Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/66d59e41-92c5-3191-aafe-3d13ea15ed3d.roa
File:                     66d59e41-92c5-3191-aafe-3d13ea15ed3d.roa (raw, json)
Hash identifier:          9v0+H0y0QpsufKpU7pNJqA6BxzDrP0TmngTtlYfx6Gs=
Subject key identifier:   29:42:EE:F4:0A:D4:5D:8C:1A:EA:40:DE:BC:91:F3:EA:37:6C:B4:87
Certificate issuer:       /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
Certificate serial:       010D0C9F43285848748B1590BC38F85DB42490A0
Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/66d59e41-92c5-3191-aafe-3d13ea15ed3d.roa
Signing time:             Mon 06 Jan 2025 14:00:52 +0000
ROA not before:           Mon 06 Jan 2025 14:00:52 +0000
ROA not after:            Sun 06 Apr 2025 13:00:52 +0000
asID:                     138699
IP address blocks:        199.103.24.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:74:8b:15:90:bc:38:f8:5d:b4:24:90:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
        Validity
            Not Before: Jan  6 14:00:52 2025 GMT
            Not After : Apr  6 13:00:52 2025 GMT
        Subject: CN=60aa501f-12b3-4cdc-9ac3-89d3940c02ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c3:f5:a0:b3:d9:dc:ef:8c:66:bc:a1:1c:19:
                    39:3b:a9:6d:16:52:2b:91:0f:f2:7c:ff:dd:a3:2b:
                    fa:54:83:f7:be:30:07:12:0e:43:90:2f:bf:03:e4:
                    2d:b8:72:01:17:9b:1d:35:33:2a:f4:8a:f8:98:c3:
                    46:77:d2:20:d5:1f:b7:09:3e:68:f4:51:fc:06:35:
                    a2:75:98:c1:98:94:e7:0b:fc:97:16:5a:ca:a7:bb:
                    42:61:85:87:2e:0c:e9:c7:79:6a:0d:e5:8f:8b:59:
                    f2:3c:80:38:77:f4:08:a8:88:36:4f:a3:f7:25:e8:
                    d1:e9:d3:eb:7f:ab:8e:fa:c1:56:64:f6:20:81:78:
                    84:5f:e3:56:90:41:4f:da:22:14:d6:75:20:c5:f2:
                    de:f5:82:93:08:4c:0b:df:29:eb:49:fb:e3:4a:44:
                    be:e2:83:b9:eb:48:30:42:60:a7:c7:e3:bb:5c:1f:
                    9d:b4:ec:8b:b0:c9:9f:51:3a:55:f0:37:0d:5f:b1:
                    1e:43:0b:e3:e0:13:83:86:3b:f4:4f:01:0d:2e:50:
                    2b:23:29:37:c1:26:45:d9:c6:c7:2b:41:7b:03:00:
                    51:72:d6:e7:e0:dd:61:96:29:ff:99:7d:49:06:b9:
                    07:82:0a:eb:c5:36:24:a2:d3:4e:15:d8:37:0b:1a:
                    b8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:42:EE:F4:0A:D4:5D:8C:1A:EA:40:DE:BC:91:F3:EA:37:6C:B4:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/66d59e41-92c5-3191-aafe-3d13ea15ed3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl

            X509v3 Authority Key Identifier:
                keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.103.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:46:15:ec:19:1f:47:81:e7:f5:2a:99:93:70:97:01:7b:b9:
         a8:83:cf:4a:75:8b:5f:ac:5f:bb:e7:0c:62:62:b1:f8:d9:5e:
         0b:92:65:ad:89:7a:9d:0d:03:64:e0:d5:51:28:33:0e:95:2f:
         49:82:6e:2d:20:5c:63:ec:9b:7c:28:27:c0:f1:f6:d6:8b:37:
         81:e0:31:d6:aa:f3:e1:3e:5d:13:21:16:f5:5f:c9:28:f2:8c:
         3f:67:71:98:ba:3e:79:7a:e9:2e:f3:d8:1d:98:e0:01:c4:83:
         bf:9c:18:07:34:eb:03:17:7c:c7:31:75:44:13:c2:4d:78:7d:
         2d:65:8e:9e:55:b9:ac:4a:02:08:51:fc:bd:3f:5d:4d:3b:ae:
         54:e4:aa:38:57:5a:2a:d7:79:97:50:21:6d:ef:40:8a:8d:ad:
         07:2f:20:c2:f1:00:b4:64:f4:c3:56:b0:2c:da:12:b6:9b:d7:
         13:95:dc:84:f2:d3:af:53:28:27:af:05:38:fd:aa:a5:3c:0e:
         c0:86:6d:c0:12:05:8c:a2:89:a9:71:63:b2:99:3b:03:ae:36:
         72:e1:2a:3d:96:1d:54:91:0b:d7:1f:c1:e6:5d:aa:4a:53:a0:
         6b:ce:6a:e0:08:65:9e:d8:ca:76:79:ec:97:5e:13:4e:be:b7:
         8a:6e:15:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:02:23 2025 by rpki-client