Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6d74b481-d17d-36e6-a358-c31341d5c72d.roa
File:                     6d74b481-d17d-36e6-a358-c31341d5c72d.roa (raw, json)
Hash identifier:          0MCDaEahJTX4gzma3yduTs6sYvr4e7QM6RmrIGuunhE=
Subject key identifier:   08:2F:5F:A8:2D:7D:08:F5:FA:22:74:9F:E3:D9:3D:80:32:B3:AE:32
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848E20D56FAF83B334FCE2BC880
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6d74b481-d17d-36e6-a358-c31341d5c72d.roa
Signing time:             Fri 14 Feb 2025 19:26:27 +0000
ROA not before:           Fri 14 Feb 2025 19:26:27 +0000
ROA not after:            Thu 15 May 2025 18:26:27 +0000
asID:                     401152
IP address blocks:        50.114.105.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:0d:56:fa:f8:3b:33:4f:ce:2b:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 14 19:26:27 2025 GMT
            Not After : May 15 18:26:27 2025 GMT
        Subject: CN=acc77c31-afdc-472d-ac3c-63786f245166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f7:08:8e:61:c2:b1:fd:e7:9a:d7:ef:67:23:
                    8a:93:8a:7e:2c:84:3c:8e:c5:7d:92:0a:ce:1f:79:
                    d1:7e:8a:ed:9a:5f:a4:bc:b8:cf:21:e7:16:b2:27:
                    96:a4:ef:b2:5d:75:b5:92:1a:82:74:dc:64:ea:69:
                    b4:6f:8b:c2:c7:12:27:8e:87:73:8f:b2:9f:f2:96:
                    f3:79:a1:0f:bd:9d:75:f2:18:9a:1b:8d:91:f5:20:
                    7b:ce:1e:8f:fa:c6:b6:8f:8c:c7:15:a6:c9:03:82:
                    71:e8:a1:60:bd:f3:4c:c8:6b:5b:f9:94:f9:d2:52:
                    8a:a2:04:a5:b4:ae:44:2f:28:8a:6c:78:a8:1a:43:
                    ba:20:97:52:fb:aa:39:bf:42:69:ee:3b:07:8d:9f:
                    29:45:91:66:b1:d3:99:33:7d:70:eb:df:f8:9b:32:
                    9f:6d:d9:7d:58:eb:ea:3c:e7:0a:a2:f5:06:e8:ef:
                    53:98:55:0c:33:60:f4:88:35:9c:a0:f3:2e:e2:d2:
                    c3:2b:c6:d3:08:5f:29:e6:5c:be:d7:dc:ba:5c:a2:
                    0c:2a:44:47:39:bd:53:cb:05:41:fd:9d:4f:8a:38:
                    69:ad:72:22:21:7a:24:c5:0b:a3:0a:c0:eb:41:ec:
                    09:fe:56:da:52:87:92:5b:b4:57:ae:1a:c9:8f:83:
                    12:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:2F:5F:A8:2D:7D:08:F5:FA:22:74:9F:E3:D9:3D:80:32:B3:AE:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6d74b481-d17d-36e6-a358-c31341d5c72d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:02:8c:fe:c3:3b:c2:61:ed:53:0e:b6:1d:1f:16:3d:8a:cd:
         03:b3:fc:b3:f0:41:06:39:f0:bd:9a:45:20:8a:80:9c:78:0c:
         b4:ad:12:22:50:3d:b3:00:23:5e:6f:55:3a:66:bf:a2:8c:19:
         1f:4c:9b:dd:f2:c3:f9:30:ff:47:d8:02:92:23:bf:7c:b8:ac:
         b2:1a:a6:8c:20:ac:39:91:47:ca:25:27:94:ee:10:2a:60:1d:
         c6:a2:09:cb:23:e5:03:eb:40:d7:85:eb:98:7f:0c:1f:bb:db:
         4f:8d:d5:3c:ff:21:fd:5f:30:3b:13:c1:16:cf:45:9f:ca:83:
         b4:c0:32:40:b1:22:d5:80:ed:9b:23:90:47:2b:35:48:19:ba:
         7c:39:af:fa:31:3f:40:4a:0c:9f:2c:94:71:b3:3e:27:52:75:
         36:ff:32:a2:2d:a8:f6:d8:24:db:06:c8:d9:1f:38:a1:f0:91:
         d7:84:06:8a:b5:b7:21:be:00:04:fa:2f:39:62:3a:17:e3:48:
         2a:df:6d:3f:80:eb:37:29:c8:96:02:f0:ee:fa:d4:34:2c:e5:
         80:6a:6b:01:ad:43:25:6b:db:70:99:e9:db:ce:81:a9:4d:cd:
         c9:2a:cf:d4:83:f3:3c:06:ee:61:64:50:77:9e:28:df:50:7f:
         d1:bb:04:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:44:56 2025 by rpki-client