Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b9d5fcfc-317d-3f6a-bed6-d1dd200ada64.roa
File:                     b9d5fcfc-317d-3f6a-bed6-d1dd200ada64.roa (raw, json)
Hash identifier:          JJvrKwQpmiEzUIp+1hkCg3iB21VljAsVgI5fKACdiHQ=
Subject key identifier:   FA:09:AE:FF:6C:25:4E:DB:1F:46:17:DB:2B:0D:81:E8:DA:05:57:CD
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848F22C23CAE2F051BD14E29680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b9d5fcfc-317d-3f6a-bed6-d1dd200ada64.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     58061
IP address blocks:        50.114.161.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:23:ca:e2:f0:51:bd:14:e2:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=81e98a38-115a-4038-80da-ad3558ad2ba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:90:78:0a:ff:c7:0e:25:9f:ce:47:4f:ae:d0:
                    f2:68:9b:0b:08:88:44:28:47:8e:e1:f4:39:2a:21:
                    2e:6e:d6:7a:09:a5:e0:8e:ae:97:c2:cb:ef:46:09:
                    5c:5a:5c:ec:53:75:23:d4:2f:57:87:0d:3e:22:e8:
                    db:8a:67:70:41:37:8e:02:5f:c6:84:56:12:2d:ef:
                    9e:23:72:3d:76:b8:92:c7:46:eb:29:43:15:18:d2:
                    f1:47:86:f9:c8:b1:16:97:f6:93:27:94:f8:dd:be:
                    7d:3a:27:1b:7f:de:74:f0:33:fa:2c:06:38:18:ec:
                    c2:55:f7:2f:80:27:74:fd:22:31:f9:bc:94:4c:3a:
                    09:c5:01:91:a1:cd:a7:fc:91:5f:11:ed:16:03:f2:
                    14:66:34:c2:e0:b3:4f:b3:b4:f7:8e:c9:58:c3:c3:
                    57:2c:52:90:a5:52:a3:06:fb:d4:ff:b7:30:5f:84:
                    06:34:95:43:d9:7c:aa:a6:b9:e8:4d:e1:96:aa:a9:
                    5d:1a:95:24:9a:fb:84:f3:7e:1c:3f:a9:4f:0b:15:
                    f9:39:51:c4:91:96:d4:8e:d1:4b:82:f6:06:05:bf:
                    ba:f7:e9:fa:0a:ef:c3:0b:b1:22:b3:8d:1c:57:ff:
                    65:d4:1e:0a:bd:39:fa:63:fd:8f:05:ed:d6:15:b1:
                    5a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:09:AE:FF:6C:25:4E:DB:1F:46:17:DB:2B:0D:81:E8:DA:05:57:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b9d5fcfc-317d-3f6a-bed6-d1dd200ada64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:fd:9d:0c:e5:86:e1:33:57:4f:a5:e3:c2:2c:9a:76:96:55:
         b0:02:d3:97:6c:dd:b9:33:6a:58:fb:d9:29:f5:88:18:32:66:
         0d:31:c8:ee:aa:0d:a1:07:9e:6e:02:10:66:32:ad:cf:2b:8a:
         94:2b:0f:11:3e:9a:a5:ee:1b:be:0b:06:9d:9a:57:bf:7f:86:
         81:4a:a3:3b:09:41:26:a0:8b:e7:b3:ad:67:c3:77:7c:b5:fd:
         56:77:1f:3c:47:1b:28:de:c2:b7:6e:99:13:2c:d9:3e:43:07:
         71:43:c1:c1:14:71:0d:42:2a:09:61:cc:40:9c:54:7e:e0:71:
         3f:3d:c8:9d:2c:3c:0c:7d:be:52:46:fc:7c:90:70:5f:d8:25:
         da:ce:be:b7:27:bb:65:c1:88:40:25:b4:02:12:76:65:b8:41:
         e5:91:84:cf:f3:da:39:f0:75:ee:d7:ca:f0:8e:f4:29:63:9d:
         d5:cc:3f:de:ed:3d:34:0c:61:41:4b:cd:d6:16:24:a8:ee:6d:
         9c:3c:1d:f1:ab:a8:6e:71:86:c1:0c:94:8d:bd:4b:cf:26:75:
         57:43:1e:7d:36:79:df:bd:c3:4a:85:21:f5:06:7a:ab:69:90:
         87:9c:4d:a4:79:f9:e1:c3:5c:0f:43:ab:fc:6d:11:f7:35:e0:
         a4:c0:e8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:42 2025 by rpki-client