Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8deb922b-0e17-33e6-8899-02af35ac4053.roa
File:                     8deb922b-0e17-33e6-8899-02af35ac4053.roa (raw, json)
Hash identifier:          qz6kmSbMecX3vbX8s1OwPdm5G2HvTVwxhUmbodOBB8o=
Subject key identifier:   43:45:B9:32:3D:18:8D:C1:20:4A:6B:E2:48:7A:3F:5D:95:7F:ED:B3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D008F8769563060F9D4980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8deb922b-0e17-33e6-8899-02af35ac4053.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     54934
IP address blocks:        216.66.55.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:08:f8:76:95:63:06:0f:9d:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=3449d41a-bf41-4ec5-9796-c86982a71c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b5:f9:28:64:2f:e0:b4:e7:38:f8:66:36:11:
                    19:7c:55:1f:3a:e9:b9:39:c7:4f:0c:97:01:19:da:
                    80:31:c5:21:fa:0e:93:c8:bd:6d:33:a4:19:6a:94:
                    46:63:ce:88:09:1e:72:14:c9:a7:d4:b0:1d:dd:7f:
                    bb:5b:4b:fb:a6:55:4b:2a:83:d7:88:f1:97:d4:c0:
                    70:21:b4:13:c3:ac:c9:1b:23:65:f7:7e:3f:2f:94:
                    51:fc:89:1d:87:cc:2f:90:9c:65:ef:2f:b2:8c:dc:
                    33:04:fa:cb:b7:b3:c8:96:6a:49:b9:e6:80:29:7a:
                    63:a8:75:86:29:88:85:43:3a:f0:5e:8c:e4:7a:8c:
                    d9:1c:f2:5f:ae:6d:7d:e6:d6:83:46:bc:2b:7c:dd:
                    a0:68:bb:4d:c9:51:01:54:ed:40:ed:c3:f2:0f:4a:
                    f8:81:76:a2:a4:0f:8b:3e:49:d4:b3:98:8a:c5:4a:
                    59:2e:77:dc:8d:6d:20:64:1a:db:bd:71:0f:4f:8f:
                    9a:bf:e9:bc:6b:eb:c0:ff:19:40:13:85:1f:11:54:
                    b9:05:9e:fe:4e:f8:d7:48:2a:2b:00:d3:c0:ab:8a:
                    86:4b:28:b1:98:ad:eb:50:ab:87:5e:a6:c7:44:01:
                    81:a3:2d:f6:ac:69:bf:5b:58:3b:3d:c7:5a:aa:35:
                    41:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:45:B9:32:3D:18:8D:C1:20:4A:6B:E2:48:7A:3F:5D:95:7F:ED:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8deb922b-0e17-33e6-8899-02af35ac4053.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:c4:82:7c:3e:14:53:47:0a:bc:16:73:58:d7:9d:cf:0f:15:
         2c:d3:d0:f2:2f:57:39:6e:92:8c:b7:da:9d:78:66:a5:d8:fc:
         1b:b4:9e:fe:ab:58:e5:2f:da:be:39:38:41:11:69:9c:5e:40:
         7c:dd:bb:b3:7f:be:9b:a2:d7:fe:3e:7a:ad:05:1f:83:43:f5:
         f0:ce:ba:9b:02:e8:f4:d6:3c:35:7c:ef:2c:1e:a7:7f:98:a8:
         0b:b5:29:27:be:c4:e6:8a:23:62:09:bd:3c:b2:78:3b:a2:5b:
         42:85:98:fd:d9:2a:bd:58:44:86:5b:60:22:dd:76:45:2a:2a:
         e1:00:b2:94:d7:03:04:ca:03:71:cf:3f:12:1e:f7:90:aa:e9:
         88:16:d0:d4:ca:ae:e0:da:ac:a6:e3:dd:91:e5:fe:79:37:b3:
         c0:5f:e2:e3:6a:b0:45:1a:76:11:d4:a5:0c:bf:3d:6c:d3:da:
         5d:95:af:86:95:6e:e6:77:53:e6:f2:9e:76:7c:88:c8:c2:89:
         f8:3c:d5:52:de:71:81:26:38:44:cd:a8:b5:75:d4:4b:ab:2f:
         76:15:51:4d:4b:9e:07:15:cd:dd:16:30:36:7d:00:ea:a9:45:
         b0:a8:42:0d:c1:a2:2d:36:62:b9:8a:1d:e6:92:89:c9:37:9e:
         ba:ab:1f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:47:59 2025 by rpki-client