Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/666d6b6c-4391-36f8-800f-af3d15ad4226.roa
File:                     666d6b6c-4391-36f8-800f-af3d15ad4226.roa (raw, json)
Hash identifier:          Cq30bFKfkc4hFI/thgcIuKyt0t6JNyJccdKVFtd3efg=
Subject key identifier:   C7:C0:09:A2:D6:F7:E8:15:CF:96:F2:D8:75:A4:E2:76:CD:B5:AB:EC
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F432858489BA0AE26A25CEA9A0B037680
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/666d6b6c-4391-36f8-800f-af3d15ad4226.roa
Signing time:             Mon 20 Jan 2025 14:00:51 +0000
ROA not before:           Mon 20 Jan 2025 14:00:51 +0000
ROA not after:            Sun 20 Apr 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        162.215.226.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9b:a0:ae:26:a2:5c:ea:9a:0b:03:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Jan 20 14:00:51 2025 GMT
            Not After : Apr 20 13:00:51 2025 GMT
        Subject: CN=6fd2ccc6-0304-4d29-a737-bdcfac8d00ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7a:05:85:40:27:8d:8b:eb:5c:b9:ec:b6:e0:
                    41:9d:37:a6:63:1d:53:d2:96:16:a3:1d:68:46:8b:
                    b1:17:90:55:3c:5e:02:cc:a3:32:2c:ea:db:10:97:
                    15:af:cc:f6:77:87:be:c7:cc:d1:c5:78:16:1e:51:
                    0b:da:6a:18:f2:74:75:68:8e:7a:e4:2c:cf:17:6c:
                    42:8a:1e:55:f7:61:78:50:a6:63:72:53:95:53:77:
                    fd:bc:b1:42:2b:b0:18:16:0e:26:19:78:bc:aa:54:
                    7b:3e:77:ec:37:b7:ce:ef:05:ee:53:df:61:38:95:
                    2d:0f:93:7d:58:dc:d4:7d:93:fc:6c:c9:c5:cd:10:
                    c9:81:f2:44:b0:b3:b8:0a:7f:47:d0:4a:46:57:21:
                    14:ef:2f:36:0f:52:32:3f:f0:4c:e5:69:b5:e6:03:
                    2e:f1:0e:bc:f7:da:bd:dd:3e:5b:ae:d1:da:a5:e2:
                    01:06:da:43:6c:84:10:f3:c1:13:20:b6:70:e8:04:
                    03:c3:26:e0:74:64:24:cd:22:46:2b:c7:41:3d:5a:
                    8f:b2:39:d1:a7:ef:18:5c:4d:6b:6f:f4:eb:74:fa:
                    f3:a9:fa:69:aa:be:9e:f0:fb:99:14:47:37:31:81:
                    b7:ba:8e:d7:7a:cc:a3:59:ff:0c:27:bf:ff:fc:00:
                    fb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C0:09:A2:D6:F7:E8:15:CF:96:F2:D8:75:A4:E2:76:CD:B5:AB:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/666d6b6c-4391-36f8-800f-af3d15ad4226.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.215.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:27:14:24:6f:6f:99:fa:cc:90:b6:7c:f1:32:47:1b:df:e0:
         d1:8a:23:b5:93:1b:d4:f3:2a:d7:89:d1:e7:5e:9e:ec:e8:3f:
         bc:da:fb:d6:a0:f8:b9:aa:8a:0d:2a:ac:fc:56:1a:ab:b1:7a:
         3a:6d:e0:a6:1c:44:03:76:0e:bd:b6:00:2b:ef:17:3c:74:28:
         6b:d4:b3:46:21:45:e1:74:33:ba:71:f2:13:9a:96:e0:da:98:
         8a:16:d9:f8:b2:60:ee:c0:49:19:34:1a:35:f1:c4:82:e4:ec:
         37:1d:42:ae:92:db:a8:69:c7:94:9e:e4:5d:80:52:5b:09:95:
         5b:84:da:b0:52:9c:72:fb:ee:eb:c6:29:16:27:fb:ef:14:e7:
         28:81:d4:63:ed:e7:bf:8a:92:56:a9:a6:39:34:1f:1a:a0:ff:
         ed:df:0e:99:b5:30:ea:8a:c1:a6:6e:0f:0f:b7:56:5c:e7:58:
         ca:8c:18:1a:71:65:57:76:7f:83:35:ac:82:31:85:8b:49:f0:
         c6:4b:6d:a0:07:f3:cc:14:a8:00:22:1c:bf:24:8b:39:6e:09:
         66:e7:2f:76:81:96:0d:f3:0d:29:d1:70:f3:69:66:37:15:1b:
         31:5a:d9:39:86:0c:8b:8b:e1:04:8e:21:8d:41:61:c9:a0:ec:
         0b:51:cd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:19 2025 by rpki-client