Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db522510-67ea-3e25-b6fb-5c3391587221.roa
File:                     db522510-67ea-3e25-b6fb-5c3391587221.roa (raw, json)
Hash identifier:          WWIbFopNrCB6rNcY1Xt03Nn0CMJUDlGTd+IyTrP6ZWA=
Subject key identifier:   EB:D3:11:CA:D8:99:22:F9:4C:74:29:1D:0D:DD:75:75:67:BF:E3:A1
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285847E8F4E6A9152846DA648A998C
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db522510-67ea-3e25-b6fb-5c3391587221.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     15169
IP address blocks:        66.102.1.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:e6:a9:15:28:46:da:64:8a:99:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=f1770d3a-d7ac-4102-8778-8e435fcf9742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:78:33:23:50:b6:54:cf:4e:60:61:ee:6f:5d:
                    ea:1e:df:8e:3e:57:26:aa:ab:fc:80:ca:8a:f7:ba:
                    df:80:2e:c3:c6:87:75:c3:45:34:57:31:84:c7:d1:
                    1f:8d:5a:b8:29:b4:5b:d9:66:38:aa:39:5c:f9:8a:
                    4f:23:fe:62:fc:cf:35:5d:7e:cf:68:3b:a6:b4:82:
                    f5:14:71:6b:01:6a:1e:c8:0c:b6:e3:e0:91:c2:3a:
                    f5:4a:30:6a:38:cf:31:1c:ee:49:52:ef:f3:1d:ba:
                    37:da:f9:7a:b1:3e:fd:52:49:a0:40:86:0d:c0:4b:
                    dd:15:5b:11:6b:30:5b:ee:cc:6e:2e:46:19:46:c3:
                    7b:d7:66:71:1e:d8:52:13:09:12:8f:9f:ba:52:5b:
                    f8:1f:84:1d:48:06:c8:05:07:df:d8:ec:3b:24:12:
                    e9:23:27:11:01:18:f9:8d:88:ad:6a:1c:55:2b:99:
                    ba:fb:b3:a3:91:36:b8:e4:60:6c:de:71:e3:f8:13:
                    60:70:49:05:01:85:0f:50:ad:5c:e9:75:0b:e4:6d:
                    d5:4f:59:ea:c6:82:93:4c:dd:9d:82:9b:d2:61:31:
                    ab:99:c0:2a:a9:1d:6b:bd:2a:af:24:49:77:a7:b1:
                    c7:87:5c:fe:0a:41:3a:c9:1e:59:16:e1:bf:34:78:
                    69:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D3:11:CA:D8:99:22:F9:4C:74:29:1D:0D:DD:75:75:67:BF:E3:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db522510-67ea-3e25-b6fb-5c3391587221.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.102.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:d2:21:0a:6e:bf:b3:61:b9:2f:b0:7d:b8:27:45:58:7b:61:
         bf:7b:dd:a3:ba:b8:90:b4:7d:33:c3:89:1f:e8:67:2c:83:38:
         d5:6e:02:63:dc:bd:28:fc:ac:16:7f:47:74:ee:b1:98:c7:ae:
         c5:2a:c9:ab:50:0c:6f:42:d1:3f:75:55:1b:c3:dd:74:39:a2:
         1f:0f:a2:26:5b:d8:07:a4:c7:08:c6:49:4b:fc:d8:7b:64:4e:
         17:a8:0a:ac:a3:fe:39:e9:1a:b3:3d:3b:61:04:0a:82:e5:4b:
         f9:82:b3:a1:f7:34:93:32:89:07:ba:4f:f0:58:c7:7a:6c:1f:
         86:ed:39:42:5d:8a:2f:f4:76:d3:ba:0f:a9:ec:54:ae:5f:cd:
         df:ff:bd:a4:69:fd:01:8e:76:dc:82:42:75:8b:37:c8:c0:29:
         b9:81:39:6c:89:82:c7:3b:bb:98:f5:7a:e8:8b:02:5c:63:2b:
         f7:9e:a5:0e:46:cf:e3:cc:58:d4:25:7e:29:aa:bb:51:08:94:
         5e:73:8e:15:6f:59:e4:75:ae:a5:63:f5:3c:23:83:74:99:f3:
         59:5c:b1:88:36:e0:29:92:55:84:88:1b:ea:4f:77:be:8c:2d:
         e1:c9:42:16:94:26:2e:13:ed:55:8a:17:d5:d1:48:8f:f6:3b:
         62:9c:63:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:25:01 2025 by rpki-client