Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/da8b29b9-1b17-39c3-a631-5c1cf38e1c3d.roa
File:                     da8b29b9-1b17-39c3-a631-5c1cf38e1c3d.roa (raw, json)
Hash identifier:          Qj7YvtO6QPgjHSXEEYleRKOH6RLuoeckX+J17mCKVT0=
Subject key identifier:   4D:1F:A6:43:CF:F4:84:E7:6F:6A:26:A6:6B:A0:C4:7B:78:C3:B1:F1
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F4328584812D5305248E177CE7C4EC6E0
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/da8b29b9-1b17-39c3-a631-5c1cf38e1c3d.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     394469
IP address blocks:        66.110.74.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:30:52:48:e1:77:ce:7c:4e:c6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=bfcc1c69-b37f-42b0-b192-ec66c7804473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:50:08:48:2a:46:db:f9:f0:48:fe:8d:2e:d2:
                    21:87:cb:38:01:40:41:a1:4b:5e:7a:88:c0:50:a6:
                    93:eb:b2:43:6b:d1:6f:71:ac:af:1d:e9:fa:56:5f:
                    5b:0d:47:f5:c3:32:aa:08:3a:46:fc:7e:32:b6:e9:
                    f3:eb:0b:05:ae:35:db:3c:43:c9:1a:3e:bd:59:97:
                    12:ab:00:36:35:ec:1b:c5:3d:47:7e:08:29:58:89:
                    88:48:cd:7b:c6:91:13:5a:a9:49:f3:63:06:8b:d5:
                    12:06:73:ac:0d:bc:88:b3:83:b0:57:68:d0:0e:54:
                    b9:d5:c2:9b:5c:5f:8a:45:58:c5:af:a2:e0:bd:fa:
                    56:61:a3:a7:db:d1:b2:2f:5d:7b:97:52:36:50:de:
                    f8:7e:51:fc:f3:68:53:8a:51:61:cd:48:86:0a:bd:
                    38:97:fd:53:5c:59:90:52:67:3d:9d:f5:4c:ae:29:
                    50:d1:ec:a8:c0:0a:25:b2:99:f1:e0:31:fb:bc:20:
                    3b:a1:0c:da:74:6d:88:21:f7:4a:5f:52:c7:0f:ec:
                    20:58:8d:92:3e:51:26:ec:de:84:cb:93:71:c4:79:
                    47:98:37:62:6a:14:46:74:29:3c:87:f6:0e:ac:14:
                    d5:5c:01:04:75:b4:b4:28:9f:5c:bd:4d:9c:77:b9:
                    dd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:1F:A6:43:CF:F4:84:E7:6F:6A:26:A6:6B:A0:C4:7B:78:C3:B1:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/da8b29b9-1b17-39c3-a631-5c1cf38e1c3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.110.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:7a:2e:65:a3:f2:28:d1:41:2b:11:93:85:ad:e7:84:48:da:
         20:11:f8:96:16:c9:ae:32:ac:a1:0f:0c:e1:8d:a7:f8:90:d0:
         cd:48:f0:0e:17:ab:df:30:5d:be:b8:b9:cd:d2:35:cc:3f:94:
         4c:50:1d:15:ca:6a:71:4c:b3:87:e8:54:59:bd:1b:2c:b7:c6:
         b7:3d:fe:3a:63:ef:5f:05:4e:0b:64:f7:c1:72:48:db:9b:49:
         0c:9a:0e:f5:e1:85:b8:16:81:67:ed:29:d0:e4:25:2e:73:60:
         5f:18:ec:8a:dd:52:13:1f:c2:48:e7:1c:09:41:b6:0b:4a:64:
         fe:a6:93:40:cc:58:d4:a5:c8:61:a5:69:27:6d:b1:91:c9:0e:
         c4:57:b6:92:35:87:12:91:78:eb:33:dd:b4:0b:ee:2e:57:f9:
         0d:65:f1:91:a1:4f:05:9f:aa:ed:04:fe:02:63:08:f8:a8:5a:
         97:6c:36:8f:db:08:15:28:96:c7:e0:45:c5:ec:0a:c5:2c:de:
         44:0a:c8:c5:9b:5d:53:2a:f8:82:2a:86:48:c7:f5:42:44:9c:
         55:fe:92:c0:65:65:3e:72:36:49:3a:06:34:17:97:38:de:26:
         ce:d9:2e:25:ac:bc:73:eb:1d:67:38:2b:9a:1d:e6:04:57:c6:
         51:1a:12:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 19:22:10 2025 by rpki-client