Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/666ce706-f266-3fa9-aabf-cb8681729e63.roa
File:                     666ce706-f266-3fa9-aabf-cb8681729e63.roa (raw, json)
Hash identifier:          cC3MeFC2nSX8iN5jD7yNnGsO2TbVvcct6DGRtc4NCGY=
Subject key identifier:   2E:89:52:CA:C3:4F:6C:84:C7:67:9C:28:6E:96:73:EA:5A:3B:FC:31
Certificate issuer:       /CN=f9c367c2-ae39-45af-aac9-ca536571d493
Certificate serial:       010D0C9F43285848143A7C0EB1198FE232329380
Authority key identifier: 32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/666ce706-f266-3fa9-aabf-cb8681729e63.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     14618
IP address blocks:        142.0.188.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:7c:0e:b1:19:8f:e2:32:32:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c367c2-ae39-45af-aac9-ca536571d493
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=e8acc096-043a-4935-b029-71523bd3c5a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:38:e4:16:e9:f4:49:3b:f6:2d:1f:ca:0a:f4:
                    ea:27:8f:0c:44:11:3e:0a:fa:de:f5:f6:c0:16:c0:
                    b9:5c:5d:c5:31:b9:a6:bd:bd:46:d7:c9:a7:51:63:
                    92:02:21:8a:4d:df:1b:49:e3:49:04:29:8d:34:49:
                    d7:f2:f5:33:22:a8:9e:65:11:50:71:29:5e:a4:ea:
                    12:7d:77:ad:38:71:e4:e8:0c:d9:0c:ce:9f:1e:37:
                    c6:72:bd:75:f1:1a:7f:f0:6a:97:8c:ac:3e:e0:4f:
                    e4:c6:a0:6a:d4:1e:88:58:ea:06:aa:74:16:64:76:
                    c0:20:0d:dc:8d:bd:50:7a:91:dc:e3:2a:4b:df:30:
                    b9:93:f6:07:16:e5:61:8d:99:81:c6:0e:24:19:b6:
                    93:5b:a6:93:c9:78:31:a2:44:4b:e5:c2:e3:c1:5f:
                    82:51:66:e6:f8:74:60:ec:fd:a6:bd:d3:bc:01:98:
                    43:5b:00:7d:4d:6a:e6:cd:8a:cf:06:66:4e:1f:59:
                    2a:71:fa:e6:2b:8d:47:ae:b3:03:16:6d:37:82:da:
                    6c:90:7e:f2:a0:e6:0d:03:92:bb:3f:09:3c:f9:6b:
                    02:d2:d1:3b:c7:58:47:01:7c:09:f3:9f:ac:4c:25:
                    9b:db:bb:f6:33:e0:a4:ad:0c:56:c0:97:59:0c:ca:
                    69:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:89:52:CA:C3:4F:6C:84:C7:67:9C:28:6E:96:73:EA:5A:3B:FC:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/666ce706-f266-3fa9-aabf-cb8681729e63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl

            X509v3 Authority Key Identifier:
                keyid:32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.0.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:cd:8e:7c:98:48:45:58:9f:a3:ec:7a:e9:28:01:3b:21:4f:
         17:3a:4b:c0:c7:f6:d7:40:21:a9:3d:fc:32:82:7d:b6:11:72:
         14:e9:40:50:4f:6e:34:ab:9b:5e:a1:09:c7:1a:10:5e:84:00:
         37:16:d3:e6:45:1b:47:ef:43:0a:79:d3:90:f4:28:da:0c:cb:
         c3:32:75:23:b7:80:36:f8:46:39:82:9a:07:68:da:d0:0c:c3:
         3b:45:15:bb:87:21:a0:be:67:fa:c2:67:b6:47:c7:12:a7:34:
         21:cb:1a:7c:08:27:fc:23:02:a3:5b:86:49:9f:2d:4d:cf:71:
         06:2f:2a:1d:4f:ac:e3:c7:b4:16:b1:49:34:52:01:65:9a:f3:
         ed:39:a3:94:13:3f:f9:71:6b:42:ba:6b:cc:d7:33:2c:a3:d9:
         62:1b:71:56:92:a2:75:3e:8d:0a:49:0a:a3:e3:11:f8:a0:85:
         81:43:de:be:67:62:9d:97:e6:33:a1:35:d0:c6:4d:ff:cd:1a:
         8f:dc:dd:ff:e5:e9:01:80:5b:4a:28:34:b5:9d:05:f0:13:22:
         95:7e:93:be:ce:67:54:19:da:e5:fa:94:91:ba:ae:fd:b2:aa:
         3e:61:ff:7c:a1:73:31:a3:31:0e:e1:e7:d7:6c:cd:27:2b:81:
         0c:40:69:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:37:21 2025 by rpki-client