Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ca28592c-8fff-3e16-ac64-09fe63df9cee.roa
File:                     ca28592c-8fff-3e16-ac64-09fe63df9cee.roa (raw, json)
Hash identifier:          CRKmEqs5SmmPGnS1Vx9iGt9Ut1n1tgBet19qMLtrC9o=
Subject key identifier:   E2:79:14:56:DA:A6:8E:00:67:E1:C9:72:C1:53:3A:E0:6B:94:20:19
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848F00C79203B472902694FE700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ca28592c-8fff-3e16-ac64-09fe63df9cee.roa
Signing time:             Wed 19 Feb 2025 19:46:01 +0000
ROA not before:           Wed 19 Feb 2025 19:46:01 +0000
ROA not after:            Tue 20 May 2025 18:46:01 +0000
asID:                     62240
IP address blocks:        166.1.237.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f0:0c:79:20:3b:47:29:02:69:4f:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 19 19:46:01 2025 GMT
            Not After : May 20 18:46:01 2025 GMT
        Subject: CN=03400627-3eae-40d2-8813-352b00c866a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6c:b0:49:62:b3:c4:96:ca:4d:6d:fa:10:6a:
                    87:16:9a:9a:1d:33:e2:3d:65:6d:ad:ee:89:f1:b8:
                    a1:04:94:4c:26:cf:9c:8c:26:eb:e0:e3:3b:af:f8:
                    a9:0f:4d:40:30:54:91:8d:1d:fe:42:2e:b2:df:e0:
                    63:f8:71:3e:d9:98:f4:55:eb:47:0a:35:6d:76:d7:
                    e4:6c:9b:f8:2b:c0:41:48:d6:88:03:9c:1a:a2:59:
                    52:69:2b:d8:28:7a:04:94:24:f6:52:14:c8:a8:a0:
                    0c:4b:e8:23:af:18:42:91:5e:85:0c:00:fa:42:b0:
                    a9:ec:ad:73:de:33:cc:40:80:8d:4d:dc:38:d3:33:
                    84:ba:0d:19:c7:83:69:50:f0:34:2f:aa:b2:fc:d6:
                    2a:73:d0:4c:d0:4a:c4:d5:00:21:8c:3f:59:17:b6:
                    46:b8:96:f3:b3:79:ae:c1:c1:dc:7d:85:45:8e:d7:
                    f0:26:3f:23:62:13:a5:c5:25:d4:47:75:c8:2d:5a:
                    7b:07:6a:fb:f3:b1:00:d0:ef:fd:fd:fa:df:45:07:
                    a9:b0:de:60:06:01:d5:43:36:ab:95:d2:c3:82:97:
                    8c:2b:8a:3c:f8:30:63:1c:e1:b9:77:72:f8:9c:ac:
                    8f:22:43:38:c9:13:16:6d:36:22:26:c1:89:be:09:
                    c6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:79:14:56:DA:A6:8E:00:67:E1:C9:72:C1:53:3A:E0:6B:94:20:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ca28592c-8fff-3e16-ac64-09fe63df9cee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:0f:60:8c:14:76:38:be:ce:22:03:56:2a:04:a4:c1:dd:47:
         d0:8a:4f:9c:66:1d:61:4f:e2:a9:dc:5d:1b:3a:a1:e9:c3:ff:
         0c:b7:48:2e:b3:ce:04:2b:4f:d3:48:d5:48:8f:63:9e:98:d6:
         70:3c:97:88:93:c9:46:45:6f:73:cb:4b:24:cc:0d:80:d5:ed:
         19:92:11:8c:d3:66:ec:bb:51:dd:f0:0d:1e:3b:02:3e:b8:22:
         05:96:51:13:1f:dc:f8:d8:a3:12:e8:a1:72:6a:da:86:31:4e:
         36:33:7b:16:a5:e0:9b:f3:90:1c:32:ec:1d:a1:e2:f0:aa:98:
         f9:0b:bf:9d:8c:c7:3b:8d:91:cc:d1:ba:eb:29:b5:01:49:42:
         a7:d7:d8:d6:28:37:39:e4:fe:01:35:e9:73:b4:cd:3e:5c:f9:
         a7:f3:81:ad:c6:28:83:e3:1e:5c:25:05:a7:cc:7d:af:63:0a:
         5b:8a:8e:e8:df:15:71:c9:93:f8:0d:e6:09:10:11:df:da:bb:
         06:93:44:54:7f:fb:0e:16:e2:a1:21:40:b2:07:e7:29:e4:41:
         83:5f:19:50:30:f3:7a:61:39:67:01:0e:94:bc:40:81:14:9e:
         dc:56:42:c9:88:b9:4b:d8:66:dc:63:ac:81:62:15:70:4e:25:
         80:e4:eb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:21:58 2025 by rpki-client