Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/57f402e6-16ba-3468-b27a-96a10d9702ee.roa
File:                     57f402e6-16ba-3468-b27a-96a10d9702ee.roa (raw, json)
Hash identifier:          My+UoMnN6r4p1w8GcszC2XkDCLT00ba27wSxyG8J/RU=
Subject key identifier:   D8:63:5B:12:46:D3:D5:E2:B4:ED:F4:37:24:DA:92:4B:D1:E3:FB:B2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848F00C72A3CE0002B11B218F80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/57f402e6-16ba-3468-b27a-96a10d9702ee.roa
Signing time:             Wed 19 Feb 2025 19:45:58 +0000
ROA not before:           Wed 19 Feb 2025 19:45:58 +0000
ROA not after:            Tue 20 May 2025 18:45:58 +0000
asID:                     62240
IP address blocks:        166.1.177.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f0:0c:72:a3:ce:00:02:b1:1b:21:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 19 19:45:58 2025 GMT
            Not After : May 20 18:45:58 2025 GMT
        Subject: CN=65e6bba6-a095-4244-95ef-66e9468fd4d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fa:17:92:e4:39:e8:9a:02:7c:3a:be:f3:a0:
                    a4:88:3f:9f:18:11:0c:96:1f:b8:49:ee:ab:e5:41:
                    b2:de:89:92:24:6b:d7:dc:6d:be:30:6f:bc:a2:47:
                    35:0b:9b:86:c0:c8:c1:98:4a:60:09:53:79:b5:53:
                    55:70:19:1e:e7:c2:94:1b:10:7c:06:d9:31:f2:ec:
                    41:f3:99:3e:e7:d2:43:c4:53:21:fa:de:57:4a:c0:
                    11:37:9a:ac:a3:ed:92:6b:03:e3:8f:8d:34:af:62:
                    9a:11:40:62:4e:d6:11:a5:30:b4:4c:90:1d:f5:6d:
                    16:90:81:7f:83:7e:55:5c:76:a4:14:38:38:ec:f7:
                    f9:8f:47:f3:e3:57:61:1c:fa:4b:94:bf:de:ac:be:
                    37:85:6a:42:2b:2d:31:b1:fa:fa:2b:e9:3b:aa:42:
                    09:b8:a9:ff:84:4b:6b:fc:e2:0c:b9:12:3f:1a:3a:
                    26:77:11:6f:11:41:3d:59:21:37:fd:96:89:6f:3e:
                    c4:aa:fb:4c:88:2a:94:94:00:0e:4d:36:f3:b8:90:
                    25:1f:53:bc:40:5d:ef:a0:2c:a8:b1:50:86:7b:18:
                    1e:a7:05:3f:3b:4c:d0:5d:a4:07:83:c9:e4:bc:37:
                    21:be:d3:9d:c6:e1:5d:f3:39:2c:a6:de:59:e9:34:
                    53:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:63:5B:12:46:D3:D5:E2:B4:ED:F4:37:24:DA:92:4B:D1:E3:FB:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/57f402e6-16ba-3468-b27a-96a10d9702ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:df:2c:d8:2d:dc:10:5f:c5:2a:f9:d5:d6:c4:f4:32:df:2b:
         53:61:a2:cd:5f:86:74:59:d5:0c:17:38:ee:0d:f8:9a:f7:2a:
         d1:da:c3:2a:1d:61:bc:e3:84:4c:42:78:15:bf:9a:96:1c:9a:
         b5:a7:be:da:96:de:e4:17:0c:4c:fa:53:da:72:19:7d:2d:fa:
         03:a5:e8:e7:75:12:e5:88:0b:0f:8f:79:47:3c:18:b9:f2:7f:
         4c:1b:7f:9b:98:d5:54:05:98:54:a1:cd:12:c4:bd:6a:92:5e:
         e0:c2:bf:78:ca:33:28:03:ca:c3:4f:b8:8c:9b:ff:98:cc:08:
         37:08:1e:8c:34:a2:fc:62:3e:b0:11:e7:fb:e3:fa:6e:44:bf:
         7d:2a:80:ad:76:98:2d:08:fd:9a:df:2e:fd:cd:66:13:27:63:
         13:a7:c1:ce:c6:f6:4a:fe:54:9f:8b:33:b3:51:54:96:c4:db:
         a0:72:b0:fc:10:9c:bf:a7:a7:fa:00:d5:9a:34:6b:22:31:d4:
         74:56:0a:e9:d7:5c:71:81:c8:af:a5:36:60:33:81:25:10:a9:
         ab:27:67:8f:cf:26:b8:80:ec:02:ed:b6:b6:e4:ad:3e:f1:ec:
         a6:dd:21:c7:db:b6:6a:09:69:ff:a7:62:66:d3:dc:92:40:4a:
         98:5e:93:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:27:59 2025 by rpki-client