Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/68a3e4fe-6d60-3bb4-a17d-74f60c8db041.roa
File:                     68a3e4fe-6d60-3bb4-a17d-74f60c8db041.roa (raw, json)
Hash identifier:          mNVgT52wK/DE542WsxFtVdKe3n50Y1QAU+c+PcL2aU4=
Subject key identifier:   75:51:38:4B:BD:6A:64:AB:23:6C:15:9C:04:92:72:F4:19:C5:34:98
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848F0088717031CDAD81EB2BDC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/68a3e4fe-6d60-3bb4-a17d-74f60c8db041.roa
Signing time:             Wed 19 Feb 2025 19:38:04 +0000
ROA not before:           Wed 19 Feb 2025 19:38:04 +0000
ROA not after:            Tue 20 May 2025 18:38:04 +0000
asID:                     44477
IP address blocks:        50.114.167.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f0:08:87:17:03:1c:da:d8:1e:b2:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 19 19:38:04 2025 GMT
            Not After : May 20 18:38:04 2025 GMT
        Subject: CN=589e1596-f280-41f3-af4e-b3450172f6d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e3:6b:3a:06:47:98:c1:23:cd:59:46:da:5b:
                    fb:32:f6:d5:cc:03:a4:61:12:a7:10:98:ad:3e:44:
                    f5:be:6e:25:93:0b:64:40:bd:36:10:ee:30:a6:16:
                    ae:e8:9c:96:1d:c7:44:c3:a0:3e:f7:f8:99:79:d0:
                    de:8a:69:84:8f:bf:34:dc:95:e6:bc:61:e2:5e:14:
                    01:ff:32:49:3d:1e:e5:6e:bb:16:00:5d:f0:d7:c6:
                    1c:19:61:74:62:e8:19:a8:ba:30:39:f8:1a:11:12:
                    99:32:27:10:f4:5f:45:40:a9:44:e6:31:91:fb:b4:
                    6d:07:b5:14:8c:76:11:70:b3:b5:85:59:55:e3:7a:
                    55:90:ca:7e:39:45:24:63:0b:67:b2:e4:97:0c:71:
                    1e:7f:d5:80:36:1f:a6:ff:fa:c4:28:4d:b4:dc:8e:
                    2c:d9:bc:a0:81:73:15:0f:13:fd:34:7c:43:b3:6a:
                    87:4d:40:2b:ba:ed:9b:0f:9a:37:3f:47:ac:59:30:
                    ce:c2:23:c9:e3:cb:36:82:30:ad:07:c4:74:d2:b2:
                    76:b3:26:50:6e:db:15:04:7c:f3:56:c6:18:e0:1c:
                    c4:00:d2:db:c4:4f:b0:24:e4:e9:57:16:a1:f5:2c:
                    ba:47:bd:88:90:48:eb:c6:4a:64:38:45:e7:95:12:
                    85:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:51:38:4B:BD:6A:64:AB:23:6C:15:9C:04:92:72:F4:19:C5:34:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/68a3e4fe-6d60-3bb4-a17d-74f60c8db041.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:69:5c:4b:e2:26:2a:06:60:bb:f9:f7:72:f0:be:34:e8:b2:
         8c:7f:9a:e4:2f:1a:d5:60:9a:bf:62:49:de:ae:99:e4:67:c0:
         22:fe:c5:db:d1:f0:1e:73:cb:d8:69:db:bd:2a:f4:f6:92:47:
         d7:cd:05:3f:0c:9a:5b:3b:48:de:a3:37:9a:49:92:10:a8:93:
         51:04:3e:a3:22:e5:3d:b7:37:af:6a:00:1c:37:58:ca:24:8d:
         6f:e1:63:8f:25:22:48:45:8d:de:76:b9:0f:c2:6d:4b:9d:5c:
         50:4c:6a:cf:e0:6b:59:ca:6e:0a:1c:10:25:f5:34:b4:8c:c8:
         a4:8c:f7:a5:63:a7:3c:e6:7a:41:d2:e7:34:85:3b:25:a0:89:
         91:33:38:e5:11:0f:8f:d9:bc:26:41:09:f9:b2:cf:8a:3c:18:
         8b:2f:db:21:5a:13:99:9b:d1:d3:a9:bc:20:60:61:27:db:61:
         e1:30:ba:19:ce:14:32:1f:0b:ca:9e:14:8b:7c:35:2a:ab:35:
         85:75:e0:c7:96:f5:bd:ad:90:f5:0b:87:1a:72:13:76:96:42:
         2c:7e:2c:44:ac:ad:32:bc:19:c5:b9:a2:64:34:63:78:e7:30:
         4c:d9:db:42:f7:4e:db:e6:db:71:a4:d4:5f:95:44:14:07:31:
         c3:59:46:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:33:52 2025 by rpki-client