Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/2cfb0ce9-af01-31ae-8ed6-e6a4f457b790.roa
File:                     2cfb0ce9-af01-31ae-8ed6-e6a4f457b790.roa (raw, json)
Hash identifier:          YKuurm4D00dkR+4wxzo/G2HjaRfIGoIXBGdlYjKtrp8=
Subject key identifier:   E2:C2:6A:1D:8F:CB:ED:DA:E8:DD:CA:2C:31:A7:8F:21:E1:B7:4D:60
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F432858481C9A8084832CCF2794FC0800
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/2cfb0ce9-af01-31ae-8ed6-e6a4f457b790.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     14618
IP address blocks:        66.22.190.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:80:84:83:2c:cf:27:94:fc:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=20682e5c-a84e-4244-90a7-34157487c52f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bf:22:31:70:7d:67:8d:72:e7:0f:a8:92:1c:
                    a3:17:4e:27:4a:22:ae:5f:ea:28:f9:91:38:b6:1d:
                    bc:f2:71:e8:f0:1b:c7:77:da:df:d7:9f:b8:8b:d5:
                    56:5f:54:b2:d5:db:ea:12:e6:fe:1d:fb:1b:b7:ec:
                    12:fa:1b:35:27:2c:d1:ec:27:c5:40:dc:5a:e3:39:
                    1a:1e:4e:38:6f:1e:09:82:c6:07:0a:21:32:98:97:
                    b2:99:6e:31:f6:a1:8c:4e:46:12:a7:8b:16:3a:11:
                    62:78:61:39:fc:81:7b:f8:89:7e:13:63:05:7c:d9:
                    01:fa:59:f4:e1:07:ac:eb:9d:09:00:50:08:6f:f3:
                    45:b1:02:c0:b6:d6:78:7e:91:75:d1:d9:f4:82:98:
                    6e:5e:df:5d:d7:fc:90:d9:f4:3f:d6:eb:a4:c9:20:
                    25:4a:5a:f7:1a:57:e9:da:3a:40:48:e7:1a:6f:a3:
                    a5:fe:19:ea:e0:c5:dd:c2:c0:f3:7d:1b:7e:b9:8d:
                    15:8a:ec:88:d9:d6:17:f7:93:a4:62:b3:98:ab:9a:
                    e1:4f:ad:1b:68:eb:33:e8:70:ea:72:d0:d5:cb:7f:
                    f8:dc:f5:60:6a:a4:c7:f7:02:30:25:64:61:a3:bc:
                    b2:d1:80:73:cf:59:47:c9:77:3c:a1:cb:75:a3:93:
                    1a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C2:6A:1D:8F:CB:ED:DA:E8:DD:CA:2C:31:A7:8F:21:E1:B7:4D:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/2cfb0ce9-af01-31ae-8ed6-e6a4f457b790.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.22.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:1e:7d:a0:bf:68:f3:82:f3:15:2e:ce:c6:83:59:d7:25:3f:
         85:e8:ff:1b:4d:16:af:06:ac:57:a2:7d:ca:76:48:f8:f8:81:
         fa:4e:a9:26:8c:3c:9e:38:51:20:fc:50:73:10:c1:3d:69:d8:
         01:8d:6a:c6:71:65:e1:57:f7:da:ed:9f:03:09:ea:51:f5:5c:
         0f:fe:85:18:63:8c:f8:dd:ae:40:3e:64:15:a8:96:35:4e:39:
         15:f6:ab:13:e8:ce:58:ae:46:51:31:3b:64:f9:63:8a:3a:74:
         5a:cb:c4:cb:61:d9:7a:1c:e6:db:60:cd:47:02:3c:52:f1:b0:
         7b:3f:09:d3:ce:d6:c5:39:cb:e4:da:f5:49:23:5e:cc:74:fa:
         bc:5d:5f:ac:9f:e7:33:64:e5:2e:1e:b3:0b:75:15:81:81:a1:
         93:ef:31:a9:f0:e0:52:cb:05:df:9a:f1:3d:84:8a:85:ee:46:
         ff:43:b2:c2:e0:67:b9:5f:00:e1:a9:80:cd:49:f1:db:79:8f:
         88:b1:a7:b9:03:f7:35:de:4d:f7:73:15:62:1f:cb:31:60:6b:
         48:a0:96:15:a3:c5:f2:81:d6:9c:eb:36:65:fe:f6:ae:d1:6f:
         39:bb:dd:a1:73:5b:47:32:c5:cb:15:af:2f:4b:e9:04:0d:74:
         21:b7:ce:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:22 2025 by rpki-client