Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/d3399dbd-f8d4-3bb7-9791-4c88b3c97b6e.roa
File:                     d3399dbd-f8d4-3bb7-9791-4c88b3c97b6e.roa (raw, json)
Hash identifier:          CW/Is4RD22Lu3/FUj53mT2WzXoJDjya6xgEHP9LIr8I=
Subject key identifier:   03:E3:9D:01:97:C3:25:3F:EE:39:00:97:2F:86:0E:1F:A7:C6:2B:B8
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F4328584812D52ACD0E6904DFFF9EAF00
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/d3399dbd-f8d4-3bb7-9791-4c88b3c97b6e.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     10796
IP address blocks:        66.198.14.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:2a:cd:0e:69:04:df:ff:9e:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=c6e34de9-6960-43f5-83b7-2a6affce4951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f4:cd:fa:84:d5:71:de:83:2b:87:81:1a:ec:
                    fb:74:3d:36:3b:9a:1f:c3:32:36:e8:f7:d1:56:c3:
                    ba:95:7c:45:f2:22:3f:09:85:f3:93:3c:fa:62:ac:
                    08:6b:46:69:fc:2d:5b:c7:56:95:91:f1:56:b8:3f:
                    32:89:96:9f:3f:26:48:8a:eb:29:6d:cc:34:00:15:
                    b0:d2:25:60:8d:45:1c:5b:e5:51:7f:66:a7:35:57:
                    14:b1:b1:7a:c9:aa:c7:75:53:6d:80:7a:7a:a6:f6:
                    e2:eb:5e:33:e0:d5:3b:7c:18:94:b3:26:2b:16:14:
                    de:7f:04:08:d6:41:38:5e:e2:4d:b6:02:41:6f:28:
                    6f:d2:12:63:50:7f:49:7c:ae:a9:74:03:af:dd:42:
                    8f:3e:fa:28:6b:9e:5c:84:b6:55:13:98:7f:2c:a5:
                    7f:47:4a:d9:d0:32:24:d6:ba:bb:8b:8f:6a:e2:bc:
                    6a:2d:3c:9c:ef:37:cb:da:1e:13:b8:27:af:5d:c4:
                    c9:c1:db:81:59:02:d1:97:62:33:82:59:b0:a6:07:
                    87:bd:fb:37:ea:22:d9:34:ba:56:ea:cb:e5:aa:79:
                    80:9d:40:f4:8a:f9:1b:31:dd:9d:7c:af:1e:6a:df:
                    62:e1:a0:b5:72:cd:1f:87:d1:29:9d:00:43:9b:fd:
                    99:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E3:9D:01:97:C3:25:3F:EE:39:00:97:2F:86:0E:1F:A7:C6:2B:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/d3399dbd-f8d4-3bb7-9791-4c88b3c97b6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.198.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:2b:86:34:ce:d3:fd:52:e5:ab:8b:77:92:a1:14:f8:3c:d2:
         7d:0e:d6:74:d5:56:b6:ce:8d:62:9a:a4:c8:0a:ec:02:9a:92:
         f2:e6:98:9b:cb:f3:bd:17:76:d8:e7:8d:90:9b:9a:08:80:56:
         57:ab:96:5b:60:94:f9:8c:1f:85:71:04:89:e5:ca:35:6b:5b:
         c7:0a:f9:d0:7f:03:03:fa:06:29:23:95:e2:37:9c:c9:55:97:
         d7:66:19:90:77:03:eb:07:0d:e5:76:81:24:1e:eb:34:1a:f8:
         9b:21:aa:29:d1:b7:5b:b1:e3:dc:52:4c:97:ba:60:a9:e4:7d:
         e2:6e:6b:b4:ee:8c:22:ed:1f:5f:80:f1:58:d4:21:93:3b:2b:
         d0:77:23:3c:ae:6e:c0:f3:01:92:c7:4f:6d:de:0d:ab:ac:12:
         f7:f6:13:50:d9:7a:05:aa:ed:ad:03:ba:18:2f:d7:9e:37:57:
         23:df:5d:81:98:36:e8:34:81:7b:40:50:80:8c:c7:62:fe:52:
         3c:50:86:e4:e7:03:c8:3f:1a:ca:2d:4c:94:7e:89:2b:b2:ff:
         f9:85:89:59:3f:31:4c:1b:3e:9d:4f:d7:ac:6d:a5:5c:cd:6b:
         3c:dc:34:b3:74:5b:62:d2:bf:6b:bc:c1:b4:8e:2b:e5:75:6f:
         16:4d:d6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:28:46 2025 by rpki-client