Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/96f70ceb-04e1-3bf2-9135-f4119e413a6d.roa
File:                     96f70ceb-04e1-3bf2-9135-f4119e413a6d.roa (raw, json)
Hash identifier:          nNCxsJB2tzA78ME9RjUlJYc0xmY7C/yc8Bn93eGhHtg=
Subject key identifier:   AA:4F:06:2F:B5:E2:E0:B7:80:40:68:82:FA:72:3A:9B:34:9A:62:14
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848037AB7C25F5C95C32625EC80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/96f70ceb-04e1-3bf2-9135-f4119e413a6d.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20115
IP address blocks:        66.188.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:b7:c2:5f:5c:95:c3:26:25:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=07392d2d-c5c6-4820-8965-37d402c37b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:41:46:ce:ad:c8:5f:66:c4:10:81:3f:5f:ee:
                    b9:00:d5:66:ca:23:1a:33:c3:41:fd:59:d9:28:34:
                    71:30:9e:2b:1e:58:ce:1e:05:12:82:d9:37:87:55:
                    d5:90:93:a9:9a:97:8e:c4:16:65:48:b6:e6:2d:c9:
                    01:54:cd:ce:8f:8a:ad:b3:6c:7c:e9:58:ad:42:ea:
                    40:85:46:cb:90:88:8a:d7:bd:39:94:d9:b0:86:80:
                    89:c7:f8:15:33:25:1c:02:8f:f4:81:c2:ef:7b:87:
                    84:77:b0:e6:bc:ff:f4:48:40:aa:f0:8a:dc:df:72:
                    27:3a:27:b9:ac:a6:81:ed:61:d8:3b:9b:bd:ec:b8:
                    6e:c8:2e:46:00:05:18:81:db:7f:3e:9d:e7:fa:bd:
                    f8:1d:03:08:f8:92:64:2d:e2:7b:39:ad:91:07:38:
                    47:33:6f:70:44:23:45:06:2a:18:64:5f:05:7c:65:
                    db:02:bc:32:ca:71:3d:7f:9b:b0:2c:4b:0e:ff:19:
                    d6:2d:1a:a0:85:db:ef:42:0a:b1:0a:43:cd:b4:37:
                    c0:d6:dd:06:0e:1f:14:4b:1f:58:e7:1a:ac:8d:a7:
                    34:be:92:ee:71:75:ef:73:3d:70:39:d5:84:b6:48:
                    8a:64:97:68:1b:99:c8:f5:6c:0d:be:68:6a:ca:2f:
                    0d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4F:06:2F:B5:E2:E0:B7:80:40:68:82:FA:72:3A:9B:34:9A:62:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/96f70ceb-04e1-3bf2-9135-f4119e413a6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.188.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:d6:77:ca:d2:81:e5:d0:75:a5:c4:dc:d1:5d:e4:9b:9c:d7:
         8f:97:b7:c8:86:64:f2:27:4f:d4:20:8f:f9:a6:14:28:3d:f1:
         2c:94:bf:1c:87:59:be:92:a2:0f:7e:4b:12:2d:cb:fa:54:76:
         7a:11:0d:cc:bc:f6:f0:8a:d3:0a:e0:e2:f1:f7:78:13:28:db:
         14:35:73:fc:d3:8b:a1:d7:69:2d:68:db:7e:28:0c:3d:0a:23:
         22:c5:53:7e:b3:19:c9:82:ab:2f:a0:0e:c0:0d:15:ba:65:06:
         3b:77:c3:cf:5a:d3:5b:18:33:7d:dc:27:fa:fa:20:ed:b1:4a:
         e3:a0:9a:a8:a1:ff:8b:2a:2d:0b:56:db:7d:0e:7f:2c:ca:11:
         e5:6e:41:64:8a:74:73:7a:5b:6b:ec:21:dc:01:67:f6:cb:7b:
         8b:a7:c6:8c:ab:ab:a2:23:6b:c6:5b:39:bb:db:fb:98:e1:d7:
         38:46:c2:bb:55:55:9b:e5:30:ea:79:3e:0c:e7:a8:ee:3c:4a:
         4d:49:0e:04:dd:d1:df:ec:39:ad:86:6b:a6:7f:7d:bd:64:58:
         f4:f6:c3:4e:f4:a5:fc:a3:eb:0a:3b:9d:f3:d4:0f:62:9a:7c:
         02:ac:a8:af:30:c2:ab:f0:e1:72:0e:30:8b:93:97:35:fd:cb:
         a0:7c:8f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:32:58 2025 by rpki-client