Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c732f32a-d984-39b0-9936-34eec95e0be0.roa
File:                     c732f32a-d984-39b0-9936-34eec95e0be0.roa (raw, json)
Hash identifier:          VqlAJbE4YjuGRCFWmbfvao/sKzCrmBb512+2DE0FvZk=
Subject key identifier:   21:6D:07:00:D3:38:74:DF:6F:52:B7:0E:77:41:60:57:A6:14:71:7C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848037B1A8FBC8DB385545C8A80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c732f32a-d984-39b0-9936-34eec95e0be0.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20001
IP address blocks:        66.53.160.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:1a:8f:bc:8d:b3:85:54:5c:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=33ee2c94-aeaf-4895-ad23-9b16eb19d7eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2d:80:47:1c:aa:5e:c4:08:7b:e2:95:32:e9:
                    a4:3c:11:98:79:1e:9a:8f:c9:c8:07:fe:9e:01:e9:
                    ac:7c:45:6a:dc:4a:38:5d:ff:72:2b:1a:4c:c5:eb:
                    9a:51:16:03:94:a5:27:4a:be:5b:b0:5e:d7:85:58:
                    d9:2b:88:66:0a:2f:98:8c:cc:bd:08:7c:94:ff:95:
                    35:ea:ba:47:5f:86:68:73:50:06:5f:c4:23:b4:70:
                    c8:57:f6:13:ea:68:75:b3:05:11:d0:bc:ed:aa:9b:
                    0f:4e:af:c4:da:fc:ef:41:04:55:69:b8:62:68:4a:
                    8e:27:f7:8d:28:1a:12:93:39:d4:a2:88:3a:5f:18:
                    cf:e2:65:d6:65:75:50:d5:a6:ac:54:86:96:c8:9e:
                    31:fb:51:93:03:84:f5:b5:c0:71:61:de:c7:37:3b:
                    d1:a4:27:d1:53:22:c0:78:c2:d2:ed:82:ee:09:0a:
                    2f:cf:94:00:f1:34:f8:08:0c:d2:b8:d9:a3:5f:21:
                    44:26:d9:c0:88:93:4f:ce:0c:72:08:be:1d:83:7e:
                    8d:af:ad:58:ff:c1:04:25:db:85:b4:46:ab:8c:01:
                    2d:f7:e1:ce:c8:b1:a3:46:09:a4:ba:13:e2:e6:c0:
                    bb:ec:f1:06:3d:4a:08:2e:1d:3e:8e:6f:58:ff:61:
                    1b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6D:07:00:D3:38:74:DF:6F:52:B7:0E:77:41:60:57:A6:14:71:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c732f32a-d984-39b0-9936-34eec95e0be0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.53.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:4e:9c:22:c1:9d:00:02:a9:2f:bb:3e:9c:cf:cd:3f:e3:9d:
         9c:15:96:af:76:20:c7:70:cb:be:41:98:98:28:34:96:d9:eb:
         a0:2e:37:a4:0b:89:cf:da:c3:7a:f9:40:8c:c9:98:14:e1:47:
         32:b0:f3:ac:14:7e:ff:a0:2e:e4:e2:fa:3d:17:92:ee:1e:06:
         7c:30:9a:72:3a:b7:ad:84:60:c1:8c:ca:bb:63:66:b2:b8:e3:
         63:83:5b:04:2e:37:37:9d:72:a9:a4:b6:a1:64:cc:8e:57:f3:
         42:03:dc:4c:bc:80:2e:c2:00:95:3b:7d:9b:5a:a4:30:62:07:
         95:dd:06:cf:91:28:98:2e:bf:af:84:95:a3:11:62:a1:8c:ae:
         e6:55:29:a6:e4:66:77:34:7b:03:69:43:04:33:f1:21:a0:8d:
         47:13:10:ad:24:f8:4f:94:e1:0a:39:54:90:96:9c:ac:1f:35:
         1c:66:f2:97:02:0c:42:51:cd:f2:28:70:99:42:ef:36:ac:a5:
         fb:6b:dd:cf:cd:f2:78:5c:f1:98:a4:16:4d:69:1f:ea:5c:2d:
         79:02:38:fe:97:7c:f7:0c:57:33:c1:8a:03:06:f9:a6:74:cc:
         49:3b:fe:a3:8c:85:d9:d7:32:a7:7a:be:75:b0:2f:d3:78:c1:
         24:fe:38:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:39:49 2025 by rpki-client