Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/516d9441-73c0-35d1-af65-73c07b29f9c3.roa
File:                     516d9441-73c0-35d1-af65-73c07b29f9c3.roa (raw, json)
Hash identifier:          f1g3qJA+HTV1dhhKmzBtt1P9dQoFsa4ur6+laoPyFa4=
Subject key identifier:   2A:A2:BF:C5:53:7E:C4:19:5C:9B:95:41:E0:FB:58:E1:B0:17:58:B0
Certificate issuer:       /CN=58d2b29f-1da9-4b65-a82f-389822bed566
Certificate serial:       010D0C9F4328584839EAB79BC199E77919C3E940
Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/516d9441-73c0-35d1-af65-73c07b29f9c3.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     16509
IP address blocks:        66.81.254.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:b7:9b:c1:99:e7:79:19:c3:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=02aa5476-c659-45d8-9081-8ad0feff92e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f7:52:34:94:61:d6:43:c1:b3:da:ab:d6:90:
                    02:53:22:50:6f:45:c9:b2:c3:b1:7b:5f:ff:90:2e:
                    85:e0:c6:9f:33:2b:3e:2e:86:f0:2e:0b:60:32:fa:
                    a9:d3:a4:6e:0c:bc:15:76:42:86:fd:f7:b5:dd:7d:
                    3f:24:a2:31:5d:c0:d5:c3:bc:e9:bb:bd:0f:9b:72:
                    d8:5e:9d:4a:83:b4:55:14:85:7e:38:81:05:1d:69:
                    af:f7:b3:ed:d8:95:b5:ed:27:33:25:68:85:62:ea:
                    df:3b:42:a2:5b:0e:96:b9:82:77:1f:82:72:69:89:
                    44:99:15:88:57:1f:d9:cc:dd:a7:66:d9:d3:af:e0:
                    01:36:f0:88:56:be:fe:2a:07:34:cd:b9:f7:c2:34:
                    74:3e:4f:37:37:59:ee:96:da:ff:f7:74:e2:2f:3a:
                    e7:27:55:f6:85:4b:cf:1a:28:1e:e2:cf:ef:46:11:
                    0e:a2:68:cd:87:1c:bf:f9:38:a9:ff:88:35:73:8e:
                    4e:ca:78:2c:ae:82:43:94:4b:60:e1:e6:0f:5d:5e:
                    dd:67:a7:ff:48:2d:e1:a8:48:ec:18:3a:d8:3c:01:
                    4d:c1:ea:f3:58:30:15:95:e2:82:18:56:26:71:54:
                    01:c2:88:83:49:c7:cb:34:f0:6f:9d:5b:dd:38:ec:
                    b3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A2:BF:C5:53:7E:C4:19:5C:9B:95:41:E0:FB:58:E1:B0:17:58:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/516d9441-73c0-35d1-af65-73c07b29f9c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.81.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:af:85:27:d0:73:4b:5b:5e:d5:2c:58:16:29:8d:c1:fb:c5:
         4d:d8:aa:d4:a3:2c:8a:78:2e:a0:f3:19:e2:fd:c1:17:8d:4d:
         be:99:43:b7:49:90:ff:7f:e1:63:de:f4:66:6f:ed:40:c9:92:
         d7:96:2b:03:1b:4d:f3:2a:2d:cb:9c:71:f4:78:65:ba:84:62:
         52:35:86:22:c2:d3:b2:05:98:69:6e:f9:77:f2:6c:08:d2:fe:
         c6:0c:d6:7c:46:24:2c:4d:87:29:fc:bb:13:b8:3b:a7:fc:92:
         28:ba:e5:ce:b2:37:8e:ba:a8:c9:4c:03:75:b0:bd:e9:1b:87:
         ec:aa:bc:e8:94:16:b1:1d:22:1a:e4:f7:f4:13:51:52:99:4d:
         d2:f3:3d:e6:7b:39:e0:5a:fd:5e:40:0c:e7:3e:df:77:4a:93:
         88:bd:49:d1:7b:e9:0b:2c:e9:d6:9d:7e:ef:3d:12:55:8e:a9:
         af:3d:e3:56:07:8a:07:35:e4:ff:9d:27:ff:8e:8f:38:1e:af:
         0b:87:76:82:bc:0a:92:12:ac:be:4b:8c:ae:78:6a:ca:16:b3:
         f1:62:47:80:fd:ca:c0:44:12:a7:d0:75:f1:58:a5:04:59:ba:
         14:10:33:ed:18:e9:c5:3a:79:f2:45:1d:8b:e3:20:a0:11:29:
         b7:5e:38:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:40 2025 by rpki-client