier:
                keyid:9E:01:D5:E4:F7:85:25:4D:C3:43:2A:E2:94:E9:43:3B:49:7A:F5:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.37.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:90:ec:53:1f:fa:08:94:17:ea:5e:cd:2b:07:f4:e7:75:0f:
         db:9d:e5:85:28:b8:e7:16:6a:80:b0:d8:7f:f3:94:f9:54:3e:
         02:df:3b:cf:c3:62:ac:c4:cb:2c:e8:b0:77:e7:cf:5b:44:ba:
         0c:a1:c8:b4:47:52:5c:b7:71:16:e7:5e:00:3e:58:ad:5b:f6:
         f0:a1:12:c9:fd:57:a3:20:6c:32:11:90:09:1e:21:c6:30:12:
         4e:e0:09:cb:57:d3:dd:23:82:de:ca:43:c5:3b:e5:41:98:4b:
         1f:f7:e2:49:04:23:4a:d4:94:ff:3d:5e:60:8d:67:71:1d:bb:
         83:59:a7:cf:bb:1b:78:5a:15:e4:e0:da:30:08:c6:b5:58:b0:
         bc:d7:c7:74:6b:43:a2:cf:e1:ff:42:f9:28:df:52:93:14:1c:
         18:37:7f:08:2c:b8:9d:06:7f:53:3d:a1:e6:80:f2:1f:6a:5a:
         c9:05:07:c3:21:c2:fd:b1:60:43:d7:41:fd:e1:70:87:c7:87:
         39:af:3d:5a:d6:ea:4a:01:65:87:02:d6:52:c9:ec:02:50:2b:
         09:d5:f5:60:ab:60:ef:55:17:10:82:8f:b4:70:e9:97:2e:46:
         69:73:30:c7:7a:1a:3b:e3:1d:97:4b:5c:9f:b0:32:67:21:58:
         9c:c1:d5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:22:12 2025 by rpki-client