Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/10b3659b-8a93-3a84-9ba4-ac767c2ba63a.roa
File:                     10b3659b-8a93-3a84-9ba4-ac767c2ba63a.roa (raw, json)
Hash identifier:          o4MQl6AGO1eggUQoziKse1g0jEWeWWiiL6mv9RRAC0c=
Subject key identifier:   56:31:FF:6F:1F:81:13:A5:FE:D0:18:D2:1E:1B:EC:95:23:84:44:60
Certificate issuer:       /CN=847c7608-e8de-46e4-803f-28e1912f24ed
Certificate serial:       010D0C9F43285848021508DE1BE9B891A4DBB000
Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/10b3659b-8a93-3a84-9ba4-ac767c2ba63a.roa
Signing time:             Tue 26 Nov 2024 14:00:39 +0000
ROA not before:           Tue 26 Nov 2024 14:00:39 +0000
ROA not after:            Mon 24 Feb 2025 14:00:39 +0000
asID:                     33139
IP address blocks:        66.49.254.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:02:15:08:de:1b:e9:b8:91:a4:db:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed
        Validity
            Not Before: Nov 26 14:00:39 2024 GMT
            Not After : Feb 24 14:00:39 2025 GMT
        Subject: CN=d78119ad-4d53-4555-8d03-4734fbbcaea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b8:07:85:11:2d:56:db:6f:9a:35:99:43:79:
                    5c:39:15:e5:97:ba:8e:30:54:67:1d:61:75:e8:61:
                    4a:df:3a:55:d2:1b:0b:40:24:24:fb:a2:c7:75:4b:
                    8e:64:6a:88:db:3f:9e:b2:21:3c:86:89:a8:9e:07:
                    9e:de:85:8a:66:6f:29:eb:90:5e:68:fd:61:96:2f:
                    80:20:7a:10:ba:b5:9e:ec:bb:75:7f:c1:2f:17:d2:
                    45:3a:03:79:f8:3d:eb:e2:00:65:f9:5c:3e:31:71:
                    7c:13:c7:57:0c:d4:13:8d:0b:32:fa:c3:37:7d:39:
                    3c:0d:31:7b:c0:28:fe:a5:43:1b:61:0b:3f:3a:72:
                    44:f8:92:0a:19:c0:7f:db:3a:14:66:22:6f:62:9e:
                    ce:d2:f9:b3:64:8c:08:e8:78:ee:e4:e3:9d:ca:cc:
                    6b:56:f4:9e:29:b1:63:04:b4:0f:85:8f:28:34:a1:
                    ca:9f:38:44:88:70:b7:6b:53:2c:80:d4:cf:c3:a4:
                    ce:91:15:2e:69:57:5f:81:5c:a8:4b:29:0f:71:04:
                    01:dc:8f:03:8c:bb:97:f9:24:78:dd:b5:d6:a7:4d:
                    04:6a:0d:1e:b3:e7:f5:28:c4:1d:87:58:75:58:fb:
                    9d:f6:90:39:f1:35:ae:11:2e:69:94:e3:86:fc:cf:
                    42:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:31:FF:6F:1F:81:13:A5:FE:D0:18:D2:1E:1B:EC:95:23:84:44:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/10b3659b-8a93-3a84-9ba4-ac767c2ba63a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl

            X509v3 Authority Key Identifier:
                keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.49.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:60:2b:5b:f2:59:0b:b9:21:8d:df:b5:a9:ff:2d:05:33:e9:
         39:4b:5b:a0:80:58:fb:d5:74:c2:33:44:46:51:bb:03:ef:11:
         b9:c1:fb:a6:2a:09:0f:3c:09:bb:c7:77:f5:6b:77:ca:64:6a:
         fe:5a:3b:26:65:20:16:c8:48:95:50:b3:20:a9:95:f9:3e:4c:
         ee:4a:c2:71:1a:5b:4f:b4:7f:da:77:eb:33:08:3c:2a:1f:81:
         17:95:b3:ae:6e:ce:b2:5a:00:e4:11:ab:e4:44:0b:26:b2:47:
         ef:9c:89:8d:f8:ff:25:74:b6:e8:07:4e:7c:37:cb:36:6c:33:
         ce:c4:9c:cd:27:73:88:cd:9b:c9:8a:65:7f:5e:47:82:07:12:
         d3:88:73:c7:f7:21:c7:b5:0a:1e:25:b7:be:6e:17:53:73:5a:
         8f:d0:f4:3c:96:4e:39:b4:3c:09:00:36:3b:9c:48:d5:cd:ec:
         15:5a:c3:98:e9:dd:2e:f0:23:87:54:2c:30:07:b0:43:16:4c:
         47:7e:f3:f6:06:d3:8e:70:22:ca:a2:50:ba:39:5d:0d:9f:59:
         66:41:c6:23:14:71:34:df:5e:e7:da:40:0c:fe:31:d4:88:04:
         3c:83:78:06:3e:a2:8c:24:16:47:2d:26:65:e3:60:25:7a:4d:
         ac:17:7c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:19:03 2025 by rpki-client