Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/e08ffb35-0a70-399e-8139-986ffe19aaa4.roa
File:                     e08ffb35-0a70-399e-8139-986ffe19aaa4.roa (raw, json)
Hash identifier:          +3rk5nNkvayg1SRqngu54ins9mJLjUn0S1ndX2LBv0E=
Subject key identifier:   06:3F:03:86:47:55:23:C6:EF:25:DD:36:1D:39:9E:C4:66:EA:9B:BD
Certificate issuer:       /CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
Certificate serial:       010D0C9F4328584812D52EB879D839F56B06BD80
Authority key identifier: A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/e08ffb35-0a70-399e-8139-986ffe19aaa4.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     198949
IP address blocks:        66.22.112.0/20 maxlen: 20
                          66.22.112.0/24 maxlen: 24
                          66.22.113.0/24 maxlen: 24
                          66.22.114.0/24 maxlen: 24
                          66.22.115.0/24 maxlen: 24
                          66.22.116.0/24 maxlen: 24
                          66.22.117.0/24 maxlen: 24
                          66.22.118.0/24 maxlen: 24
                          66.22.119.0/24 maxlen: 24
                          66.22.120.0/24 maxlen: 24
                          66.22.121.0/24 maxlen: 24
                          66.22.122.0/24 maxlen: 24
                          66.22.123.0/24 maxlen: 24
                          66.22.124.0/24 maxlen: 24
                          66.22.125.0/24 maxlen: 24
                          66.22.126.0/24 maxlen: 24
                          66.22.127.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:2e:b8:79:d8:39:f5:6b:06:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=a45515dc-4824-4f97-9045-649665a320d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d7:96:e0:5d:32:9d:1c:93:6b:b6:3a:d8:c8:
                    bd:1e:24:2e:dc:b2:fd:08:9a:43:2c:39:e1:fc:96:
                    5b:f2:52:ca:fe:31:81:ae:4d:23:46:0f:ea:60:81:
                    e5:92:d3:0d:9d:e1:dd:cf:88:21:7a:22:4e:87:ca:
                    98:b1:ce:86:02:7f:18:0d:67:1e:45:5e:98:3e:be:
                    3b:b4:8f:a0:3b:9c:e2:8e:8c:9d:37:38:88:f8:8b:
                    8d:ac:2b:d4:f0:d7:31:a5:03:fa:43:a9:a7:ad:e3:
                    58:58:6d:c8:54:88:3c:0e:a2:a3:00:54:67:e1:e0:
                    ae:35:b6:66:6e:78:c3:a8:ce:f8:4c:cd:0f:81:c1:
                    fc:63:60:cd:98:29:17:ed:9c:96:5f:70:9a:0a:44:
                    0b:8e:ba:5c:62:ca:1b:bc:91:40:ec:cc:71:ad:97:
                    61:6c:45:cc:e4:ba:1a:38:c8:c8:83:29:70:0f:08:
                    75:18:78:38:7a:e7:66:48:12:35:56:5d:e0:4e:0a:
                    78:bb:5c:79:cf:79:dc:40:40:27:0c:a8:11:ef:c9:
                    da:33:6e:2b:a5:22:37:8e:f2:18:bb:9b:dc:93:39:
                    7f:1a:d1:dd:c5:e6:8d:b4:e5:1c:5f:62:dc:3a:66:
                    20:36:25:81:e7:d7:25:29:f1:ca:56:ec:43:ef:da:
                    72:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3F:03:86:47:55:23:C6:EF:25:DD:36:1D:39:9E:C4:66:EA:9B:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/e08ffb35-0a70-399e-8139-986ffe19aaa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl

            X509v3 Authority Key Identifier:
                keyid:A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.22.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:c3:4e:28:f1:16:70:97:fb:aa:38:17:43:59:01:a6:27:7c:
         60:7b:63:35:28:d3:c8:bf:72:42:b2:2a:9f:ae:5e:e2:58:23:
         4f:a7:96:6f:a8:da:58:6d:68:65:4a:21:56:df:b1:a5:36:13:
         f3:9a:f5:88:b4:b0:ca:6b:4b:8e:f3:09:2f:37:71:83:4d:23:
         ad:0b:fe:97:7a:99:42:0f:94:ce:34:e8:01:fa:c9:16:41:86:
         77:ec:f1:9a:7f:02:4b:19:61:a0:52:80:4f:ce:89:4f:a9:2b:
         eb:1c:d9:93:86:bd:99:74:1a:c3:db:9c:2e:2d:54:4c:a0:59:
         41:69:6c:18:d5:53:00:6e:73:b4:a9:fe:25:2b:d0:35:ee:39:
         b3:57:5d:fa:62:aa:8a:b5:b9:3f:5b:25:28:63:b9:02:84:5e:
         95:17:1e:17:ec:97:0d:13:76:a3:3a:0e:0c:da:15:ed:55:c4:
         47:0a:02:a8:cb:b7:7e:dd:64:ee:6c:6d:9d:54:2e:58:61:92:
         0b:78:5d:58:eb:e6:2b:d3:ec:74:57:59:f9:34:6f:a7:6d:12:
         cc:09:81:c0:00:1d:39:bc:a6:93:c0:b3:b7:85:a3:18:96:b6:
         38:a4:4d:56:87:e3:90:93:b1:09:c9:41:ae:9b:f9:cf:5d:4d:
         00:89:05:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:46:32 2025 by rpki-client