Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/d25798ca-b93e-3359-a73a-84a0a9595cda.roa
File:                     d25798ca-b93e-3359-a73a-84a0a9595cda.roa (raw, json)
Hash identifier:          b143XTvd0NSxWDWAqulvK6VUSlq/GEXMqwYvvi8SLIg=
Subject key identifier:   33:59:3A:76:4D:13:05:FB:14:F9:29:CA:D0:EB:B2:7D:34:F0:A2:8E
Certificate issuer:       /CN=18a2f7cf-2c91-44c2-a109-17138ef87fcc
Certificate serial:       010D0C9F43285848222FE92FB0C3DC79F581EA00
Authority key identifier: 66:06:53:1B:FE:2C:EE:A0:B5:C1:45:EB:7A:10:2B:28:AE:13:84:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/d25798ca-b93e-3359-a73a-84a0a9595cda.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     13781
IP address blocks:        162.222.24.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:e9:2f:b0:c3:dc:79:f5:81:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a2f7cf-2c91-44c2-a109-17138ef87fcc
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=c43a0767-9556-4701-8550-9501d1a6257b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:70:43:2e:86:98:c5:4d:45:0b:57:4c:4e:76:
                    13:ba:2d:2d:78:41:0e:48:94:70:44:2c:1f:d1:c5:
                    d1:11:75:5e:2a:b6:fa:04:0a:23:c4:0e:c1:2e:0b:
                    80:b7:95:8a:0e:75:61:68:e9:a6:4a:2f:66:c3:20:
                    f5:7f:01:a2:94:f0:f5:ed:0b:57:79:81:53:c4:1d:
                    04:53:dc:c1:8f:59:59:80:86:f3:69:f1:a5:6f:a6:
                    82:cc:e5:f2:ef:10:ad:51:4e:31:97:78:e1:54:b5:
                    9b:1d:a7:9b:0b:8f:f9:a9:f0:4e:e2:91:e2:a8:1f:
                    71:7c:b5:d0:af:90:50:42:04:1b:e9:61:7a:1a:c0:
                    c8:6d:7c:8a:ef:c6:f3:4e:1b:32:33:f5:dc:f3:f2:
                    e7:e3:d5:cc:02:b0:cc:f2:63:46:68:fc:7c:8d:7b:
                    0d:20:22:b1:7c:dc:34:ec:37:3e:f3:87:d0:4d:2a:
                    6e:95:fb:7b:7a:4b:71:ba:40:7d:c1:31:28:b5:53:
                    65:0f:bd:8c:ec:17:df:f3:26:a1:2c:4e:de:80:35:
                    92:69:d6:db:76:7e:ff:b8:39:d9:86:71:ac:68:74:
                    df:66:99:b1:59:80:bc:a1:bf:c1:00:e6:d0:c6:fc:
                    a3:f6:72:f9:ed:47:32:0d:c2:51:45:d5:02:f6:cc:
                    d5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:59:3A:76:4D:13:05:FB:14:F9:29:CA:D0:EB:B2:7D:34:F0:A2:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/d25798ca-b93e-3359-a73a-84a0a9595cda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/18a2f7cf-2c91-44c2-a109-17138ef87fcc.crl

            X509v3 Authority Key Identifier:
                keyid:66:06:53:1B:FE:2C:EE:A0:B5:C1:45:EB:7A:10:2B:28:AE:13:84:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:ab:e8:fc:28:10:9d:c4:8f:b3:76:6c:27:14:c3:e1:41:cf:
         dd:45:7d:33:ca:00:78:aa:41:f9:86:00:09:d8:77:0e:48:27:
         f8:29:fd:ec:75:ae:6d:e4:c0:2b:ef:c4:4d:03:d5:56:e1:f5:
         87:0e:17:3f:86:e1:3f:f3:54:f6:0e:fe:70:43:5c:9e:22:a7:
         10:9e:cd:ca:65:09:bb:37:41:20:4d:d6:69:bb:17:bb:89:ef:
         dc:84:cc:cb:0d:4a:ce:ad:a3:bc:59:48:94:31:9b:f5:91:db:
         88:a0:3a:9b:6c:3d:96:74:3d:bf:6b:f5:54:73:60:bf:e1:ef:
         05:28:6b:e1:fa:1c:67:5a:0c:3e:3e:03:dd:e5:0d:87:ea:ad:
         31:e5:39:47:6c:ce:76:c7:17:14:8f:09:9d:8a:63:aa:a3:3b:
         7a:6d:77:9d:48:5e:38:d1:6f:ef:32:aa:9e:cc:68:69:68:6f:
         ab:c5:16:be:ab:df:ca:c1:5f:08:67:0c:44:7b:8c:d9:07:a9:
         60:95:3c:90:a7:75:00:0d:e1:11:f1:d1:ca:99:80:b3:7b:cf:
         d2:69:1e:b4:91:74:ea:a8:65:7a:22:52:be:c7:49:41:cf:7b:
         00:b4:c6:fc:5d:97:cd:91:89:62:73:09:c2:9b:28:fd:97:6e:
         05:67:ab:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:10:33 2025 by rpki-client