Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/c534c6ce-25a2-3890-9411-9deda0cc8b45.roa
File:                     c534c6ce-25a2-3890-9411-9deda0cc8b45.roa (raw, json)
Hash identifier:          Z94R77h83AaImLWuniKNht7aV4wHiTWuGUQNEpEKtns=
Subject key identifier:   4A:E2:87:87:2E:E3:83:22:28:A3:BB:1C:57:E8:73:1A:74:30:C7:B0
Certificate issuer:       /CN=58d2b29f-1da9-4b65-a82f-389822bed566
Certificate serial:       010D0C9F432858482A8FDE735835E6B80B53CE40
Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/c534c6ce-25a2-3890-9411-9deda0cc8b45.roa
Signing time:             Wed 11 Dec 2024 02:00:38 +0000
ROA not before:           Wed 11 Dec 2024 02:00:38 +0000
ROA not after:            Tue 11 Mar 2025 01:00:38 +0000
asID:                     40627
IP address blocks:        66.81.241.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2a:8f:de:73:58:35:e6:b8:0b:53:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566
        Validity
            Not Before: Dec 11 02:00:38 2024 GMT
            Not After : Mar 11 01:00:38 2025 GMT
        Subject: CN=0b79b1f5-ec1f-4988-8555-396dc53c76ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e5:12:f4:69:ff:5f:96:71:cb:7f:e5:68:78:
                    1b:af:b7:ff:dc:41:67:87:3b:7a:fa:af:06:29:76:
                    f9:5c:c9:d3:f8:1a:97:a3:2b:e2:f3:da:27:99:65:
                    c8:b1:9e:9c:77:56:8f:18:d0:29:24:f6:76:e7:ea:
                    15:dd:fd:18:88:4c:0c:44:b5:e1:10:8e:e0:72:e6:
                    3d:b8:95:2e:9d:a5:d6:42:a3:27:59:43:82:cf:8c:
                    d2:50:8c:d0:ed:41:07:af:f0:5f:67:57:1e:3c:d6:
                    a7:bf:95:82:ae:c7:57:d3:31:e4:01:24:0b:53:34:
                    bf:44:05:1d:08:50:26:4b:8f:9c:ad:46:8f:fe:26:
                    86:b8:3c:f6:16:de:27:43:cd:70:05:e7:cd:85:cd:
                    4f:5c:86:a2:2d:1c:45:34:c1:52:65:23:d8:5d:89:
                    af:d9:1a:4c:c8:01:60:c9:8f:d6:75:ad:2c:c7:a2:
                    63:16:98:af:0c:d4:37:fc:6b:29:f6:6d:a8:b0:2f:
                    e9:5a:d0:0e:89:b9:35:48:5c:31:9c:39:f9:b8:9e:
                    b6:ba:8b:4d:41:23:ed:3e:fa:b9:f0:02:78:34:35:
                    1c:ff:c8:ae:55:81:c2:77:f7:35:f7:7a:73:77:2e:
                    1f:07:f7:5d:1b:75:c3:8a:8b:48:7c:64:59:f3:83:
                    78:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E2:87:87:2E:E3:83:22:28:A3:BB:1C:57:E8:73:1A:74:30:C7:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/c534c6ce-25a2-3890-9411-9deda0cc8b45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.81.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:03:e1:f9:13:2b:7e:b7:4c:ff:db:12:29:67:34:74:60:8f:
         39:8d:e9:d8:d8:ce:3d:69:dd:e7:72:33:44:7e:2c:05:a1:92:
         28:15:b1:63:ea:e7:51:89:92:8b:59:ab:73:18:0f:46:19:fb:
         b5:22:49:e1:89:a5:d1:c0:f0:51:6f:85:6d:a6:fd:9b:5d:a6:
         5e:c1:dc:69:98:a5:86:2f:ea:5f:50:91:15:8f:80:59:cf:61:
         28:79:b7:95:61:d4:01:ca:9e:29:37:4b:2d:a8:24:75:65:95:
         10:f6:04:fe:1f:61:5c:0c:0f:84:6f:d6:25:16:4c:94:87:76:
         3b:ad:16:5a:56:36:da:e5:bb:38:d3:85:fb:ff:4c:8f:53:1f:
         b4:c9:66:ee:c4:8d:ad:08:5b:20:93:53:38:e9:5f:3e:6a:f9:
         94:5b:dd:dd:8c:4b:17:9b:f0:17:2d:cc:dd:a5:95:1b:30:85:
         21:d4:fc:cc:86:4a:5c:7a:78:5c:95:05:ca:b4:41:da:e6:34:
         6e:ce:0e:b7:1f:e2:e8:ee:42:33:0a:4d:ec:5a:8d:76:f4:8a:
         0b:38:af:e6:10:56:9a:56:89:0c:b2:cc:b8:d1:32:fd:26:26:
         1e:98:ea:04:0a:ce:96:1f:65:20:a3:0a:13:25:d4:89:a5:9b:
         76:65:d2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:14:41 2025 by rpki-client