Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/933cd287-75bf-387a-83e6-d85b86aba33d.roa
File:                     933cd287-75bf-387a-83e6-d85b86aba33d.roa (raw, json)
Hash identifier:          OI4aDrwHvTOtnyXpb3Ejfd2DU9SvK6XgeTZuAsg/hgk=
Subject key identifier:   E7:06:82:33:AC:1C:94:71:31:76:33:24:D4:2C:17:19:8C:88:B8:62
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F432858481DFFE1D33F961273486A6800
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/933cd287-75bf-387a-83e6-d85b86aba33d.roa
Signing time:             Fri 06 Dec 2024 14:00:51 +0000
ROA not before:           Fri 06 Dec 2024 14:00:51 +0000
ROA not after:            Thu 06 Mar 2025 14:00:51 +0000
asID:                     2734
IP address blocks:        66.35.86.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1d:ff:e1:d3:3f:96:12:73:48:6a:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Dec  6 14:00:51 2024 GMT
            Not After : Mar  6 14:00:51 2025 GMT
        Subject: CN=f97fe8cb-3249-48f2-8789-60c1584cdf7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6c:f7:6d:1f:ea:ac:bc:0a:62:13:eb:eb:0f:
                    ab:f6:14:bc:f3:c3:f9:3f:5f:6d:c9:6c:80:de:7c:
                    66:39:da:87:3b:96:f5:d2:89:7a:99:12:0e:7a:1a:
                    05:79:ac:9b:8b:0f:11:2f:99:90:55:5e:65:f6:77:
                    cf:4a:81:db:a8:8c:fd:07:c3:60:2c:54:b2:16:ce:
                    ff:6f:74:25:ea:a3:7e:12:53:96:9f:26:6f:bd:42:
                    0d:f3:06:da:30:f6:83:e3:af:0c:18:dd:3c:2d:f3:
                    16:b1:97:43:c9:b6:9c:16:76:8a:45:8d:92:50:ee:
                    ce:85:11:fe:65:4a:62:d7:eb:aa:67:7f:fd:e0:18:
                    95:57:e3:7e:97:32:d9:a7:14:1a:2c:25:ec:84:36:
                    4c:48:bc:b6:27:1b:62:0b:32:0f:e7:c7:0e:3e:f1:
                    44:50:6a:9f:12:e2:ce:71:3e:ea:01:ef:9f:d0:6d:
                    2e:80:fe:ff:66:d6:69:50:43:93:e6:c1:50:cb:3b:
                    f1:5d:64:b8:d9:b4:18:6f:35:5d:8f:72:05:83:d1:
                    a4:ba:b9:d5:77:91:d7:b0:72:bd:ab:57:3b:73:df:
                    c4:1a:32:e1:9b:e8:76:aa:5a:9d:d6:64:fc:e1:80:
                    44:2c:c6:10:1d:61:4e:ab:5a:77:9c:4e:13:4e:81:
                    c7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:06:82:33:AC:1C:94:71:31:76:33:24:D4:2C:17:19:8C:88:B8:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/933cd287-75bf-387a-83e6-d85b86aba33d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.35.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:5b:ff:b4:96:c0:9e:c9:f5:46:4e:3d:b2:b3:9b:70:9b:f3:
         fc:eb:df:79:20:76:03:ac:24:44:37:fe:a1:29:c0:83:6e:a7:
         da:26:03:f1:ce:c0:46:b7:0a:f9:35:27:6f:8f:49:34:a3:c7:
         1b:8d:67:77:16:78:10:72:70:b5:58:50:a9:09:ce:a6:cb:c1:
         36:e5:c6:da:dd:fe:52:a4:2e:67:18:92:37:42:34:07:f7:c7:
         b4:ae:18:d1:40:33:a1:0f:b2:0a:e3:fa:e0:fd:ab:b8:c8:41:
         90:c7:f2:b1:fc:69:98:9e:a8:d6:2b:10:fa:e9:b7:ab:70:23:
         c4:ec:00:99:38:93:3d:ee:b3:5e:07:b0:c1:b0:96:6e:79:f3:
         65:81:53:4f:11:1f:32:bc:0d:98:d8:31:8b:3e:92:fe:22:3b:
         ba:f5:79:44:f3:14:58:67:a6:9c:52:91:f1:e5:07:f0:40:25:
         bb:01:76:1c:3f:f7:c2:d4:63:39:cb:fa:62:b0:5c:e7:53:52:
         b5:b9:4c:24:87:ec:1f:d3:96:f2:17:4b:35:87:71:f3:c0:fc:
         78:7c:3d:e9:d5:17:74:3a:bd:96:00:0c:e8:d6:c7:38:43:d9:
         cf:7e:54:bd:72:3b:a0:74:77:55:4d:38:a1:da:0b:d1:63:f3:
         e4:2b:b8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:29:07 2025 by rpki-client