Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a6d241e6-8eab-3d6d-aca4-2d6a3d84a635.roa
File:                     a6d241e6-8eab-3d6d-aca4-2d6a3d84a635.roa (raw, json)
Hash identifier:          KMRakfJB9g8H/JZd7zMSEPtTZYHMap6F916ZQDuZ4UA=
Subject key identifier:   6E:EE:39:CF:4F:56:FD:5A:F2:18:2F:84:BA:70:95:9F:55:AE:30:06
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848D64114CACB2DA2C2FD069880
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a6d241e6-8eab-3d6d-aca4-2d6a3d84a635.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     58061
IP address blocks:        166.1.87.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:14:ca:cb:2d:a2:c2:fd:06:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=b17844ad-c99a-4486-8448-2bcfa7371ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:93:21:5a:22:22:08:7d:c1:04:26:4c:7d:db:
                    d4:39:b7:24:81:02:e3:e1:5c:ec:3a:89:8a:13:8b:
                    c8:78:3f:16:05:4a:c1:d8:80:94:7c:94:9e:e2:35:
                    e0:b3:d8:c7:37:9c:fd:76:82:e7:46:e3:fb:c3:4d:
                    7c:82:e3:88:7d:76:86:a7:dc:71:70:3f:14:7c:de:
                    8e:e9:18:81:27:dd:f9:1c:3c:e1:3a:43:8f:c2:a8:
                    fa:c6:63:05:c8:5d:20:86:1c:53:74:f0:2e:3a:f9:
                    8b:51:98:63:29:1f:57:83:11:71:d8:82:91:08:c9:
                    a9:5d:4d:88:f4:17:15:3b:54:17:c2:4b:69:25:09:
                    f2:64:7d:13:34:3c:2c:55:ed:80:a1:fa:89:b5:a7:
                    14:54:6a:b7:23:cb:a8:67:c4:e9:4c:3a:43:74:2c:
                    2a:f7:d3:b6:fd:4b:d4:00:c4:b5:64:15:b9:6d:87:
                    9c:93:75:de:ca:9a:6b:44:84:84:75:57:2e:79:b2:
                    7a:4c:d4:2f:78:2a:85:8f:78:92:d8:9c:0b:1a:11:
                    d2:d8:df:44:5b:34:91:36:88:dc:be:ab:43:a9:43:
                    ef:b2:15:4b:73:06:7f:08:5b:f3:e4:51:c6:ca:6e:
                    7a:c3:12:55:d1:7e:3f:ff:ae:e8:88:4e:a8:f4:65:
                    ff:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EE:39:CF:4F:56:FD:5A:F2:18:2F:84:BA:70:95:9F:55:AE:30:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a6d241e6-8eab-3d6d-aca4-2d6a3d84a635.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:1b:df:f7:fd:a3:09:92:68:f2:f8:2f:f0:3d:0e:0c:87:23:
         77:8e:0e:9c:2c:78:dc:6e:a3:bf:57:45:05:90:c6:da:b8:31:
         86:e5:93:27:5d:bb:32:a7:32:38:ea:e1:e3:b6:45:cb:9d:8c:
         49:a9:99:45:46:3a:a7:bc:9d:14:ae:c8:f9:d8:6d:f5:45:22:
         36:99:84:cb:c3:56:91:c9:c5:91:f1:e7:61:19:00:cd:bb:27:
         0a:13:30:53:d9:3f:c7:e7:a2:4d:0e:1f:22:6e:d3:a4:4d:2a:
         f1:d2:34:3a:07:91:07:d2:09:7b:43:0b:61:cd:1e:a8:87:29:
         50:46:c7:82:1b:ae:6b:ac:59:20:60:36:b7:08:57:4b:3f:c4:
         92:f6:9f:ba:0a:7a:f5:52:9a:b4:ab:4f:09:1f:9c:ee:88:8e:
         5c:fb:1c:1d:5a:b6:c9:11:e7:9f:5e:f2:9f:34:46:7c:be:bb:
         ab:c6:a4:2e:43:43:54:c0:fb:0c:5d:d8:87:b4:25:0b:78:1a:
         1e:3e:12:30:79:52:2d:ea:21:6e:c5:88:c3:cd:cf:76:d5:7f:
         e6:7c:46:92:32:84:86:62:ef:cc:2f:be:bf:34:8d:62:bc:4f:
         54:15:fb:93:a1:d0:45:39:f6:18:a4:f5:f3:8a:6c:23:34:a7:
         27:8c:c7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:21:30 2025 by rpki-client