Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/5acde123-8b2a-32d5-8223-e6b8a8424390.roa
File:                     5acde123-8b2a-32d5-8223-e6b8a8424390.roa (raw, json)
Hash identifier:          WWsXc69spaEwM3DOsQDldVmaEITmRo17D5822p/t240=
Subject key identifier:   7D:D2:20:74:5C:25:B9:50:AB:97:C0:C9:29:F2:3A:98:E9:67:04:F3
Certificate issuer:       /CN=a05c180d-6db0-4307-bc39-264e11bb765c
Certificate serial:       010D0C9F432858486960631E01F8563C745C5240
Authority key identifier: FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/5acde123-8b2a-32d5-8223-e6b8a8424390.roa
Signing time:             Thu 02 Jan 2025 14:00:52 +0000
ROA not before:           Thu 02 Jan 2025 14:00:52 +0000
ROA not after:            Wed 02 Apr 2025 13:00:52 +0000
asID:                     27768
IP address blocks:        66.249.220.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:69:60:63:1e:01:f8:56:3c:74:5c:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a05c180d-6db0-4307-bc39-264e11bb765c
        Validity
            Not Before: Jan  2 14:00:52 2025 GMT
            Not After : Apr  2 13:00:52 2025 GMT
        Subject: CN=946f3a9b-ecf8-4cfc-bf76-86175118e50e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0b:a9:bd:9c:e0:36:b3:ff:73:56:6b:de:de:
                    71:8c:1a:cc:a3:58:4f:82:54:e1:4c:0c:d3:25:ce:
                    7a:c9:7f:1f:5f:d8:09:d8:b1:c4:66:ef:1e:44:5c:
                    59:c0:6a:89:02:33:c0:25:48:0a:47:b1:a7:db:36:
                    57:ac:98:d1:4a:22:57:6b:26:80:eb:a6:a9:c6:9d:
                    9d:ff:0c:bb:ea:aa:bd:ac:78:5d:b4:61:9f:5c:14:
                    52:3e:97:67:06:a4:5a:fa:7c:ba:51:60:b0:c6:24:
                    de:02:29:b4:c4:86:9e:ea:19:cd:53:7b:3a:e2:83:
                    35:bd:7c:22:c4:b0:6a:06:3c:9e:76:a1:b2:05:94:
                    69:da:18:38:13:70:7b:85:ad:ea:ac:67:78:ce:22:
                    8a:5b:60:d7:67:ab:2d:c0:30:cd:f9:74:f2:52:59:
                    19:58:1c:31:c7:e1:35:ba:e6:ae:12:0b:10:43:81:
                    00:f9:57:e2:a9:55:09:2e:62:ca:69:9c:70:b7:1c:
                    01:fa:0e:19:83:6c:cc:f6:69:7d:b1:d7:0f:7f:b3:
                    85:02:d9:2b:1b:76:38:d2:3c:f3:bf:b4:0a:85:fd:
                    ab:30:33:e6:61:d6:d4:cd:cc:2d:d4:a5:3d:0f:1d:
                    46:5e:1e:9f:b8:e5:63:95:73:ae:d9:0a:65:4e:59:
                    26:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D2:20:74:5C:25:B9:50:AB:97:C0:C9:29:F2:3A:98:E9:67:04:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/5acde123-8b2a-32d5-8223-e6b8a8424390.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl

            X509v3 Authority Key Identifier:
                keyid:FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.249.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:f4:f7:71:98:9a:dc:9c:88:8b:e8:15:ab:23:27:dc:dc:71:
         15:cf:46:cf:fd:02:3f:fb:95:89:9f:9c:b6:11:b8:30:7d:dd:
         a0:82:d4:6c:a8:88:f5:5b:f4:58:6d:86:89:0f:3d:60:b3:da:
         c4:91:23:f7:6e:3f:d0:11:83:9c:66:9d:b9:f0:dd:46:a3:07:
         e7:d0:77:76:78:2d:09:b1:88:b2:ac:00:b8:e0:86:9d:23:be:
         f6:a0:b0:29:a7:76:6a:95:67:3d:b8:22:dd:f0:0f:ec:24:38:
         d3:ed:56:c6:ac:02:61:0b:f7:76:76:7e:70:cf:a0:70:26:8f:
         52:d5:18:b0:31:bc:45:43:b0:72:7c:e0:bf:10:16:21:f1:b1:
         94:f9:79:dc:bc:81:80:12:70:f8:ad:5b:d0:80:0e:66:9c:98:
         c0:ad:c7:02:7c:f0:3f:5b:4a:51:99:3d:94:e6:6c:a7:39:6c:
         b8:24:ae:93:8a:21:17:a7:92:68:bc:0b:45:54:39:09:27:8d:
         d4:cb:51:dd:f2:de:5f:e2:f9:c3:3a:4c:13:b2:39:a4:24:7a:
         ca:02:60:a4:47:86:29:56:19:18:5b:43:33:4a:03:cf:82:ed:
         93:d3:5a:24:ed:a6:75:09:a2:5f:a4:b9:9e:09:3f:80:75:09:
         91:25:3c:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhpYGMeAfhWPHRcUkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTA1YzE4MGQtNmRiMC00MzA3LWJjMzktMjY0ZTExYmI3
NjVjMB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk
OTQ2ZjNhOWItZWNmOC00Y2ZjLWJmNzYtODYxNzUxMThlNTBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAupvZzgNrP/c1Zr3t5xjBrMo1hPglThTAzT
Jc56yX8fX9gJ2LHEZu8eRFxZwGqJAjPAJUgKR7Gn2zZXrJjRSiJXayaA66apxp2d
/wy76qq9rHhdtGGfXBRSPpdnBqRa+ny6UWCwxiTeAim0xIae6hnNU3s64oM1vXwi
xLBqBjyedqGyBZRp2hg4E3B7ha3qrGd4ziKKW2DXZ6stwDDN+XTyUlkZWBwxx+E1
uuauEgsQQ4EA+VfiqVUJLmLKaZxwtxwB+g4Zg2zM9ml9sdcPf7OFAtkrG3Y40jzz
v7QKhf2rMDPmYdbUzcwt1KU9Dx1GXh6fuOVjlXOu2QplTlkmIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH3SIHRcJblQq5fAySnyOpjpZwTzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMDVj
MTgwZC02ZGIwLTQzMDctYmMzOS0yNjRlMTFiYjc2NWMvNWFjZGUxMjMtOGIyYS0z
MmQ1LTgyMjMtZTZiOGE4NDI0MzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTA1YzE4MGQtNmRiMC00MzA3LWJj
MzktMjY0ZTExYmI3NjVjL2EwNWMxODBkLTZkYjAtNDMwNy1iYzM5LTI2NGUxMWJi
NzY1Yy5jcmwwHwYDVR0jBBgwFoAU+pb0gpyNY4Nb+8DqdIVg9ekxZVgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMDVjMTgwZC02ZGIwLTQzMDctYmMzOS0yNjRl
MTFiYjc2NWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQvncMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABr093GYmtyciIvoFasjJ9zccRXPRs/9Aj/7lYmfnLYRuDB93aCC1Gyo
iPVb9FhthokPPWCz2sSRI/duP9ARg5xmnbnw3UajB+fQd3Z4LQmxiLKsALjghp0j
vvagsCmndmqVZz24It3wD+wkONPtVsasAmEL93Z2fnDPoHAmj1LVGLAxvEVDsHJ8
4L8QFiHxsZT5edy8gYAScPitW9CADmacmMCtxwJ88D9bSlGZPZTmbKc5bLgkrpOK
IRenkmi8C0VUOQknjdTLUd3y3l/i+cM6TBOyOaQkesoCYKRHhilWGRhbQzNKA8+C
7ZPTWiTtpnUJol+kuZ4JP4B1CZElPEk=
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:43:50 2025 by rpki-client