Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/e7ff64c8-fe66-3ddf-8af1-9e16b68019dc.roa
File:                     e7ff64c8-fe66-3ddf-8af1-9e16b68019dc.roa (raw, json)
Hash identifier:          MQ96+ofNzGekfGiba92TuigoBN2NSSCt3tx/Dt+v7qY=
Subject key identifier:   8B:8A:B2:99:F1:C9:22:96:ED:28:BC:29:9F:11:CB:76:54:76:40:37
Certificate issuer:       /CN=fc9e4738-7902-435b-802c-f37dc4b25f95
Certificate serial:       010D0C9F432858481F6526BBE2D7325CF4850B40
Authority key identifier: 34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/e7ff64c8-fe66-3ddf-8af1-9e16b68019dc.roa
Signing time:             Sat 07 Dec 2024 02:00:39 +0000
ROA not before:           Sat 07 Dec 2024 02:00:39 +0000
ROA not after:            Fri 07 Mar 2025 02:00:39 +0000
asID:                     46401
IP address blocks:        66.54.132.0/22 maxlen: 24
                          67.200.52.0/24 maxlen: 24
                          67.200.53.0/24 maxlen: 24
                          67.200.56.0/23 maxlen: 24
                          67.200.116.0/23 maxlen: 24
                          74.199.198.0/23 maxlen: 24
                          208.97.205.0/24 maxlen: 24
                          209.213.215.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1f:65:26:bb:e2:d7:32:5c:f4:85:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9e4738-7902-435b-802c-f37dc4b25f95
        Validity
            Not Before: Dec  7 02:00:39 2024 GMT
            Not After : Mar  7 02:00:39 2025 GMT
        Subject: CN=f368a414-f200-4a9b-816e-32cdbb310122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b4:7f:19:85:03:be:d1:96:70:dc:fe:37:f4:
                    67:bc:1a:bf:d3:f3:b5:18:24:be:86:02:81:6d:55:
                    26:26:1f:62:89:2e:a9:61:c2:e0:05:e6:f6:fa:f6:
                    bb:2d:5f:37:29:42:7a:16:c9:ad:82:57:36:4c:e8:
                    28:bf:11:8c:83:e7:01:b4:d5:25:84:f2:00:eb:ab:
                    7b:76:91:de:37:f1:6d:a2:89:49:4f:36:90:8e:d7:
                    d4:2a:62:f4:b8:f7:36:a6:71:f0:ea:f9:a7:1a:91:
                    ec:42:92:33:e1:96:8d:ff:41:db:73:07:ca:ed:ad:
                    80:8d:95:fd:d7:24:44:aa:2c:08:c6:39:be:0b:8e:
                    54:6b:db:ea:12:15:8d:65:46:83:f4:01:9c:c6:84:
                    2e:07:03:c0:b8:bb:f6:f8:bf:e0:c9:77:4e:e5:32:
                    9a:79:72:b2:e9:05:2d:ff:45:cd:15:42:9e:1e:d6:
                    b8:4a:59:da:b6:fc:1d:f0:85:24:56:4f:fc:a4:02:
                    cd:48:e5:25:cc:87:48:af:72:6b:5e:de:8e:1d:22:
                    94:41:83:ee:bd:08:44:4c:3a:23:00:6b:e3:87:8c:
                    5a:25:4f:76:e3:29:6d:4a:bc:50:28:ac:0a:8f:8a:
                    b6:92:76:e2:84:77:54:80:20:9f:ad:e5:6f:0e:bb:
                    c6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8A:B2:99:F1:C9:22:96:ED:28:BC:29:9F:11:CB:76:54:76:40:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/e7ff64c8-fe66-3ddf-8af1-9e16b68019dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/fc9e4738-7902-435b-802c-f37dc4b25f95.crl

            X509v3 Authority Key Identifier:
                keyid:34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.54.132.0/22
                  67.200.52.0/23
                  67.200.56.0/23
                  67.200.116.0/23
                  74.199.198.0/23
                  208.97.205.0/24
                  209.213.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:ef:d3:41:d6:67:f7:f3:ef:d0:d1:b3:17:68:36:bb:19:80:
         a3:7d:f7:a4:36:24:94:9b:0d:45:3e:94:c3:97:cd:be:af:04:
         ec:53:d8:d7:d6:32:40:63:dc:b6:f1:49:21:a1:68:16:67:38:
         4d:62:46:62:79:ef:30:cb:3a:78:fc:ba:0d:89:99:f2:8f:e3:
         09:e0:22:ad:93:5a:cb:5b:13:05:6e:22:97:40:19:69:13:41:
         92:8c:a4:f1:2b:aa:dc:59:29:51:01:8c:5e:30:c3:2f:7e:5c:
         dd:0a:6e:40:39:ea:53:aa:37:e6:e5:b4:3f:2a:73:0a:72:1f:
         d7:eb:fd:34:ad:36:2f:9a:19:82:41:b3:84:38:3e:19:43:f7:
         05:0c:41:e4:c0:71:bb:98:d6:30:d1:20:81:98:78:4e:a0:6c:
         4f:86:24:5c:41:25:2b:b0:e5:bd:48:18:d4:ac:a9:37:4a:4e:
         59:66:22:d3:04:99:21:5c:bd:93:d6:51:ac:d1:98:cd:6c:13:
         38:5d:c8:22:4a:c2:46:a0:19:64:f7:c2:6b:6d:88:6d:e1:ef:
         d6:d0:b8:37:e9:72:b8:3a:7c:f3:2f:d6:2c:91:a6:bb:5c:82:
         da:55:5f:36:9e:0b:d4:3b:db:51:12:bd:ad:86:9c:c5:9c:fd:
         67:29:cd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 01:00:22 2025 by rpki-client