Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/932614f9-93ff-322c-895f-a209b9bdba38.roa
File:                     932614f9-93ff-322c-895f-a209b9bdba38.roa (raw, json)
Hash identifier:          /jBf/ZG7cOn13Us4eQGicIVlPiRE0+lCDQHdGU3NBeM=
Subject key identifier:   15:E6:E8:64:8C:C6:1F:2B:FE:36:25:60:36:DE:72:6F:8C:4F:64:1C
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F432858481F653524E4BDE8E7B900C000
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/932614f9-93ff-322c-895f-a209b9bdba38.roa
Signing time:             Sat 07 Dec 2024 02:00:39 +0000
ROA not before:           Sat 07 Dec 2024 02:00:39 +0000
ROA not after:            Fri 07 Mar 2025 02:00:39 +0000
asID:                     20014
IP address blocks:        66.115.241.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1f:65:35:24:e4:bd:e8:e7:b9:00:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Dec  7 02:00:39 2024 GMT
            Not After : Mar  7 02:00:39 2025 GMT
        Subject: CN=c68eda68-e59b-41d4-b4e6-4cb11c8050c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:14:84:b6:bf:c4:c9:19:fc:7b:db:36:53:4c:
                    ab:0b:22:59:c8:6c:50:42:23:1c:3c:52:ab:84:55:
                    e0:6b:17:dd:79:0c:d6:a4:71:f9:13:66:2e:92:59:
                    b6:83:62:20:55:19:a3:3e:76:46:ae:1f:b3:0d:30:
                    2f:64:a6:02:6b:41:92:28:5d:cb:00:87:51:be:87:
                    8a:f5:93:19:27:c2:6b:71:8b:2a:ba:6f:e2:e0:e1:
                    f6:0e:b0:50:a5:d4:c2:da:86:20:8b:d7:74:3f:14:
                    9f:be:e0:fe:48:7c:89:3a:53:9c:7c:19:a0:97:93:
                    a0:9e:ee:0d:15:b4:ed:73:2c:3f:5c:ca:f6:aa:85:
                    5e:b8:43:7b:d8:68:16:df:49:cd:f0:34:02:25:87:
                    19:80:28:5f:89:37:0b:39:64:51:13:bf:5d:3d:b7:
                    47:4b:11:95:09:2f:03:69:2d:40:15:3c:8c:24:04:
                    ce:c6:4e:de:47:ee:76:3f:43:1e:f8:c9:5e:df:f0:
                    69:ee:87:f0:9c:f4:66:ae:0a:1e:c5:35:36:ec:f4:
                    e7:42:7c:af:a3:b9:b0:e2:8b:dc:f2:07:cf:e7:e1:
                    c3:be:70:22:36:69:d7:67:35:33:cb:0d:a5:63:c8:
                    ed:17:6c:07:ad:5b:d4:9f:2f:ee:61:b5:9f:bf:0a:
                    21:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E6:E8:64:8C:C6:1F:2B:FE:36:25:60:36:DE:72:6F:8C:4F:64:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/932614f9-93ff-322c-895f-a209b9bdba38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.115.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:a7:ff:b3:3f:29:24:2f:17:a3:0d:70:0d:45:06:30:c5:b4:
         65:51:b1:37:9b:7b:97:b2:54:b2:98:a0:35:5c:e3:65:a5:f7:
         a4:ec:bb:37:a9:7f:46:d0:18:f2:f4:bd:ef:b5:3a:e4:0f:da:
         56:8e:6b:dd:46:28:b4:58:61:b4:c6:f2:c5:93:99:b5:77:f3:
         42:59:d0:c7:1f:59:cd:4f:ff:5c:1c:56:02:eb:1e:7e:fc:29:
         17:67:fc:4d:e9:ae:ab:1b:84:4a:3e:ad:8c:cb:e2:a4:68:c7:
         58:96:57:81:bd:87:e2:ca:82:76:c1:95:3e:38:4e:5f:71:e7:
         3e:c7:39:03:93:2b:29:66:34:bb:f0:7f:c0:f2:96:7f:37:bc:
         64:fe:09:82:e0:66:19:69:b7:e5:bd:71:58:88:6b:1c:99:da:
         c5:3c:03:4d:6a:2b:98:18:39:52:f3:2b:e9:9b:2a:44:5c:ba:
         85:af:fa:df:de:38:4d:5c:b2:6a:cd:9e:31:39:42:c7:cf:bd:
         a9:82:03:0d:1e:46:98:38:65:39:5b:7d:d0:81:13:b0:d1:a1:
         b4:ed:4f:9b:23:57:d4:65:e4:02:fb:a8:58:e8:c9:bc:3c:ef:
         49:b5:5c:aa:cf:8c:f9:1d:68:b2:02:36:b2:65:28:b8:bf:ce:
         89:96:d1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:11:23 2025 by rpki-client