Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/70cfa34f-ed1f-3fd8-92e7-a30bb84a1260.roa
File:                     70cfa34f-ed1f-3fd8-92e7-a30bb84a1260.roa (raw, json)
Hash identifier:          aMEgmuakMAKe7vi/l6fH7uTWouMVX+uyZVkyz/LTcK0=
Subject key identifier:   DE:C9:65:6D:BE:51:47:75:FC:08:0C:0F:2C:44:C7:57:AE:68:A5:B4
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F432858486EF5B48A8A20ACF1FCE93660
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/70cfa34f-ed1f-3fd8-92e7-a30bb84a1260.roa
Signing time:             Sat 04 Jan 2025 14:00:51 +0000
ROA not before:           Sat 04 Jan 2025 14:00:51 +0000
ROA not after:            Fri 04 Apr 2025 13:00:51 +0000
asID:                     2559
IP address blocks:        66.185.183.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6e:f5:b4:8a:8a:20:ac:f1:fc:e9:36:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Jan  4 14:00:51 2025 GMT
            Not After : Apr  4 13:00:51 2025 GMT
        Subject: CN=605c5ce4-3d23-407d-8a42-ea26f5ecc0b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:99:1b:be:6c:64:b8:59:5f:76:a4:ec:c9:f5:
                    ab:bf:15:a0:33:b4:07:50:bd:25:bb:ed:f1:65:51:
                    31:0d:19:16:ab:34:be:b5:93:94:54:b3:f9:b4:d2:
                    c2:22:c2:ef:a8:90:b7:b9:6a:16:a8:4a:3c:33:d7:
                    b8:ef:77:8f:64:7f:af:98:62:ff:8b:58:06:fc:87:
                    8c:50:8c:d4:cf:49:17:e7:ea:71:09:83:39:19:89:
                    fa:1a:a9:bc:75:32:3f:66:10:56:9a:9d:da:74:7a:
                    d2:ac:bd:09:5f:85:37:7f:3f:46:5f:a9:eb:92:f7:
                    97:18:c1:b3:56:fe:a8:a9:ac:1c:64:2e:7c:51:30:
                    e4:43:aa:16:de:44:83:f8:e3:13:f4:04:a1:28:3a:
                    03:8c:23:06:87:cf:d4:12:a9:1b:ed:2e:8a:00:37:
                    34:1f:9f:6a:4d:a1:b1:9c:c2:e4:81:d7:9a:91:8e:
                    07:a6:2e:ae:8b:0d:e5:6a:9b:44:cf:25:70:5d:6e:
                    bd:90:ab:8d:6e:ef:b4:5e:12:e6:10:71:c9:a2:e5:
                    18:e2:2d:d0:1f:41:77:cc:32:9a:9f:84:85:5d:5a:
                    8d:3a:8a:94:93:1c:35:b4:f8:b0:e6:89:90:70:51:
                    34:65:c4:93:ff:70:25:20:0f:38:bd:bd:d3:4a:4e:
                    01:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C9:65:6D:BE:51:47:75:FC:08:0C:0F:2C:44:C7:57:AE:68:A5:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/70cfa34f-ed1f-3fd8-92e7-a30bb84a1260.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.185.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:8c:b6:95:d1:9d:3e:34:bd:9f:bc:9c:14:fe:b3:51:75:e4:
         e5:67:13:3e:94:d1:e1:d9:53:1a:df:47:69:d3:70:6e:71:9d:
         b1:2f:fd:8d:fc:4e:f1:a1:e6:96:97:c3:4d:a6:96:3c:0b:36:
         84:52:96:c3:89:37:77:12:9c:5a:5d:ab:cb:9c:b6:63:e3:21:
         47:94:22:72:8c:7e:ce:b5:b9:f0:8e:1f:e5:6b:bc:5e:e4:19:
         46:ff:be:d8:a0:5d:17:1d:4f:e8:af:a0:14:be:56:9f:5f:48:
         e4:6e:d6:c7:d1:26:2f:95:7e:80:0f:15:25:43:7d:44:b5:ca:
         6a:bc:5b:63:8d:ca:d0:f6:96:68:0d:1b:27:3e:53:a7:1f:de:
         37:0b:22:99:b2:22:41:2e:66:07:de:65:9e:8a:99:24:fe:dc:
         d2:dd:b0:a3:73:e9:38:87:ba:68:53:a1:de:61:ef:6a:6e:87:
         75:d4:ea:c0:97:51:d8:16:9d:c8:fe:ee:34:50:e6:8b:5a:e0:
         52:9f:4a:01:16:aa:81:14:0e:19:ab:91:dd:ce:ea:e4:b3:58:
         8e:60:6f:53:24:f1:0b:07:a1:0e:12:ed:e7:f5:82:ed:06:1c:
         16:8d:2c:72:86:7f:e2:af:2b:0e:34:8e:cb:90:4b:6b:d4:f7:
         75:72:98:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:40 2025 by rpki-client