Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/37a66f0f-f322-3a25-ba18-aa1f5acd3d94.roa
File:                     37a66f0f-f322-3a25-ba18-aa1f5acd3d94.roa (raw, json)
Hash identifier:          CK1rVJpEO1W085OMPvncvkYDIIQqv4yH0FWBr9bKseg=
Subject key identifier:   BF:D4:F2:1F:80:CB:0C:01:4D:69:5A:CD:2F:68:C3:37:63:58:F4:52
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D1793F3244BB93A91FF840
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/37a66f0f-f322-3a25-ba18-aa1f5acd3d94.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        66.191.224.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:79:3f:32:44:bb:93:a9:1f:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=968fe066-bd66-4b22-be38-4306e593f9a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:84:c9:26:8a:88:7a:93:eb:94:6d:09:6c:28:
                    24:1c:95:23:59:19:e3:2e:11:8e:85:42:f7:71:33:
                    e8:cd:4f:7d:3a:f3:48:ec:31:bf:a2:be:78:15:41:
                    69:ba:bc:b2:43:07:1d:b4:1d:40:15:8c:af:de:fd:
                    fd:9b:84:dd:86:34:18:48:18:0d:42:6d:6e:10:0e:
                    25:4a:cc:17:2e:93:71:b4:aa:09:37:35:e6:74:cd:
                    cf:d1:d2:52:bd:b8:e3:83:1f:f3:8f:f3:48:1c:f5:
                    1b:c2:61:f3:da:1c:6d:0c:d9:06:44:0f:16:d7:30:
                    e2:6d:b3:67:7a:1f:7d:2c:84:49:91:00:5a:13:4c:
                    7f:b4:6f:03:9e:60:65:45:49:e0:22:af:31:55:7c:
                    f4:5b:a6:3b:90:2a:ae:b6:1e:2e:70:a2:c7:29:86:
                    c1:a0:55:b8:f9:b7:a9:d3:26:3b:26:4e:df:d6:bf:
                    cf:a2:90:01:68:ca:3e:f8:81:d7:11:b1:8c:f0:da:
                    fe:ed:95:ab:5b:98:62:61:d3:85:6b:35:cb:bf:b5:
                    b2:e6:43:99:86:ed:a0:e6:bc:42:d1:ab:c1:98:5c:
                    e3:96:be:62:b0:f5:b2:84:71:d9:79:8f:98:e2:33:
                    63:ce:59:71:44:01:1f:7d:80:52:7c:69:fa:f1:51:
                    92:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D4:F2:1F:80:CB:0C:01:4D:69:5A:CD:2F:68:C3:37:63:58:F4:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/37a66f0f-f322-3a25-ba18-aa1f5acd3d94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.191.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:96:81:29:be:d7:a9:4f:7a:32:c8:62:71:b8:47:ef:77:94:
         7e:8f:d7:75:2b:82:12:af:81:2d:b0:4f:3f:ba:16:80:67:61:
         83:78:75:73:2f:b1:fe:08:bd:2d:de:5b:22:18:83:bd:0c:dc:
         59:ef:f0:50:b9:16:94:53:4e:8c:4f:06:cb:fc:b9:03:e9:26:
         1d:a2:f6:56:0b:79:02:6b:93:ad:07:77:db:0b:80:d3:f2:d3:
         4e:f4:ff:68:b5:3a:49:41:f6:92:31:4d:eb:08:ab:44:ed:da:
         d6:36:9b:e5:84:d6:c8:00:91:5b:aa:cb:a9:94:1d:58:84:e1:
         02:e0:c2:12:17:7f:78:4e:cf:c0:98:7e:a5:68:c7:5d:76:5e:
         41:04:f3:35:d9:b4:fd:11:02:f6:7d:0e:1e:88:85:66:29:67:
         0e:f0:95:75:ca:81:e5:09:fe:ac:ee:54:87:d3:e5:fc:a4:99:
         41:5a:67:3c:5a:f1:0d:bf:04:27:34:f2:68:20:69:3f:05:b7:
         db:b6:3a:e8:43:f1:30:52:15:2e:6d:88:6d:07:dd:8a:87:6e:
         c5:2c:b1:16:b4:ff:fc:15:af:06:8d:3d:c5:3b:8e:47:25:7a:
         fd:5c:34:3a:33:0d:5b:0f:6e:4c:1c:8b:74:eb:6e:0d:37:be:
         ad:91:72:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:10:40 2025 by rpki-client