Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/9a4b6489-f063-398d-a440-ddfd34fb38fc.roa
File:                     9a4b6489-f063-398d-a440-ddfd34fb38fc.roa (raw, json)
Hash identifier:          yStQE+nz/tXuGw95zmTX695V5uR8mbS7a3tsF8WZK24=
Subject key identifier:   80:9D:DE:2D:BC:29:57:C8:FF:71:2C:0D:A5:E3:12:76:6C:9B:8D:A7
Certificate issuer:       /CN=590468a2-be81-410c-b887-a35157322fb1
Certificate serial:       010D0C9F43285848FD56D051E7A27556658DB780
Authority key identifier: CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/9a4b6489-f063-398d-a440-ddfd34fb38fc.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     13487
IP address blocks:        66.103.155.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:d0:51:e7:a2:75:56:65:8d:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590468a2-be81-410c-b887-a35157322fb1
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=733a0606-4ae0-48e3-95ea-9ac018313e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a6:3d:81:69:6b:79:50:2e:4f:78:81:d5:9f:
                    30:8b:6e:71:92:8a:05:38:47:9c:90:f4:85:e2:29:
                    11:4f:1a:fd:cf:eb:92:39:7f:44:f4:ad:3a:6c:27:
                    e3:c0:83:94:50:c3:92:c9:5b:5e:75:59:d6:59:5e:
                    e5:9a:8e:05:4c:50:30:3f:39:8f:06:a5:18:4d:33:
                    ee:56:5f:f6:98:ba:cb:9e:7c:32:97:5c:f8:de:9a:
                    22:ad:12:d3:0a:23:9b:96:5f:33:b0:81:b8:7f:2b:
                    cb:6b:ac:a8:07:59:cf:31:bd:fd:28:89:3c:4a:49:
                    7a:08:58:1c:70:9b:f2:54:af:a7:96:d4:c7:43:28:
                    59:32:0c:c8:e3:1a:18:75:17:8a:c9:77:04:2a:8a:
                    7f:93:e5:61:2c:8b:60:d7:e7:c9:e0:1f:d0:87:eb:
                    36:24:ad:d7:de:01:9f:a7:1f:1d:04:58:cd:94:2a:
                    84:6a:6e:f8:16:82:b4:7d:a9:53:d1:65:3e:9f:8a:
                    79:a1:c1:f2:bf:82:d9:e7:1b:b6:27:58:f2:8f:7a:
                    33:b1:df:4f:c8:59:c1:ba:41:c2:ab:52:48:6c:c7:
                    d2:d7:11:8a:48:91:b5:b4:e4:8a:cc:9e:30:02:3b:
                    b3:39:c1:a6:6e:a7:7e:a2:bc:cd:d4:15:59:22:e5:
                    6a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9D:DE:2D:BC:29:57:C8:FF:71:2C:0D:A5:E3:12:76:6C:9B:8D:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/9a4b6489-f063-398d-a440-ddfd34fb38fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl

            X509v3 Authority Key Identifier:
                keyid:CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.103.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:4d:c5:11:66:92:3c:52:bc:25:21:e2:c7:5a:3c:43:49:47:
         35:3c:fc:1c:99:e2:a6:21:e6:23:03:3f:56:57:51:f9:d9:19:
         4c:0e:ef:a8:0e:a7:62:62:3f:16:1f:50:33:c4:f7:e2:8e:a2:
         76:c9:37:d9:fe:03:a1:04:76:d2:02:52:3c:57:cb:20:8b:74:
         64:27:9f:59:8c:c9:02:cc:1b:ac:68:6d:48:cc:7a:ed:96:6f:
         56:fe:f1:89:b1:46:d9:1e:12:74:fd:14:67:82:66:a1:16:9d:
         3f:65:b4:6d:61:42:27:94:34:2d:ea:d5:9b:6a:3d:f1:ec:b0:
         c5:84:d2:34:e8:65:ec:6e:8b:cd:8f:6d:68:26:f3:cb:2b:49:
         99:98:f5:94:43:99:65:7e:ae:cf:a9:3f:15:a3:8c:7e:3b:25:
         e7:3e:4d:9c:e7:9d:fb:41:92:8e:d2:64:69:c5:bc:61:a8:10:
         2e:10:fd:03:6f:49:7e:52:8d:e4:86:a7:b0:5b:0c:e0:bd:b9:
         07:3f:91:f8:58:07:a9:f5:71:e6:65:73:6e:69:69:2f:a7:fe:
         41:2a:bd:e9:9c:42:80:a2:ee:e0:c5:81:03:78:a8:1b:58:47:
         0f:33:52:62:9e:a6:ef:54:36:a0:56:fb:e7:b3:93:05:59:1b:
         69:ce:75:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:34:54 2025 by rpki-client