Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4/06241e00-7903-3050-9775-e4425bd2b4d5.roa
File:                     06241e00-7903-3050-9775-e4425bd2b4d5.roa (raw, json)
Hash identifier:          oUWPS5nPHZAN47VRkZnFe0AhHGftTwoWGUgHlQxiKko=
Subject key identifier:   05:EE:7E:34:9F:26:55:8A:A9:BB:F6:49:67:B3:F2:01:68:98:5E:C4
Certificate issuer:       /CN=c05ae39f-c5c5-44bf-9771-c4a013b7c9d4
Certificate serial:       010D0C9F4328584953C448C27C639B0F1F4BE8C0
Authority key identifier: 90:6A:45:5D:2A:18:39:95:D3:36:2A:9C:07:2B:B3:4A:4E:52:37:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4/06241e00-7903-3050-9775-e4425bd2b4d5.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     27823
IP address blocks:        66.97.32.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:48:c2:7c:63:9b:0f:1f:4b:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05ae39f-c5c5-44bf-9771-c4a013b7c9d4
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=4e00e98e-6251-4b0e-aa8d-2825051b4bef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:83:bd:28:f4:f6:40:00:69:37:eb:b3:d4:75:
                    b1:1c:cd:8b:01:88:4d:8b:98:99:84:3d:c2:5a:31:
                    87:dc:de:7f:47:86:9c:29:99:df:ef:d2:0b:58:e2:
                    6a:0f:ed:62:92:73:ff:f9:cd:87:a1:c1:08:92:67:
                    16:64:6c:59:d3:bc:8f:aa:49:c6:60:d9:6a:94:59:
                    e9:53:3d:71:7f:eb:21:f6:7b:68:88:b6:50:a5:e0:
                    ac:9f:6c:f2:97:60:11:88:3e:67:ea:d0:6e:15:c7:
                    89:36:41:11:e1:7a:6f:ea:d9:00:4e:92:30:89:b7:
                    9a:6f:16:f1:12:8a:4e:ef:2b:95:f0:43:0d:6e:ed:
                    22:73:6c:4f:36:01:07:ce:c3:39:5d:21:4c:6b:6b:
                    8d:74:72:6b:6e:56:19:32:88:39:c9:a1:d9:42:73:
                    63:c1:fb:a7:2c:12:c9:f8:0e:2e:4c:9f:cb:48:19:
                    17:df:f1:17:f4:af:5a:46:97:bb:4b:22:c8:e1:99:
                    8c:8e:fe:4e:d0:bd:c5:65:ef:85:5e:5c:2a:0c:af:
                    00:29:12:f2:d9:06:7e:71:8b:4f:12:48:0f:4f:dd:
                    d5:4f:e7:f4:91:77:fd:1d:08:ae:8f:f5:20:25:bb:
                    e0:d2:7c:da:dc:c5:ee:55:91:5c:f7:22:16:fc:3d:
                    ae:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:EE:7E:34:9F:26:55:8A:A9:BB:F6:49:67:B3:F2:01:68:98:5E:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4/06241e00-7903-3050-9775-e4425bd2b4d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4.crl

            X509v3 Authority Key Identifier:
                keyid:90:6A:45:5D:2A:18:39:95:D3:36:2A:9C:07:2B:B3:4A:4E:52:37:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.97.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:f1:08:35:38:37:af:1f:ee:14:26:ac:bc:50:a4:29:06:37:
         bc:57:30:91:40:e2:2b:8e:22:a4:6f:9f:2f:9c:07:79:74:8c:
         bf:4b:91:99:6d:7e:13:fe:42:7a:13:7c:3b:ad:79:e5:d5:7b:
         23:fe:45:8f:93:f9:4e:5d:4b:09:58:41:28:b5:45:40:ae:7b:
         05:60:fc:58:02:7c:e3:9e:d2:e5:9b:f9:18:9d:66:b2:87:4d:
         0d:4b:80:e1:94:b7:5b:7b:f8:31:b4:45:8a:43:47:3c:ee:f7:
         74:4c:93:f4:f3:21:b7:98:f8:36:04:2f:ac:eb:ec:31:4b:27:
         17:83:ce:db:43:da:d2:c9:8d:8e:3f:3c:93:6c:38:35:6e:93:
         66:c9:2b:60:1d:b0:1a:aa:b4:13:d9:6c:65:47:d9:56:6e:76:
         0c:83:66:df:65:47:28:6e:6b:3e:33:8d:e2:9b:3c:df:50:19:
         d6:41:6d:cd:6d:3b:95:0e:b7:14:e2:84:91:92:46:00:4f:91:
         fb:3f:3e:ac:dc:36:2a:8d:81:43:a0:8a:b2:aa:6f:6f:96:84:
         b8:b8:d0:3a:d2:0f:52:45:24:f0:0e:5c:8c:fb:4c:cf:7d:76:
         65:84:00:3d:01:14:ee:1d:40:ec:ac:5b:22:8e:73:c0:99:ec:
         c3:13:06:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:14:27 2025 by rpki-client