Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3058e6d5-d3a0-374e-ac3d-7540f1044c04.roa
File:                     3058e6d5-d3a0-374e-ac3d-7540f1044c04.roa (raw, json)
Hash identifier:          rvtqUPv0bko0iAzBfBNihorgegUWkp082iwAbQvf1xQ=
Subject key identifier:   DE:91:DF:A8:AB:E2:A8:87:38:4D:9C:EE:7B:2E:ED:B2:F5:24:2D:B8
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858483F803137C007955A899DB840
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3058e6d5-d3a0-374e-ac3d-7540f1044c04.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     62240
IP address blocks:        166.1.206.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:31:37:c0:07:95:5a:89:9d:b8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=ec528598-e792-4629-b70b-37f3d0741175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:10:e0:55:9a:7b:e4:ae:cd:3a:cd:f3:18:41:
                    af:4f:9d:c2:e5:3e:d0:be:79:3c:36:37:c4:07:45:
                    c8:6f:3a:30:26:b7:f9:b1:05:42:48:17:4a:82:5e:
                    09:48:fd:7f:08:14:06:da:9f:9b:51:b6:98:c8:79:
                    13:73:9c:b1:a1:54:de:74:52:61:e3:0a:48:41:c7:
                    66:8e:51:a3:3c:05:4c:e0:67:8e:e0:66:e4:ca:05:
                    51:9d:e7:fe:34:9c:9a:52:19:b8:45:5d:ba:0b:c9:
                    0d:17:cc:b1:11:4c:2b:33:7d:5d:ac:3b:66:7a:f5:
                    26:95:4a:94:64:e6:b1:2b:f3:a7:a4:be:cd:3f:e7:
                    e2:b2:41:b1:64:d2:d5:8a:5d:fb:6b:db:6b:9a:1a:
                    9d:e5:02:1a:ca:cd:c7:70:01:32:4e:a4:92:2e:3c:
                    0e:56:53:9c:f4:0d:7e:17:84:42:4d:33:55:9a:08:
                    29:c0:df:e3:91:5a:2b:03:bb:bd:44:aa:1c:1c:02:
                    1b:ee:a9:58:9f:4e:c0:23:1c:e8:46:60:f1:90:2e:
                    3a:6d:78:28:48:2d:3a:6c:ed:a1:91:ea:f8:39:d4:
                    59:85:e1:8b:b2:52:5b:31:36:0b:78:95:69:d2:40:
                    68:97:3b:24:6b:5f:8c:d0:a2:48:35:5d:d7:c5:0f:
                    ce:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:91:DF:A8:AB:E2:A8:87:38:4D:9C:EE:7B:2E:ED:B2:F5:24:2D:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3058e6d5-d3a0-374e-ac3d-7540f1044c04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:a1:be:7b:1a:be:51:af:21:4a:1d:af:a2:52:b6:cd:1d:7f:
         c2:bd:88:40:5b:2d:19:53:0e:1f:7a:2d:7a:8b:0f:84:7b:49:
         e0:ca:4e:f7:0d:90:b6:a9:87:fe:5b:af:48:8a:ee:51:62:7a:
         4f:63:93:da:12:f5:66:55:62:7f:7d:d5:b6:b1:d1:30:eb:3b:
         c3:99:cd:13:68:82:ea:d1:6d:28:5f:0f:a3:85:fb:01:eb:e1:
         72:7f:7f:6b:39:d3:b0:87:af:01:e7:84:77:13:a5:85:a1:f5:
         65:b1:53:7d:b6:16:a3:eb:03:ad:98:a4:bc:6d:55:ec:4d:cc:
         8b:82:36:ee:28:bd:f5:b2:f9:4f:c5:74:be:a0:83:31:24:0c:
         e2:a0:0e:58:c6:15:20:b9:97:65:00:e1:a1:3d:2c:15:d8:f9:
         40:63:02:1f:45:0c:f9:2b:56:28:ac:65:3d:54:c9:cb:54:99:
         b4:44:40:82:7d:5d:4b:e7:80:ba:8c:3a:e7:d5:0e:e2:d3:05:
         1a:57:9f:c0:ca:7a:18:1f:44:f3:d1:f3:97:eb:55:16:30:08:
         2e:d9:d6:6c:27:bc:e8:82:86:8b:89:1c:f7:8a:20:35:0b:a2:
         4c:c7:9c:84:0a:a6:24:9e:2a:f9:7a:d2:85:15:41:26:61:93:
         ac:f4:29:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 16:49:24 2025 by rpki-client