Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/b7a107a0-878f-367d-a0fb-7cd8d24f9c14.roa
File:                     b7a107a0-878f-367d-a0fb-7cd8d24f9c14.roa (raw, json)
Hash identifier:          PPN8iJmHtO8eL3J96uicoIlyNGwKNOKD/l0DzraF03U=
Subject key identifier:   D2:CB:CC:CE:16:F8:C3:C2:57:21:38:5A:28:42:40:3E:E4:38:6D:BE
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F432858480EA5083DDBBC2D84E2409D20
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/b7a107a0-878f-367d-a0fb-7cd8d24f9c14.roa
Signing time:             Sun 01 Dec 2024 02:00:39 +0000
ROA not before:           Sun 01 Dec 2024 02:00:39 +0000
ROA not after:            Sat 01 Mar 2025 02:00:39 +0000
asID:                     54781
IP address blocks:        66.60.245.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:a5:08:3d:db:bc:2d:84:e2:40:9d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Dec  1 02:00:39 2024 GMT
            Not After : Mar  1 02:00:39 2025 GMT
        Subject: CN=a70baf08-978a-402b-9a87-5670c89897f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a7:28:79:32:f9:b5:57:98:eb:7e:ca:8e:e9:
                    3f:f4:c7:ce:e5:72:49:bd:35:1b:6a:4c:b9:3e:5f:
                    ae:0f:ab:af:60:3a:3e:38:4b:28:f8:5c:64:7d:7a:
                    3b:bd:80:14:e8:7b:6f:1e:fc:29:eb:cd:7e:f3:a7:
                    63:6a:32:7e:30:e1:67:14:f6:a7:f9:b9:21:ea:29:
                    28:e4:94:2a:30:8d:22:f8:20:c2:2c:d1:ff:f3:89:
                    ca:df:3e:8b:84:ca:ed:3d:ef:1f:9c:c3:ce:a9:7d:
                    13:2c:31:2e:c3:7c:d9:b2:ac:58:eb:12:3d:e0:d5:
                    41:62:f6:39:be:e8:49:a9:fa:c3:81:d8:50:21:d3:
                    1f:d8:a1:b8:49:12:db:db:df:e5:b2:ca:2c:dc:b0:
                    59:90:5e:9f:92:3d:77:fe:60:5b:b4:1b:01:81:8f:
                    27:29:a7:f2:5f:65:d9:f1:45:47:a4:9a:79:d1:2e:
                    fd:9f:1d:4d:2b:1a:86:9b:56:d4:ec:69:30:a5:43:
                    34:88:3c:3e:4e:5d:2f:f4:7c:48:63:eb:f6:e1:38:
                    00:86:46:1e:95:54:88:ca:a4:1c:a8:cc:3d:4f:1f:
                    ed:ff:e3:3d:ca:c2:95:48:3a:c7:4f:70:83:f5:77:
                    a3:d2:3f:41:62:60:06:a0:d1:7c:24:6a:a9:d8:8f:
                    79:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:CB:CC:CE:16:F8:C3:C2:57:21:38:5A:28:42:40:3E:E4:38:6D:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/b7a107a0-878f-367d-a0fb-7cd8d24f9c14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.60.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:d2:3e:2c:00:4f:11:81:f5:b7:06:5b:7a:59:b1:b9:1e:d5:
         41:7e:c1:a7:06:62:2b:b1:cf:68:2c:f0:00:8b:98:2e:d8:83:
         1c:ef:7a:66:c0:5e:d8:9c:53:67:71:85:ec:57:83:9d:ed:9b:
         ad:25:9a:36:33:0c:bc:d0:5e:2c:53:52:5f:cd:c3:39:94:1d:
         13:34:13:89:be:a8:cf:ee:b4:54:63:3b:ee:e6:f0:b1:9f:41:
         8f:1c:38:85:23:7e:fd:a8:0d:00:1c:a1:3d:d4:2d:f2:1b:95:
         b4:b9:4d:4e:c0:1a:94:40:31:38:0e:f5:0c:5a:75:50:14:3c:
         0c:f0:d4:e0:fc:80:08:5b:a6:bd:f5:5f:45:94:4e:f2:a3:9f:
         59:d8:23:f3:68:55:77:76:d9:b8:56:90:9c:ce:61:5e:db:06:
         e2:19:f3:de:23:d7:d0:42:22:5f:fe:9e:0a:eb:86:a9:2b:19:
         a1:58:7b:5b:88:17:3b:7d:10:cc:3a:eb:63:21:9a:44:7d:3c:
         48:bd:51:13:04:cd:27:3f:36:25:07:6e:57:23:a2:01:39:f4:
         e6:61:3c:72:e8:27:77:58:55:46:13:26:c4:80:f2:c2:f1:1d:
         5e:9b:0d:73:59:5a:df:11:b1:7d:a5:2b:e4:00:2d:21:32:f7:
         32:7d:a3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:37 2025 by rpki-client