Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/7edd6d15-d67a-3737-b10c-8573aaf3e216.roa
File:                     7edd6d15-d67a-3737-b10c-8573aaf3e216.roa (raw, json)
Hash identifier:          welbaG8o0EsxPDebgSK26/Y0DkC/m9PKb5Z0Si23kYo=
Subject key identifier:   21:A5:AE:27:8C:4B:75:30:95:50:66:91:13:2C:08:21:48:EA:4A:4F
Certificate issuer:       /CN=fc9e4738-7902-435b-802c-f37dc4b25f95
Certificate serial:       010D0C9F432858495637028B090028F63FF34400
Authority key identifier: 34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/7edd6d15-d67a-3737-b10c-8573aaf3e216.roa
Signing time:             Fri 28 Mar 2025 10:04:11 +0000
ROA not before:           Fri 28 Mar 2025 10:04:11 +0000
ROA not after:            Thu 26 Jun 2025 10:04:11 +0000
asID:                     199527
IP address blocks:        66.227.64.0/22 maxlen: 24
                          66.227.72.0/22 maxlen: 24
                          66.227.77.0/24 maxlen: 24
                          66.227.78.0/23 maxlen: 24
                          66.227.88.0/22 maxlen: 24
                          66.227.92.0/23 maxlen: 24
                          66.227.95.0/24 maxlen: 24
                          66.227.108.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:56:37:02:8b:09:00:28:f6:3f:f3:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9e4738-7902-435b-802c-f37dc4b25f95
        Validity
            Not Before: Mar 28 10:04:11 2025 GMT
            Not After : Jun 26 10:04:11 2025 GMT
        Subject: CN=492822fb-82e5-42dc-a446-4f39bb5fd9e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:54:ab:17:ae:04:d8:7a:e9:2e:90:34:27:74:
                    78:ff:f1:01:6c:78:a4:9c:3e:95:97:c5:31:12:72:
                    cb:cf:e7:c8:08:f5:21:3e:3b:83:2f:b9:be:12:c0:
                    49:09:9d:08:ff:1a:68:ba:3a:37:9c:e1:e2:ee:c4:
                    e6:ba:01:26:73:11:2d:d4:c8:a4:7d:61:11:e2:dc:
                    d6:95:a3:4d:40:66:f1:8b:68:bd:e3:59:e0:c3:fc:
                    17:c1:81:62:01:24:89:85:cb:12:fb:c8:d7:f5:32:
                    9e:33:f9:e5:01:52:ea:4e:2a:58:d8:01:89:d0:03:
                    d7:3c:0e:3c:1b:cd:3a:35:2f:a2:7f:d1:a2:c0:79:
                    68:cd:02:9f:24:a6:a5:e0:d0:37:91:0f:c3:a9:31:
                    49:30:32:05:ad:d3:43:ad:90:51:2f:14:f0:43:50:
                    0b:59:1c:44:45:59:af:cd:cc:1f:f0:f0:0d:f5:ad:
                    f9:22:9d:d9:b8:62:18:d4:bc:f6:26:04:a2:24:5e:
                    76:f3:4e:0b:9a:b1:85:f0:c0:a3:bd:10:23:76:21:
                    15:e2:e2:77:ab:c1:2c:97:5c:3b:23:13:88:d9:6e:
                    31:bf:ed:42:0f:d5:48:95:e0:7a:e8:80:3a:77:12:
                    b2:53:5b:d1:98:c0:0a:c6:0c:96:4c:d2:16:80:c5:
                    c7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A5:AE:27:8C:4B:75:30:95:50:66:91:13:2C:08:21:48:EA:4A:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/7edd6d15-d67a-3737-b10c-8573aaf3e216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/fc9e4738-7902-435b-802c-f37dc4b25f95.crl

            X509v3 Authority Key Identifier:
                keyid:34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.227.64.0/22
                  66.227.72.0/22
                  66.227.77.0-66.227.79.255
                  66.227.88.0-66.227.93.255
                  66.227.95.0/24
                  66.227.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:2f:8a:97:f8:1b:01:ca:f2:f3:dc:8b:13:6c:dc:e3:c6:cc:
         45:77:a5:43:d7:4f:06:05:84:b0:2d:11:8e:cc:6c:04:e0:a5:
         a2:a7:3f:9a:10:38:1c:e3:82:5b:f7:66:2e:de:e0:75:18:c1:
         0e:29:ed:43:11:16:b2:f0:77:1a:f5:db:fa:05:05:20:a6:b6:
         3b:33:1a:74:26:32:78:ba:5e:f6:f4:77:e8:c3:0b:c9:74:06:
         4d:95:b1:f1:07:8a:34:bf:7b:7e:e8:0e:0d:57:d2:f3:3a:00:
         25:7d:91:4b:4a:ef:de:7c:8b:63:ca:16:76:28:5c:0b:66:a5:
         3b:fb:0d:7f:af:0d:74:8f:ab:8f:8e:e8:5c:8e:75:8b:af:fe:
         18:2c:6c:99:54:34:73:c4:46:1d:92:c7:f1:9a:00:75:35:21:
         a0:84:0d:fd:c2:11:f2:6d:0b:b4:53:e9:f5:6c:02:c8:d7:f8:
         c6:01:84:27:04:73:bd:b5:69:2c:ae:6b:6e:10:99:98:60:53:
         7d:d1:79:e5:2f:fd:cb:19:62:60:4f:86:c9:b1:c3:9d:b3:e5:
         53:ba:01:d1:2f:c8:9a:7f:a0:d6:00:66:25:06:d5:0c:1c:33:
         7f:9b:7c:53:8e:fa:88:3a:2d:82:5f:18:93:e4:ef:04:e9:cf:
         34:b2:0a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:11:15 2025 by rpki-client