Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/fdb3bebb-194e-31d2-952b-231efd51bd25.roa
File:                     fdb3bebb-194e-31d2-952b-231efd51bd25.roa (raw, json)
Hash identifier:          oIaphRK53LR94oG4jSOHBYA+xD7DfCbh7WtQ3+XhNeI=
Subject key identifier:   8E:A3:08:89:9D:F6:91:58:7D:41:2C:C7:F0:50:B4:9D:21:29:BD:DB
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F432858486AC59DF473884D11AB73F900
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/fdb3bebb-194e-31d2-952b-231efd51bd25.roa
Signing time:             Fri 03 Jan 2025 02:00:40 +0000
ROA not before:           Fri 03 Jan 2025 02:00:40 +0000
ROA not after:            Thu 03 Apr 2025 01:00:40 +0000
asID:                     393417
IP address blocks:        66.115.202.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6a:c5:9d:f4:73:88:4d:11:ab:73:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Jan  3 02:00:40 2025 GMT
            Not After : Apr  3 01:00:40 2025 GMT
        Subject: CN=8018f811-80e5-40a3-bf05-f9fcbfd891a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:18:ed:16:d8:3f:34:e8:68:9f:3c:f1:bd:41:
                    25:82:0b:fa:76:88:18:e6:86:9b:d9:16:dd:14:de:
                    00:13:d5:17:f0:10:38:16:f4:66:cb:3c:90:28:a5:
                    6d:cc:04:6d:00:43:81:f5:34:1c:88:ae:2c:b2:f9:
                    06:fa:3f:3f:46:cb:1a:09:b0:b5:ea:b5:0a:57:76:
                    3d:cc:a8:30:6e:88:d0:0d:16:7b:e8:1b:90:6a:7b:
                    63:9e:49:3a:52:13:75:e5:a5:fd:0c:74:8f:83:41:
                    02:10:15:23:f1:e3:14:bd:ab:4a:ff:e5:de:9e:4c:
                    64:7e:25:e4:60:cb:04:c3:36:a0:40:25:2f:47:60:
                    7a:59:ff:08:d4:9c:19:85:65:5d:18:fc:56:ac:dd:
                    f9:87:ce:7f:34:fe:9f:d1:24:de:ec:df:0f:39:48:
                    34:c3:a5:b7:f6:d8:47:c3:22:9d:ab:68:a4:2e:f6:
                    4a:07:10:41:1d:fa:f2:f0:44:a9:fd:64:4a:db:c9:
                    74:b1:c6:d1:10:81:ae:4f:61:02:5a:4d:09:5a:ac:
                    c3:f2:6a:10:23:24:91:2f:ad:ea:44:47:4e:b2:af:
                    6f:e7:5d:a7:c3:36:c1:d1:cd:77:91:a0:6f:37:83:
                    77:d7:16:93:3b:48:6d:fa:e2:e6:10:25:6b:6b:df:
                    11:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A3:08:89:9D:F6:91:58:7D:41:2C:C7:F0:50:B4:9D:21:29:BD:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/fdb3bebb-194e-31d2-952b-231efd51bd25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.115.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:27:7b:9b:e9:3e:dd:e6:1c:9b:f4:2f:23:9d:55:e2:4f:68:
         ff:e5:9c:a3:aa:9a:73:2c:fb:e2:9f:d6:da:dc:31:f8:89:31:
         b8:33:65:87:9f:9e:3d:22:15:7e:c2:93:2c:b5:91:46:af:de:
         48:c3:c2:59:e4:49:66:89:5b:5d:96:59:1d:29:db:75:4a:c6:
         aa:f0:2c:90:83:66:4c:99:6a:89:73:1d:bd:0e:c7:ca:17:e9:
         48:52:54:c8:25:d7:4d:1a:ab:33:57:12:0a:5c:5b:be:76:ab:
         12:10:d6:10:6a:ca:29:3a:66:bc:1a:3f:c0:c3:71:c2:92:e1:
         a3:77:11:c6:d2:61:c5:42:ae:01:7e:ed:cd:11:c4:91:2c:e1:
         63:9a:4a:48:c1:64:e8:7f:ab:84:b1:d3:84:d5:98:9a:9a:30:
         4c:23:9b:bd:8e:d0:45:39:98:6f:0c:8b:4a:81:99:5c:1a:c1:
         82:6f:c3:19:4c:6f:ff:8d:4e:42:6b:1d:b2:6c:b4:e5:0c:64:
         2b:24:1d:83:f9:f3:d7:8c:80:19:5b:06:12:17:ac:0c:f0:a4:
         b6:eb:86:00:48:1d:4f:18:a5:89:68:3a:d2:fc:ee:4f:22:68:
         d6:23:e1:02:18:f7:17:49:a3:ab:01:ee:98:a4:09:af:dc:f0:
         80:47:d8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:03:07 2025 by rpki-client