Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/076e9ba9-51d2-30ec-bb7a-7c6e3dace9b3.roa
File:                     076e9ba9-51d2-30ec-bb7a-7c6e3dace9b3.roa (raw, json)
Hash identifier:          7INQmSv+FZIn1LSURr6lSpLpiquJCrw02XpQSa6BshM=
Subject key identifier:   A8:9C:CD:C9:DF:46:A2:7A:4A:3B:33:84:4C:9B:8D:3F:46:A2:09:57
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848AF2BA88FBF8E7E618C250080
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/076e9ba9-51d2-30ec-bb7a-7c6e3dace9b3.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     18779
IP address blocks:        166.88.144.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:a8:8f:bf:8e:7e:61:8c:25:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=872d9528-ee04-4295-b323-a5a4f729c8bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3c:d8:55:75:ac:db:6d:5a:5e:df:a4:a4:b0:
                    b8:64:63:84:66:30:3b:0f:d3:cc:e7:85:b3:d5:13:
                    2f:96:34:fb:71:e2:d7:2a:5d:94:69:e8:dd:02:d8:
                    18:0b:b5:27:07:59:7e:bf:91:79:aa:37:42:8e:09:
                    f3:31:06:88:58:33:b3:38:9e:63:f4:f9:b2:ed:49:
                    d0:13:68:25:a6:0a:64:81:3d:72:34:ab:f4:80:a5:
                    f0:3d:4e:ef:69:f9:1a:b4:63:1f:6e:0d:fb:c0:28:
                    1d:f8:c9:fe:66:a8:cb:55:ed:29:81:54:15:2a:87:
                    70:8a:1f:63:0b:c7:d6:b4:63:c2:bf:7f:e6:a7:06:
                    34:96:6e:bd:3a:ca:3d:f8:ce:e8:28:50:f9:15:26:
                    9e:d2:80:95:ba:3f:7a:82:f8:26:98:ad:62:9a:24:
                    0d:26:1a:bd:f9:40:b4:dc:0a:35:9a:91:92:bc:a8:
                    d9:86:e2:3d:00:3b:01:59:af:70:46:18:a3:49:bb:
                    6a:b3:e1:b1:aa:4c:2b:80:47:a4:f5:b0:e6:7c:39:
                    3d:e2:f6:a9:d1:41:c5:a7:0e:73:ef:67:ed:29:b5:
                    a6:23:85:03:81:f9:39:d8:b4:72:d3:70:b6:2b:ac:
                    fb:4d:a0:ce:f2:c2:71:1c:b2:97:96:96:7d:54:a7:
                    88:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:9C:CD:C9:DF:46:A2:7A:4A:3B:33:84:4C:9B:8D:3F:46:A2:09:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/076e9ba9-51d2-30ec-bb7a-7c6e3dace9b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:76:bd:24:27:fa:05:82:ea:c7:bc:ad:45:37:48:d9:74:ba:
         8c:59:2c:00:f7:51:25:85:e8:bd:d0:90:22:e8:e0:c1:14:e8:
         75:0b:90:2b:e5:c9:39:b4:c0:fa:d0:3b:69:e8:05:f4:f1:4d:
         33:d8:17:58:cf:c2:e3:e5:16:e9:39:cd:48:0c:0b:ea:c4:8b:
         1c:cb:31:09:87:59:be:e6:e6:a3:a1:e0:09:97:ed:33:ef:d0:
         46:3c:89:ed:54:9d:98:f9:77:b9:c5:22:5b:a0:ab:61:ff:4d:
         87:84:d4:68:41:52:c4:21:85:3b:2a:a7:59:6b:6b:bd:dd:97:
         ef:68:00:c0:93:29:27:82:f5:63:50:70:85:44:d9:b3:cb:3f:
         ce:c2:1f:b4:9b:aa:4e:31:df:e0:2c:0e:58:c3:6a:94:ec:4f:
         24:69:25:06:5f:9f:b6:b3:bd:26:05:bd:94:11:72:58:ea:19:
         1d:35:d3:d5:3a:69:a8:a3:32:00:6e:cf:f1:a5:3a:a1:d0:45:
         64:eb:72:5e:f7:5e:0e:99:ff:74:5a:9b:6a:b7:01:81:7d:df:
         69:b0:d6:c3:6d:38:41:23:54:36:95:74:1f:ae:5a:18:90:e0:
         58:c4:cd:57:4d:e9:13:54:24:fb:c0:8f:c2:dd:89:b4:ab:21:
         84:79:57:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:38:33 2025 by rpki-client