Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/568701cb-bd7b-3cca-8226-403c06af9cf4.roa
File:                     568701cb-bd7b-3cca-8226-403c06af9cf4.roa (raw, json)
Hash identifier:          dVNogUTmtccVDkrdRugcyobNIXl+dX3Xof7BLKdyVes=
Subject key identifier:   D9:8A:69:91:45:DC:1B:AD:CB:38:A6:5B:8F:70:EB:92:D9:0F:8E:CE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858489A3B4C3A20D6328ACB83AEC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/568701cb-bd7b-3cca-8226-403c06af9cf4.roa
Signing time:             Mon 20 Jan 2025 02:00:40 +0000
ROA not before:           Mon 20 Jan 2025 02:00:40 +0000
ROA not after:            Sun 20 Apr 2025 01:00:40 +0000
asID:                     151487
IP address blocks:        166.0.252.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9a:3b:4c:3a:20:d6:32:8a:cb:83:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan 20 02:00:40 2025 GMT
            Not After : Apr 20 01:00:40 2025 GMT
        Subject: CN=5379cb1a-023c-4db5-8292-665984d36612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8f:09:9d:7d:bf:a7:0b:ab:73:d2:a4:ac:d0:
                    9e:e8:29:98:b3:c4:f7:1e:53:e2:69:13:b8:71:42:
                    2e:f6:b9:18:3f:f1:b7:50:fb:09:ad:ff:8f:fb:4c:
                    1f:96:f2:84:37:a6:21:8a:7a:fb:5e:58:6f:f2:e6:
                    9e:a8:ac:02:59:66:25:06:69:82:4f:b3:56:24:f9:
                    e6:14:a4:68:50:20:d3:98:20:46:a7:14:ad:e6:20:
                    23:64:03:72:bd:5f:38:57:ec:96:a8:78:b4:5b:0b:
                    53:20:77:ea:d0:50:c1:7f:99:3b:35:e4:13:7e:b0:
                    94:4d:b0:2f:d4:74:18:4e:47:f3:e3:f8:c3:62:36:
                    6f:a8:68:7e:f1:fd:6b:d7:63:97:d6:64:cf:04:4a:
                    d4:b1:8f:a0:85:07:99:6b:6a:06:2f:27:e9:64:af:
                    95:82:e1:75:83:78:18:1a:a6:04:7d:08:a0:ad:01:
                    0c:e4:5f:69:a7:44:87:0c:11:86:05:ca:9c:7f:87:
                    b5:ad:1d:85:ee:0c:0f:fd:82:c3:f8:6d:93:e2:74:
                    2c:c3:1d:2a:9f:c5:f9:6e:8e:2f:3c:2f:9c:27:b5:
                    3b:2d:a1:d3:bb:79:e5:63:17:dc:d3:79:82:a7:99:
                    44:ac:97:7d:f3:01:41:e1:8c:2e:ea:b3:c9:96:37:
                    cb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:8A:69:91:45:DC:1B:AD:CB:38:A6:5B:8F:70:EB:92:D9:0F:8E:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/568701cb-bd7b-3cca-8226-403c06af9cf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:d9:c5:57:e4:ef:6e:b5:5f:5b:49:23:84:0f:cd:9e:b1:ce:
         96:3d:c3:be:aa:68:de:bb:ac:82:c7:de:29:c5:2c:59:b7:54:
         2a:25:bc:80:f5:02:51:f0:74:c0:49:a5:18:4b:6e:c7:43:2a:
         fd:62:5f:b8:b1:d1:d9:17:33:e6:8a:7d:4e:b9:ac:1a:2f:01:
         1e:18:dc:63:d2:3b:37:f0:c5:d5:9c:c8:62:c6:ec:44:64:8a:
         10:43:a7:83:e3:80:6c:42:25:f4:59:8f:c5:2a:11:bd:d8:18:
         62:2b:d8:a3:7a:ac:34:32:4a:a8:d6:a4:3e:c5:1a:35:ee:db:
         d3:3d:b1:10:16:5f:1f:63:e6:8b:09:fd:8e:24:e2:31:09:87:
         54:ca:01:64:bf:1f:7e:e4:32:bb:1b:71:6e:6c:d5:81:65:2e:
         65:93:8c:5d:09:e8:86:df:a3:e1:85:aa:10:e8:13:76:7f:2d:
         19:f6:15:05:a5:09:0a:74:65:eb:b5:86:dd:71:04:52:ed:79:
         27:92:d9:8b:36:3f:bc:56:89:35:f6:a1:79:82:9c:a4:33:b3:
         9a:0f:6c:eb:8d:72:2d:dd:63:38:37:27:be:47:ae:80:cd:4c:
         5f:0a:cc:39:4f:aa:bc:e5:b0:73:20:7f:c1:92:01:7b:6c:8f:
         74:7d:6c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:54:27 2025 by rpki-client