Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6b88d308-cc5b-3f80-8362-ae78195a9350.roa
File:                     6b88d308-cc5b-3f80-8362-ae78195a9350.roa (raw, json)
Hash identifier:          a89JifLUgQT7Z5751fJZJxuU51mZazKi77uDoGYW9NQ=
Subject key identifier:   1F:EF:5E:73:B3:62:3A:F3:83:CB:9E:C3:3E:FE:67:CC:BA:C2:9B:1A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848424B1D20C9375A08CB7068C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6b88d308-cc5b-3f80-8362-ae78195a9350.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        66.174.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4b:1d:20:c9:37:5a:08:cb:70:68:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=fd93be37-c9cc-4a47-9c81-cdef15271862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:93:b6:2b:8e:c9:6f:95:4f:65:2b:c6:45:75:
                    9d:5b:1a:ed:f2:1f:4b:ce:e2:dc:1c:2a:0b:5d:5d:
                    13:9d:ac:77:20:0b:1e:1f:08:7a:e9:5a:c3:ae:8c:
                    1a:85:28:26:4d:84:4f:60:28:06:71:07:5f:80:19:
                    8a:16:fd:7a:c6:05:b5:ad:13:5b:eb:c9:ac:af:93:
                    77:27:b9:67:f4:05:09:b8:e7:b3:7c:2f:80:f4:dd:
                    3c:39:5b:15:13:1c:3d:27:ff:4f:8c:f3:83:4d:ff:
                    c8:3a:65:e9:29:43:23:74:eb:8b:af:28:1d:95:9b:
                    05:90:04:bb:0f:d9:c4:08:e7:bb:7f:72:a1:37:70:
                    9e:96:e0:4e:d3:3f:56:1c:70:4b:07:51:bf:8e:ba:
                    46:dc:60:0c:15:ca:03:5c:71:0e:72:2a:74:e7:18:
                    3e:64:de:91:06:09:28:92:5c:f0:b8:6a:17:15:a0:
                    7d:30:6a:c3:a1:10:8e:53:9e:74:59:4f:aa:1f:fd:
                    73:35:d9:47:8c:89:af:40:46:4e:9b:29:44:c4:e0:
                    5a:e9:fa:4c:72:95:29:d2:94:76:88:2f:10:a5:b6:
                    ec:2b:d0:3d:a4:a3:2f:9b:7c:a9:fb:aa:9a:27:18:
                    d8:27:12:a2:79:e0:a9:67:ab:16:b7:9d:d1:de:97:
                    e4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:EF:5E:73:B3:62:3A:F3:83:CB:9E:C3:3E:FE:67:CC:BA:C2:9B:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6b88d308-cc5b-3f80-8362-ae78195a9350.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.174.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:68:dd:42:68:0c:8e:83:7e:07:40:6e:36:b5:3d:ee:ae:a1:
         eb:c2:92:3e:c4:3c:bb:04:4d:a7:71:11:00:b3:5c:79:25:5d:
         9e:33:54:3e:03:f7:d6:b3:d1:fb:36:fa:bf:3e:6a:8e:01:ea:
         9c:50:c4:3a:17:48:6e:24:24:db:a1:ab:71:b3:f1:38:95:59:
         f7:4a:59:81:a1:53:ff:99:e1:84:1a:83:76:89:11:cb:8e:e8:
         5e:d4:9f:4f:1e:41:2d:c9:b9:65:23:05:6d:1b:78:b1:68:a6:
         fa:c2:e0:cc:d0:08:91:0c:45:6b:39:00:b9:88:4b:fb:7d:3c:
         d1:db:db:57:5e:3b:5a:83:f1:7b:50:6e:79:5f:f1:74:96:78:
         5b:1a:e0:91:41:7c:50:97:c8:18:f2:22:f8:a8:d4:91:59:21:
         4e:a4:d0:02:4d:bc:98:7d:e4:a7:6e:6a:96:62:47:c6:76:1a:
         ac:5c:3e:0f:75:23:b6:c4:90:49:c5:ba:ed:f3:c1:0b:f1:c7:
         08:45:4c:40:b4:5f:b4:44:17:fc:92:5f:d0:6d:f8:66:8c:5e:
         7f:20:c5:18:86:7b:03:21:b7:3a:20:26:47:a0:91:1c:d9:e0:
         b4:fc:fc:3c:6d:7a:56:ce:50:6e:7a:1e:47:4b:82:d1:af:ed:
         47:d4:fb:71
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEhCSx0gyTdaCMtwaMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIxOTE0MDA1MloXDTI1MDMxOTEzMDA1MlowLzEtMCsGA1UEAxMk
ZmQ5M2JlMzctYzljYy00YTQ3LTljODEtY2RlZjE1MjcxODYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZO2K47Jb5VPZSvGRXWdWxrt8h9LzuLcHCoL
XV0Tnax3IAseHwh66VrDrowahSgmTYRPYCgGcQdfgBmKFv16xgW1rRNb68msr5N3
J7ln9AUJuOezfC+A9N08OVsVExw9J/9PjPODTf/IOmXpKUMjdOuLrygdlZsFkAS7
D9nECOe7f3KhN3CeluBO0z9WHHBLB1G/jrpG3GAMFcoDXHEOcip05xg+ZN6RBgko
klzwuGoXFaB9MGrDoRCOU550WU+qH/1zNdlHjImvQEZOmylExOBa6fpMcpUp0pR2
iC8QpbbsK9A9pKMvm3yp+6qaJxjYJxKieeCpZ6sWt53R3pfkjwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFB/vXnOzYjrzg8uewz7+Z8y6wpsaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNmI4OGQzMDgtY2M1Yi0z
ZjgwLTgzNjItYWU3ODE5NWE5MzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQq4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAgWjdQmgMjoN+B0BuNrU97q6h68KSPsQ8uwRNp3ERALNceSVdnjNUPgP3
1rPR+zb6vz5qjgHqnFDEOhdIbiQk26GrcbPxOJVZ90pZgaFT/5nhhBqDdokRy47o
XtSfTx5BLcm5ZSMFbRt4sWim+sLgzNAIkQxFazkAuYhL+3080dvbV147WoPxe1Bu
eV/xdJZ4WxrgkUF8UJfIGPIi+KjUkVkhTqTQAk28mH3kp25qlmJHxnYarFw+D3Uj
tsSQScW67fPBC/HHCEVMQLRftEQX/JJf0G34ZoxefyDFGIZ7AyG3OiAmR6CRHNng
tPz8PG16Vs5QbnoeR0uC0a/tR9T7cQ==
-----END CERTIFICATE-----