Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b58118a6-9203-312d-87af-37c8aacc07d7.roa
File:                     b58118a6-9203-312d-87af-37c8aacc07d7.roa (raw, json)
Hash identifier:          ASHvYrWzyaA/OtnhhWvoLagLJffxmL+fxRRn/0kJL9I=
Subject key identifier:   EB:F4:BE:65:CF:2A:18:A8:0D:9F:50:C4:D5:7C:36:0C:C1:D8:8C:30
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819CFF4DED5A39AE6801BC400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b58118a6-9203-312d-87af-37c8aacc07d7.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     398576
IP address blocks:        216.66.44.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:f4:de:d5:a3:9a:e6:80:1b:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=2571d59a-a34e-440d-a1ac-be885c649751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:65:ce:1a:86:61:66:b1:da:17:78:4a:0a:5b:
                    97:da:0a:04:e7:20:62:e8:61:98:da:76:ec:b0:69:
                    eb:6f:58:1a:ce:90:47:de:bf:78:79:79:6a:58:9a:
                    f5:c3:73:c9:a2:33:d7:99:73:01:71:c4:dd:dc:aa:
                    96:77:1f:75:2e:fc:38:2c:d5:42:77:e8:43:c4:d7:
                    ab:1e:3b:7b:80:e5:12:bc:f0:63:4d:b9:45:bb:09:
                    de:82:cb:04:04:b3:0e:8c:f2:72:98:32:d5:c3:b6:
                    30:bf:1d:a2:d8:29:cc:ec:12:74:22:61:19:4d:b9:
                    a8:e7:f0:68:97:73:02:ef:61:3c:38:ba:0f:b2:48:
                    7c:a8:03:96:c5:60:c3:1a:4e:60:3b:30:20:ce:62:
                    e0:de:0a:a9:6a:0b:ce:1d:90:3b:da:bc:a7:3f:30:
                    16:87:6b:18:66:b7:b2:ad:24:29:b7:01:fc:9b:07:
                    c7:68:38:14:a9:15:23:c9:fd:6e:cd:ff:39:33:d2:
                    55:92:2a:f2:51:93:88:17:c0:28:3b:35:b8:8a:30:
                    17:2c:59:08:77:12:a2:2f:62:49:60:75:ac:e5:a4:
                    0d:87:cf:bd:ee:37:29:29:ca:88:b7:eb:55:6a:48:
                    97:4d:e6:a8:07:d0:e6:e6:56:95:13:86:9f:17:fb:
                    dd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F4:BE:65:CF:2A:18:A8:0D:9F:50:C4:D5:7C:36:0C:C1:D8:8C:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b58118a6-9203-312d-87af-37c8aacc07d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:f0:5c:93:f4:29:26:0b:bb:0f:3f:9b:06:02:a9:52:54:c6:
         30:9e:3b:47:0f:c2:63:e0:b6:5c:62:2c:1c:4d:cd:2a:ae:e4:
         30:0e:18:6c:24:3c:2b:e5:39:8d:02:fc:52:ab:63:c7:ee:0e:
         81:c0:64:11:33:39:70:99:4d:ee:e4:16:bc:ee:e5:d8:af:6b:
         4d:70:9e:55:07:28:f1:73:c9:a5:af:4b:ab:74:eb:60:e2:c6:
         1f:08:d6:c8:6a:56:6d:4f:4b:ee:dd:23:cc:b6:bf:b2:ea:49:
         65:ff:ed:d5:8a:98:c1:62:27:d1:17:eb:f4:76:2e:c4:92:49:
         3a:a5:14:be:2f:25:6d:ff:79:42:85:59:8a:22:eb:5a:d8:14:
         2d:2d:32:c6:e0:bf:4e:cd:93:92:e6:20:81:7e:0f:0d:74:32:
         84:70:9e:01:52:af:fc:62:16:8b:44:9f:f2:c1:a5:04:17:f3:
         da:d0:16:83:6a:c9:18:de:4c:0e:aa:da:33:f5:3e:2a:f4:2b:
         f2:8b:f1:83:44:d2:c8:b2:b8:4d:34:92:74:1d:63:6f:4b:35:
         62:8d:09:c3:34:8f:81:e2:96:0a:f7:cf:2f:5b:dd:50:6d:ff:
         a2:b3:fa:00:0f:00:03:cd:a9:b3:2d:3b:b5:63:de:73:6f:4c:
         38:ac:4b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:58:24 2025 by rpki-client