Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/89cc4706-6092-3bda-840d-406a49074b7c.roa
File:                     89cc4706-6092-3bda-840d-406a49074b7c.roa (raw, json)
Hash identifier:          Mgeb4E7D/BdDpH6CvoJhhTx34psMEkhFq/UiUuw+XlU=
Subject key identifier:   BB:8B:D6:F0:0A:42:FF:42:EC:A0:91:76:E6:5B:87:82:83:8F:E1:9F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848037B225883F6C941A6F53880
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/89cc4706-6092-3bda-840d-406a49074b7c.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20115
IP address blocks:        66.168.176.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:22:58:83:f6:c9:41:a6:f5:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=14371273-3f5e-4c4d-aa25-b87a554aba22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:62:8c:05:f1:ea:bf:46:63:e9:d4:27:61:34:
                    fe:e4:fe:17:b9:c5:d1:78:ad:56:67:2b:2f:b4:7f:
                    3c:39:66:32:05:ae:71:5d:6f:aa:c5:46:8c:ff:91:
                    3b:b7:51:c8:1d:9e:a5:de:01:4f:bd:99:9b:29:03:
                    dc:9c:3f:a1:14:f1:77:c9:be:b5:5b:e9:6c:e7:0a:
                    88:b1:6d:33:fe:b1:65:52:e1:78:a9:27:7e:21:22:
                    86:9b:12:16:21:cd:8d:ee:28:09:86:1a:05:d0:2c:
                    07:ef:99:8b:45:84:cc:f4:76:5b:3c:f8:d3:a7:53:
                    a6:fb:de:30:5c:02:13:5e:9b:23:28:b2:0d:3c:ef:
                    32:89:3b:43:5f:34:67:46:9f:8e:d9:46:d4:9b:56:
                    5e:20:6a:5b:72:e7:6a:8b:31:33:bf:03:52:4a:95:
                    f9:d5:db:67:00:d3:50:d2:22:b1:82:04:93:e9:66:
                    79:8a:36:e7:94:39:de:94:e3:8a:89:0e:ed:45:cf:
                    7d:19:cd:fc:5f:a9:09:b6:61:9c:f5:bb:76:99:6f:
                    e0:21:39:ca:27:cd:52:b0:78:cd:41:f2:f1:5f:6b:
                    cc:e6:84:3d:27:e6:9d:39:b0:0f:4c:f8:8c:06:d5:
                    f0:80:9e:75:45:f0:b6:95:fb:85:09:ca:1e:67:a0:
                    ee:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:8B:D6:F0:0A:42:FF:42:EC:A0:91:76:E6:5B:87:82:83:8F:E1:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/89cc4706-6092-3bda-840d-406a49074b7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.168.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:62:e9:a7:75:d7:89:cd:d4:2f:c6:8b:11:ae:bd:34:4c:3f:
         8e:e5:f0:b9:08:bb:7f:64:01:78:4b:1b:02:41:7a:f8:29:9f:
         59:f8:14:16:7d:34:47:12:7c:03:6a:d2:c3:29:9c:d1:dc:26:
         b2:49:f2:4b:73:1f:93:83:da:53:2d:c6:25:ed:0a:b0:4e:5d:
         40:3b:5d:97:0d:62:c4:a0:f1:95:c6:f6:20:29:05:af:e6:8e:
         86:e6:00:17:93:0e:7d:13:87:cb:fc:dd:66:b6:75:96:e8:fd:
         f4:4b:ea:fd:3d:ef:23:43:d2:6c:6e:da:37:87:8b:42:4a:2a:
         e1:3c:ac:51:a4:32:d2:d7:53:ff:51:79:9a:df:c9:66:f8:25:
         2d:47:e0:fd:5e:7c:7d:cf:0b:f8:df:cf:dd:51:d6:75:17:05:
         ce:03:94:1f:e1:0c:d0:0b:38:0d:0a:27:fc:99:b7:08:32:4d:
         bf:2a:a9:5f:cd:ac:1c:45:65:7a:a1:98:c9:76:c9:e0:91:35:
         be:16:0f:02:b1:8d:a3:4d:d1:4b:43:8a:33:3f:d0:7a:24:7f:
         38:89:c7:0b:f3:a0:45:44:39:c9:2d:41:58:c5:34:10:ff:57:
         ac:11:b5:76:d5:5f:21:da:21:7c:d9:42:f6:c2:11:f1:cd:8f:
         52:ba:e2:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDeyJYg/bJQab1OIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
MTQzNzEyNzMtM2Y1ZS00YzRkLWFhMjUtYjg3YTU1NGFiYTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGKMBfHqv0Zj6dQnYTT+5P4XucXReK1WZysv
tH88OWYyBa5xXW+qxUaM/5E7t1HIHZ6l3gFPvZmbKQPcnD+hFPF3yb61W+ls5wqI
sW0z/rFlUuF4qSd+ISKGmxIWIc2N7igJhhoF0CwH75mLRYTM9HZbPPjTp1Om+94w
XAITXpsjKLINPO8yiTtDXzRnRp+O2UbUm1ZeIGpbcudqizEzvwNSSpX51dtnANNQ
0iKxggST6WZ5ijbnlDnelOOKiQ7tRc99Gc38X6kJtmGc9bt2mW/gITnKJ81SsHjN
QfLxX2vM5oQ9J+adObAPTPiMBtXwgJ51RfC2lfuFCcoeZ6DuUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLuL1vAKQv9C7KCRduZbh4KDj+GfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvODljYzQ3MDYtNjA5Mi0z
YmRhLTg0MGQtNDA2YTQ5MDc0YjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQqiwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGVi6ad114nN1C/GixGuvTRMP47l8LkIu39kAXhLGwJBevgpn1n4FBZ9
NEcSfANq0sMpnNHcJrJJ8ktzH5OD2lMtxiXtCrBOXUA7XZcNYsSg8ZXG9iApBa/m
jobmABeTDn0Th8v83Wa2dZbo/fRL6v097yND0mxu2jeHi0JKKuE8rFGkMtLXU/9R
eZrfyWb4JS1H4P1efH3PC/jfz91R1nUXBc4DlB/hDNALOA0KJ/yZtwgyTb8qqV/N
rBxFZXqhmMl2yeCRNb4WDwKxjaNN0UtDijM/0HokfziJxwvzoEVEOcktQVjFNBD/
V6wRtXbVXyHaIXzZQvbCEfHNj1K64i0=
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:24:13 2025 by rpki-client