Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/b828d39e-9e2d-3a98-b77d-25dba55e6763.roa
File:                     b828d39e-9e2d-3a98-b77d-25dba55e6763.roa (raw, json)
Hash identifier:          gfdpUKRU1gm/bbaCqCcKylPzKJS07W6s6k4Gpwy8Vq8=
Subject key identifier:   40:C2:80:F7:4D:CD:FD:29:C4:A7:C6:9A:9B:7A:7C:76:CC:F0:13:06
Certificate issuer:       /CN=c727dab7-c852-4d24-82ff-cf171b24f2f9
Certificate serial:       010D0C9F432858484C101FC13F55F27E2E0293B0
Authority key identifier: 61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/b828d39e-9e2d-3a98-b77d-25dba55e6763.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     394161
IP address blocks:        199.66.9.0/24 maxlen: 24
                          199.66.10.0/24 maxlen: 24
                          199.66.11.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:1f:c1:3f:55:f2:7e:2e:02:93:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c727dab7-c852-4d24-82ff-cf171b24f2f9
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=a2409159-2cc0-48d3-a8e5-f3aa6faad83c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b5:fd:1e:4d:86:10:73:07:5a:95:1d:d8:db:
                    8f:47:72:e4:7c:0d:41:c5:29:25:c6:67:47:2d:02:
                    75:7b:ed:c8:f4:9a:dc:d3:6f:b0:43:e5:5c:56:84:
                    ec:94:58:69:5e:32:de:88:b7:89:42:a3:fa:8a:01:
                    ab:8f:f6:62:08:25:eb:4b:33:e8:08:04:6e:43:dc:
                    24:08:d4:34:fb:9f:4b:02:92:11:e0:b4:4b:d4:a2:
                    f1:9a:66:76:6b:58:3f:b9:c3:bc:87:5a:a2:95:fb:
                    4d:c1:fa:66:51:e1:e8:97:25:cb:26:53:cf:88:25:
                    3c:ba:66:c5:f6:88:df:e9:8e:41:28:52:81:c6:7b:
                    9e:da:a9:0e:1b:12:85:57:e4:58:02:0f:b3:39:36:
                    37:1e:6c:4c:b3:4a:64:9b:86:24:80:ec:a3:4e:f2:
                    ae:1b:13:22:81:21:7d:0f:fe:c5:c0:85:25:24:2a:
                    74:86:74:df:df:0a:3a:8c:e2:4c:81:7f:62:35:db:
                    18:35:57:11:cd:21:61:57:8a:87:99:95:38:b7:aa:
                    10:57:89:fc:28:ae:90:7a:3d:2e:5b:a0:ef:3b:24:
                    1e:f9:dc:5b:73:6f:2c:30:7b:f9:aa:53:3f:06:0b:
                    52:cc:78:84:fa:59:49:2d:18:e7:e8:01:7c:ee:71:
                    18:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C2:80:F7:4D:CD:FD:29:C4:A7:C6:9A:9B:7A:7C:76:CC:F0:13:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/b828d39e-9e2d-3a98-b77d-25dba55e6763.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.crl

            X509v3 Authority Key Identifier:
                keyid:61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.66.9.0-199.66.11.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:a3:54:08:76:8b:f9:25:28:45:82:02:47:e6:cd:16:aa:a7:
         f1:7e:24:f2:7f:84:1a:57:9f:24:30:b9:db:c6:4e:19:76:b7:
         ac:a1:10:b0:39:76:d6:6f:a7:8c:bb:85:86:4d:6d:0e:3e:01:
         97:9e:e3:09:4c:a6:fa:c3:21:84:b5:ec:a9:b1:b2:20:de:b7:
         97:a7:ef:8c:14:a0:0a:0f:5d:46:6c:c1:2e:84:4a:43:f2:39:
         b2:ec:bf:23:f3:18:08:b6:c7:d3:95:cf:70:11:c4:db:78:34:
         36:c1:9c:7a:48:9d:2e:21:ec:8e:3f:58:5a:d2:9a:b4:89:a3:
         f0:61:23:98:3d:d0:71:a5:be:01:9e:4f:e9:c1:36:2f:69:f2:
         a3:f7:78:78:06:5a:89:47:66:42:ad:c2:c6:77:6a:e3:87:07:
         70:35:0a:10:41:c0:93:8e:70:63:cc:36:0b:65:2e:ad:c5:97:
         31:e8:ca:d0:48:5c:ef:18:ea:ee:21:e9:05:6d:4d:dd:69:99:
         60:d4:74:92:37:b2:3d:95:3c:99:ef:dc:86:4d:58:53:b1:74:
         36:4d:17:7c:e7:24:02:3f:9a:4c:44:71:9f:49:7e:5f:a1:08:
         3d:d4:94:f5:0c:08:9d:c8:9a:09:2c:90:87:75:2d:77:b9:db:
         ee:01:ed:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 07:30:33 2025 by rpki-client