Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6ac56888-d5b9-31a4-83be-88f0cb5d5bf0.roa
File:                     6ac56888-d5b9-31a4-83be-88f0cb5d5bf0.roa (raw, json)
Hash identifier:          mC1eMzkA0rtv980yKtqgQJZ7W3Q+bdb6QLRqKJ0m5eU=
Subject key identifier:   75:41:00:7D:7F:DD:E1:AA:C6:4A:88:94:C6:B7:52:80:04:B0:11:9B
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584826B72698E2C2061324512280
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6ac56888-d5b9-31a4-83be-88f0cb5d5bf0.roa
Signing time:             Sun 08 Dec 2024 12:00:00 +0000
ROA not before:           Sun 08 Dec 2024 12:00:00 +0000
ROA not after:            Mon 10 Mar 2025 04:00:00 +0000
asID:                     36522
IP address blocks:        207.164.166.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:b7:26:98:e2:c2:06:13:24:51:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  8 12:00:00 2024 GMT
            Not After : Mar 10 04:00:00 2025 GMT
        Subject: CN=f7d3a430-2297-43f1-bad6-27030a6a0cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b8:fc:18:28:06:16:a3:9e:28:17:25:a6:34:
                    68:92:0f:67:8b:61:1f:98:fd:81:16:fd:a6:66:38:
                    7d:90:0a:8a:ce:46:b9:08:1b:15:71:62:da:b1:a5:
                    9b:2c:da:73:fe:e2:00:eb:ad:b0:97:51:7f:75:83:
                    3b:41:9d:47:5d:62:9f:08:b2:9f:3b:8f:be:f6:39:
                    39:09:91:a6:8d:61:36:ce:b7:3d:88:5f:67:4b:dc:
                    48:03:4b:58:50:99:ea:6a:b3:d0:80:95:9f:c3:e4:
                    46:e2:7c:d0:e4:1d:8f:30:05:22:53:07:59:47:84:
                    1e:7d:be:04:d1:82:90:7b:06:18:a9:9b:02:65:aa:
                    6b:ba:45:0d:ce:30:76:b4:9f:49:25:a5:aa:84:15:
                    86:5f:15:c4:0b:d5:dd:c9:0b:fa:fe:46:cc:9c:a6:
                    98:ab:90:bc:45:c5:4b:b8:3e:a8:5a:f4:6e:60:93:
                    7b:53:18:a2:55:cf:8c:64:97:98:7a:3c:cb:e1:e5:
                    56:e6:92:03:b6:3e:bb:51:19:63:86:ff:a5:f2:9f:
                    d9:38:af:69:48:47:d4:14:de:f9:12:3d:c7:50:8f:
                    f6:09:2b:23:d7:4e:5c:4a:f8:b0:2d:75:e6:e4:7c:
                    fc:45:ef:e0:a2:d1:ba:62:93:ad:05:fb:22:33:10:
                    1f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:41:00:7D:7F:DD:E1:AA:C6:4A:88:94:C6:B7:52:80:04:B0:11:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6ac56888-d5b9-31a4-83be-88f0cb5d5bf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:b9:c6:b0:b9:c0:ef:93:ea:33:1c:2e:74:a2:a6:de:51:30:
         ae:7c:59:33:ac:d1:82:35:ae:0a:4b:ce:98:a9:79:8f:96:06:
         86:6c:a2:94:24:3a:57:3c:2b:03:ff:fc:80:02:9a:7e:e0:45:
         ea:49:8d:89:ad:ad:9e:bd:48:db:7e:de:c9:7e:dc:aa:7f:8f:
         42:6b:c9:eb:97:3c:db:19:cf:dd:c4:b8:3a:59:e7:ea:55:45:
         e5:99:f8:d8:36:20:ba:d4:c9:ef:84:90:f8:bd:b6:f1:b1:f5:
         31:45:fa:aa:69:6b:be:03:26:5c:ee:eb:e8:a1:9c:33:f5:7f:
         5c:5d:f0:93:06:1b:a6:bc:f0:f0:40:b1:62:8e:bd:bb:4b:7a:
         ea:29:bf:1b:cb:94:b9:90:59:bf:44:fe:5b:00:8a:13:06:68:
         1b:36:61:84:35:e5:5a:38:40:1c:43:94:bb:56:d7:fa:41:84:
         c8:13:b7:1d:fa:d3:9e:8e:57:f9:7d:a7:9b:2d:f6:11:3b:18:
         e8:6f:85:b8:4d:07:75:dc:a2:79:9c:97:ee:68:29:88:a5:df:
         c9:3f:4c:85:ea:2c:59:04:1c:17:ef:ce:6f:72:ab:0a:0a:4f:
         68:83:d6:82:dc:13:f8:af:55:50:8d:20:f2:98:97:86:f6:ea:
         31:cb:b8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:04 2025 by rpki-client