Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d/4949026c-d1db-3ee0-ad33-ed991743406d.roa
File:                     4949026c-d1db-3ee0-ad33-ed991743406d.roa (raw, json)
Hash identifier:          JJ4AXroBnbTEa4FoggYYGLF5uELi0a8UD5QCR2GCLUk=
Subject key identifier:   FF:DA:0F:57:6D:4C:21:0B:87:4F:95:F4:F1:23:9C:45:BE:9B:65:FC
Certificate issuer:       /CN=64cf176b-c737-492c-95a5-54695fc5bc2d
Certificate serial:       010D0C9F432858484C10374431E78E8FFC351A40
Authority key identifier: 33:62:F0:BF:7D:FD:C9:04:AD:3A:12:76:E3:B0:8B:4B:15:79:4C:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d/4949026c-d1db-3ee0-ad33-ed991743406d.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     32181
IP address blocks:        66.55.80.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:37:44:31:e7:8e:8f:fc:35:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64cf176b-c737-492c-95a5-54695fc5bc2d
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=0db76843-5bc4-43a1-8c03-b9764e57adc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5f:b0:1e:8b:9e:80:f6:e5:45:c3:9c:ae:8e:
                    20:dd:a4:31:06:3f:69:13:c3:b5:74:5a:84:7d:43:
                    a2:d0:13:a5:b6:bf:c0:0b:ac:ff:e9:2b:c9:45:7f:
                    8f:4b:0d:b4:fd:26:04:f5:b5:0b:b7:d1:4c:41:b7:
                    63:12:60:f3:0c:40:cc:74:e9:71:94:4f:3c:66:2d:
                    cf:73:c8:b9:39:79:b9:8d:18:c9:41:fe:05:25:43:
                    7d:28:2f:00:96:60:b4:1f:12:47:1f:c8:e0:4a:63:
                    99:9d:f0:89:ab:10:4a:c0:df:e5:06:05:94:f2:53:
                    41:d9:f4:64:9c:92:c8:74:c1:e4:45:5f:b2:b9:85:
                    5a:ab:fc:2a:d4:6d:7f:a0:4f:6d:bb:05:3d:f5:71:
                    46:4e:ac:73:20:ae:64:dc:02:d7:11:c3:5a:83:f8:
                    a3:bf:99:84:e1:90:d4:76:bc:33:08:08:a8:dc:69:
                    24:f6:ce:d1:0f:0a:40:23:2e:bf:1f:a8:98:20:a2:
                    f7:a3:30:26:dc:dc:57:f1:c9:63:d9:c4:c8:4e:c9:
                    7f:b6:e6:b8:37:e8:f3:6a:bd:c5:a6:02:de:1d:08:
                    19:3e:b5:2b:2b:a3:13:4a:94:d0:03:23:8f:75:af:
                    72:41:f2:98:91:b5:2f:f9:4b:13:34:53:35:20:a2:
                    f1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:DA:0F:57:6D:4C:21:0B:87:4F:95:F4:F1:23:9C:45:BE:9B:65:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d/4949026c-d1db-3ee0-ad33-ed991743406d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d/64cf176b-c737-492c-95a5-54695fc5bc2d.crl

            X509v3 Authority Key Identifier:
                keyid:33:62:F0:BF:7D:FD:C9:04:AD:3A:12:76:E3:B0:8B:4B:15:79:4C:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.55.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:20:32:e7:6c:b2:0f:f1:b5:b7:e0:05:87:d2:4e:23:5e:ff:
         6c:2b:05:74:9e:fd:bf:c9:4e:35:6d:a8:a0:4e:90:f7:0e:b0:
         48:df:ea:aa:a7:03:ad:7e:ce:3c:ad:6f:24:a8:59:b0:e3:97:
         e3:83:fe:17:e0:a1:29:d4:fc:31:37:9e:7d:9a:0c:b0:81:7c:
         bb:28:bb:72:2c:28:0d:6f:d8:f6:21:9c:1f:bc:b1:48:ac:40:
         05:bc:7d:60:5f:e1:39:96:3a:c9:ed:35:d6:c9:08:2b:e3:98:
         15:df:f7:95:ff:db:8b:d7:d7:49:b2:92:96:7d:df:2f:fa:4b:
         4c:62:7f:7e:f3:b7:65:a1:ea:69:51:44:9a:55:f9:d1:44:0c:
         1f:a4:e0:19:0f:af:5c:ae:7a:6f:5c:b8:90:e6:31:9e:f4:80:
         77:26:ca:e8:56:c9:5e:a2:07:f0:62:c8:02:fc:91:7b:fc:68:
         c1:f4:1c:1c:ab:88:d2:d6:29:5b:e6:c6:53:01:f6:18:8d:50:
         1d:47:6c:24:79:cb:12:9d:5c:69:3f:cc:ff:46:c7:72:bb:b1:
         20:b8:3b:b5:44:c7:00:16:39:fd:8b:c8:77:13:ad:fe:33:fc:
         22:1c:93:9e:45:b5:f7:df:46:06:30:23:cd:5c:25:ee:a0:a4:
         e2:d8:3d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 16:14:43 2025 by rpki-client