Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d88a912e-dbfe-3d36-b104-8cc39e60b039.roa
File:                     d88a912e-dbfe-3d36-b104-8cc39e60b039.roa (raw, json)
Hash identifier:          DdABZfWDmo/oR1sOdqAbVI4eRUY7FoooELscK09lxK8=
Subject key identifier:   02:80:7D:3C:F0:1F:A5:48:24:C3:D5:07:F7:BD:A0:61:63:52:6B:37
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D0115F88DBF03A4C8A8D00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d88a912e-dbfe-3d36-b104-8cc39e60b039.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     22369
IP address blocks:        66.160.171.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:11:5f:88:db:f0:3a:4c:8a:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=f649d016-a890-48be-b7a6-13ed843ea1a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:26:24:75:53:c4:f0:52:8d:4d:d4:01:eb:ef:
                    8c:dc:7c:c8:d7:80:81:e2:f6:6b:a3:75:e4:c5:f8:
                    3e:09:7a:7a:be:01:24:30:ea:7b:64:57:58:4e:6b:
                    5b:94:e2:e1:49:ed:53:ae:d7:6a:ee:cf:f5:49:90:
                    36:4d:90:26:ae:0a:42:d4:d0:5b:28:b7:04:aa:47:
                    e1:ec:bc:1f:6f:ad:a4:68:58:44:04:4e:b4:0c:8c:
                    5d:f3:36:48:ff:b0:c4:4b:7c:16:c0:03:8a:a6:18:
                    67:02:8b:4c:15:19:e8:5f:5c:64:52:6a:d5:53:20:
                    8b:79:14:b5:cd:70:69:0f:2f:4d:8a:3e:d2:66:a5:
                    e2:3e:db:b4:60:33:e3:1c:f6:d4:66:cc:15:cb:a5:
                    28:e6:09:96:93:e2:58:c9:a8:9b:b6:08:69:d9:71:
                    64:b5:8c:e9:ce:e4:85:79:b9:81:5f:bf:3f:69:b5:
                    68:0b:95:76:9e:40:b4:5a:33:cd:31:0c:2d:b8:b5:
                    90:93:e9:3e:8e:1d:48:e8:97:0f:ca:1c:e3:e0:70:
                    8e:a1:17:ec:91:67:6c:3c:9e:ef:93:81:b9:86:7d:
                    27:b6:92:c0:ba:b4:e5:fe:c4:7a:fe:ba:11:50:a4:
                    45:1a:1b:f7:13:f3:de:48:d1:40:69:c4:92:79:fd:
                    e2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:80:7D:3C:F0:1F:A5:48:24:C3:D5:07:F7:BD:A0:61:63:52:6B:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d88a912e-dbfe-3d36-b104-8cc39e60b039.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.160.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:33:64:a8:c4:9e:86:91:ec:02:38:b5:ba:e1:40:7c:f3:65:
         90:c7:f4:0b:89:e9:1f:a3:7c:d7:31:e3:82:89:45:dd:a5:82:
         06:82:61:b8:12:cd:dd:89:24:38:f5:c4:56:f7:12:84:e2:1c:
         e1:73:ca:b5:22:af:37:43:99:96:63:ac:a5:6d:c3:4b:96:74:
         fd:db:ce:e0:d5:13:cb:63:b6:bf:b9:c0:58:4e:9c:8e:bb:2b:
         3d:45:92:a4:af:48:0f:e4:d6:f0:d7:bb:0d:0f:35:06:e2:85:
         97:a9:80:37:db:77:93:f1:ae:ff:03:6a:97:39:4f:6b:3a:df:
         58:8b:9f:83:52:27:9b:2f:23:cf:ae:50:ef:1c:c6:e4:4d:64:
         62:fc:a2:bb:69:f9:8a:2e:2b:b5:39:66:d6:8c:59:63:e1:00:
         bc:3a:dc:62:21:85:a4:91:73:1a:d8:c3:38:c4:e5:65:bc:87:
         61:cd:15:28:da:84:17:25:59:18:98:ef:ca:db:4c:0a:c4:9d:
         cd:44:c1:1f:e1:1e:61:6c:1c:da:87:c2:3f:03:06:a0:6c:31:
         14:4a:95:4b:55:8c:80:eb:73:ff:2a:69:66:a5:e2:70:aa:b5:
         58:92:93:c2:f7:37:77:57:1b:5b:e2:8c:ba:18:b2:4a:e1:18:
         2f:c9:f6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:25:21 2025 by rpki-client