Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/88acdfbc-c3a5-3458-9125-dfdb5b8d432c.roa
File:                     88acdfbc-c3a5-3458-9125-dfdb5b8d432c.roa (raw, json)
Hash identifier:          6+KJh2/H8eXha+RiIZ0DBPgyubS40Z11TP9kvrQCUAM=
Subject key identifier:   CA:17:5F:7C:F8:42:8C:CB:AB:53:E6:DD:1A:3A:61:40:6F:E8:22:A1
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F43285848159FF1CD443E9CD34ED6D680
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/88acdfbc-c3a5-3458-9125-dfdb5b8d432c.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     12129
IP address blocks:        66.103.224.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:f1:cd:44:3e:9c:d3:4e:d6:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=c8da905d-f42d-40a0-be07-c30e5189ce9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b8:9b:ed:4b:cd:0e:20:02:cb:75:bd:96:14:
                    90:6b:07:65:1d:e9:43:2e:4c:1b:af:37:4f:1b:7d:
                    e6:62:a2:2a:aa:6f:88:3d:81:69:ae:3f:ad:8c:07:
                    e0:36:19:5b:0d:9e:5c:aa:8c:dc:ef:55:ad:7d:a1:
                    5d:ea:a6:95:99:af:d2:22:9d:b0:4a:3b:45:4c:f2:
                    83:9f:5d:09:b3:7b:27:f7:9e:4c:75:59:53:69:21:
                    8c:2d:2f:81:7b:e1:48:2b:72:fd:56:20:42:1d:e1:
                    ab:ab:8b:f6:53:12:88:40:42:05:37:83:1a:b8:64:
                    18:e5:97:1c:75:bb:a9:f7:4f:36:05:a1:30:ff:6d:
                    43:04:71:0d:ff:f9:bd:f4:8b:43:a9:2f:45:0e:1d:
                    d4:55:43:01:72:90:96:2b:d0:07:14:47:96:e1:a4:
                    95:3c:4c:d8:03:74:68:c5:bb:6a:43:9a:39:db:6f:
                    c7:71:8c:7d:8b:73:75:18:fe:ef:ff:ff:2d:2a:41:
                    e3:07:9b:e6:9a:a3:f3:17:c7:48:ae:7a:60:83:dc:
                    74:b7:ee:13:34:3d:de:89:e4:67:9b:44:53:df:79:
                    e9:1e:3a:98:aa:71:74:75:94:dc:44:4f:0f:f9:19:
                    65:e7:a0:17:a6:8f:4c:06:15:82:d8:3e:7f:d2:c4:
                    12:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:17:5F:7C:F8:42:8C:CB:AB:53:E6:DD:1A:3A:61:40:6F:E8:22:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/88acdfbc-c3a5-3458-9125-dfdb5b8d432c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.103.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:f2:81:fe:d3:be:ba:67:d6:5a:5b:df:58:a2:ac:ec:47:75:
         12:c2:bb:46:9b:05:72:f5:34:2b:92:f2:ee:18:e8:22:38:bf:
         1d:d7:e5:41:d5:fa:d0:de:79:ca:e5:05:53:65:54:fa:b9:2f:
         da:53:26:e2:f9:d6:af:3a:a1:3f:1f:cc:d6:db:03:2d:72:ed:
         ef:de:e2:0b:6d:df:4a:3a:55:ce:e1:39:d8:a3:de:d7:e6:38:
         2c:b1:f7:96:fa:a1:c9:4e:20:91:fa:06:21:b9:16:53:ed:33:
         21:0f:e4:db:c6:57:99:97:24:68:6c:7a:42:49:91:40:25:f7:
         ca:09:9a:d3:1c:71:21:8c:43:e3:9b:ab:54:0b:3a:23:73:21:
         2b:85:12:68:b4:ac:8e:df:ce:2e:04:67:9f:bd:95:8d:4a:af:
         03:f0:18:a1:35:8d:3b:0d:e4:0d:40:dd:a2:36:10:23:0e:ff:
         b0:25:bf:9d:79:fa:1a:b7:4f:c9:b6:ac:d8:b8:b1:af:1b:2f:
         69:31:67:8c:79:fb:0b:e0:d3:2d:87:98:73:ed:0b:9e:d5:ec:
         93:81:71:84:d7:ea:e7:3c:31:64:6f:ab:4f:f3:cb:e5:ca:04:
         31:82:78:3b:98:24:8f:58:89:ad:b6:56:ea:a3:ce:66:b0:2d:
         41:14:6d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:38:30 2025 by rpki-client