Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/e27ce1ac-27aa-306d-9dfd-374fc127eff4.roa
File:                     e27ce1ac-27aa-306d-9dfd-374fc127eff4.roa (raw, json)
Hash identifier:          sdP7t52fjYG+fNV3/KxC1HkvPpxzt2mMdSzHxZJXVEQ=
Subject key identifier:   EB:DB:15:45:01:74:1B:4F:0D:47:CE:BD:19:FB:7C:7E:17:A5:1F:CA
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F43285848143A69840F8CD6A6C05A4800
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/e27ce1ac-27aa-306d-9dfd-374fc127eff4.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     8560
IP address blocks:        66.179.80.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:69:84:0f:8c:d6:a6:c0:5a:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=818feaba-8afd-4fc0-9924-b49a2cc914d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:29:52:df:32:76:f8:3b:50:fb:01:0c:94:f3:
                    4b:79:19:bc:b6:54:64:06:79:e0:3b:60:a7:3b:e4:
                    7d:46:a4:c1:b3:d8:f1:91:25:be:34:2d:4b:03:ce:
                    77:27:37:3b:98:01:de:2b:0f:ae:5d:c4:08:36:df:
                    c9:b7:9e:6c:3b:91:ce:89:35:0f:59:ff:ee:ca:8c:
                    4e:8c:ec:13:58:a4:bf:9c:ae:4f:e0:2d:a5:a5:06:
                    8c:c7:a6:f7:74:11:6e:00:8e:65:cf:38:73:4e:df:
                    25:df:58:0f:37:0c:e2:3c:4a:a9:a0:f1:91:a0:a5:
                    42:7d:5a:26:80:16:de:d1:64:ed:70:d3:58:55:f2:
                    e7:f5:b4:36:9b:0c:ac:bb:b3:ac:bf:3a:24:e7:b1:
                    86:99:05:bc:56:e0:c4:68:f6:d6:2b:e0:8e:f3:fe:
                    be:ed:67:aa:63:04:c3:34:69:2e:1d:8c:20:b5:1f:
                    a4:4e:d4:61:99:c0:84:85:3b:e5:f7:b0:5b:9a:23:
                    15:47:e2:e9:3c:46:43:ab:ab:43:62:7e:6a:69:ea:
                    5a:d3:11:d3:9f:b1:da:c8:c7:12:e2:42:61:7a:30:
                    c1:44:d5:5b:d1:d5:bf:63:47:e2:73:96:65:55:34:
                    6a:15:15:24:76:32:70:bf:1f:7f:96:81:4b:85:23:
                    21:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DB:15:45:01:74:1B:4F:0D:47:CE:BD:19:FB:7C:7E:17:A5:1F:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/e27ce1ac-27aa-306d-9dfd-374fc127eff4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:8b:f8:5e:a7:63:cb:2b:04:00:5a:d5:5a:ef:a3:5b:3d:1b:
         e9:35:0a:e4:58:35:c5:5e:f0:5f:5c:1f:62:a4:1c:28:dd:b9:
         60:1a:a9:8d:29:8a:fc:60:a5:fc:b0:a6:f1:84:10:01:d5:9a:
         6c:a0:40:1d:a9:71:f0:9e:d4:f5:12:46:4a:dc:9e:00:3d:7d:
         b2:1b:9f:50:ed:c7:76:a2:4e:75:11:5f:72:a5:be:ad:24:23:
         ec:9d:7f:f8:55:4e:df:e2:63:3a:75:a7:be:37:ef:01:b9:b8:
         2e:28:8a:9f:64:f3:34:42:4d:da:6a:00:ae:b9:fc:b1:f3:ef:
         e7:75:e3:3f:73:4f:ff:ca:72:47:71:b4:53:21:7a:9b:b8:79:
         51:fe:c3:58:8d:8e:2a:56:74:29:34:ca:2c:24:bc:3f:46:b1:
         ca:39:38:12:ab:27:b8:e6:e6:11:84:ac:e1:b2:7d:37:9c:2f:
         22:9a:05:32:44:90:ce:8d:07:ba:9f:13:18:11:08:41:98:70:
         31:cb:c1:ef:4f:4b:44:fc:a8:49:5e:4f:24:8a:3e:e0:86:63:
         05:4a:11:9c:10:02:29:30:c1:52:09:d5:d6:8a:46:a6:f3:1b:
         fd:52:3f:5b:1d:e6:13:e1:f0:6e:49:b5:f4:4a:2a:da:1e:73:
         d7:1e:c1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:35:03 2025 by rpki-client