Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/bbad0b43-557f-322d-beb6-e84dd8373b54.roa
File:                     bbad0b43-557f-322d-beb6-e84dd8373b54.roa (raw, json)
Hash identifier:          Y6i2v4n3TP0zVI4hohyiA4lcYhqPVyYebsP6nG8Lrqk=
Subject key identifier:   D0:31:AF:FF:B4:57:43:8E:28:E8:84:DA:9B:DE:D2:48:E0:F7:3E:96
Certificate issuer:       /CN=0a2d75f1-8f4b-49d3-9661-209643086151
Certificate serial:       010D0C9F43285848FD56BB210E4744F0E212E19E
Authority key identifier: 0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/bbad0b43-557f-322d-beb6-e84dd8373b54.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     7018
IP address blocks:        66.187.196.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:bb:21:0e:47:44:f0:e2:12:e1:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a2d75f1-8f4b-49d3-9661-209643086151
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=6739ef31-ba27-4749-b9d4-f8ffb7f3268d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:dc:8c:f7:e9:e2:2c:b6:6e:d6:90:53:c8:a0:
                    e4:a0:c5:62:b3:5e:7d:89:3e:5e:fa:ff:cd:e4:02:
                    61:63:37:56:3e:b1:57:77:16:83:04:bb:74:bf:bd:
                    4c:47:c0:c8:61:4a:fb:a0:a0:0b:8a:6d:0b:7c:1c:
                    dd:df:67:38:43:6d:a0:f4:5d:b2:60:e2:df:6e:ee:
                    10:89:a7:b1:60:c5:3a:f5:7f:c9:d3:7c:69:4f:c6:
                    a9:f1:60:ac:1f:58:94:e4:92:e3:92:46:46:09:59:
                    2a:bc:8e:3f:66:d3:d1:fd:29:30:7c:a8:b3:0f:8d:
                    b1:03:80:67:7c:1f:cb:b2:21:72:1b:8e:42:dd:b1:
                    d8:68:32:1e:7b:6c:d5:6d:ed:3f:90:18:55:3e:60:
                    f8:b2:89:08:24:4b:ce:13:7f:cf:a5:b9:46:6b:ba:
                    1d:e9:9c:27:b7:c5:fd:11:c6:60:1b:9b:b8:19:a0:
                    b1:bf:3c:39:81:2c:c3:d8:f4:d5:be:44:53:27:65:
                    e2:c2:b4:04:5d:6d:29:2f:05:2b:cd:b9:e7:67:4b:
                    d5:03:99:ca:70:d2:4e:23:9f:69:89:2e:61:63:68:
                    e8:33:24:92:44:1f:79:49:56:e0:bc:8c:f7:33:0c:
                    6e:71:dc:36:eb:0d:f3:7b:50:4f:d2:16:7a:b0:cf:
                    33:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:31:AF:FF:B4:57:43:8E:28:E8:84:DA:9B:DE:D2:48:E0:F7:3E:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/bbad0b43-557f-322d-beb6-e84dd8373b54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.crl

            X509v3 Authority Key Identifier:
                keyid:0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:00:97:d8:ec:0a:f1:96:1d:8e:ff:3f:10:7b:d2:cd:f0:f8:
         7a:69:96:ff:9d:de:74:6a:a1:bb:c9:b7:58:83:2f:02:42:db:
         d0:ae:45:92:da:1a:8e:57:a0:a5:5a:75:a9:91:de:eb:a6:86:
         a0:48:05:23:89:ef:da:f2:2f:f1:31:cb:0f:bb:bd:94:d8:c9:
         00:51:ee:5d:52:eb:71:6c:bd:30:21:93:5b:ae:d8:6d:fe:53:
         8d:c4:6a:fa:94:85:75:02:f3:b6:69:88:2b:00:fc:ce:66:8e:
         f5:01:26:aa:f2:6b:7b:05:da:0a:b3:64:06:07:f7:d6:48:46:
         ae:04:e2:51:ce:99:37:99:de:4e:7f:34:0d:e7:3d:ca:87:92:
         a9:ff:d5:ea:12:a1:54:35:11:e0:25:02:29:31:f3:3a:c5:e4:
         5a:1c:f0:20:8c:3c:24:14:5c:90:40:fd:5f:2a:ec:68:76:d3:
         e5:f9:e0:43:62:21:94:72:72:37:78:6d:26:c1:6c:e0:5c:eb:
         87:15:99:70:cd:99:f9:03:53:0f:e4:42:6b:9d:0a:83:2e:0c:
         91:fb:93:de:01:f9:85:04:67:2a:c4:e1:df:5f:0e:2e:8a:33:
         c1:14:9a:88:63:bd:37:97:57:25:99:ae:f1:9a:82:6f:af:70:
         21:e0:2b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:11 2025 by rpki-client