Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1fb191ca-65ff-31d9-887b-bebe7fde8afd.roa
File:                     1fb191ca-65ff-31d9-887b-bebe7fde8afd.roa (raw, json)
Hash identifier:          eXtyDo7x3V+Y5xQqyJAzuCwDJQY+LZTVTf0r9hFh+MA=
Subject key identifier:   85:4D:F7:BF:41:AB:58:BE:E9:83:79:32:7D:1E:4B:A0:BD:9E:04:9C
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848AF2BA747BF4FB69F4209F8A0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1fb191ca-65ff-31d9-887b-bebe7fde8afd.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     18779
IP address blocks:        166.88.3.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:a7:47:bf:4f:b6:9f:42:09:f8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=138bf18a-374c-44bc-81f0-2ce0c9378024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:17:21:a9:5c:42:da:74:6c:00:61:a2:11:3b:
                    8a:20:d4:7a:5e:22:e7:1b:aa:a6:e4:c4:8e:0f:4c:
                    f8:c4:29:6f:6b:c5:ac:7d:d8:dd:67:12:ed:30:69:
                    2e:b2:39:83:fa:c9:84:cc:ee:fd:25:96:08:86:88:
                    28:31:86:b1:c3:21:40:1c:bb:17:f2:f4:6e:26:ff:
                    20:8f:a6:9c:0d:1c:28:ed:a0:67:0d:02:a5:34:0f:
                    a7:a4:7e:d6:e5:ad:85:3f:ec:8c:5c:bc:a8:d6:e3:
                    8b:44:4b:67:1f:71:a8:5c:65:08:b4:94:2f:82:d0:
                    1a:8b:79:96:63:7c:f6:d7:0b:aa:e6:51:69:af:3b:
                    49:cd:b5:9d:a5:c6:53:ec:c6:ca:fc:07:40:6e:2a:
                    47:df:8c:bf:12:ca:c5:a3:34:14:d8:8c:fd:01:3c:
                    b1:0d:66:cc:fb:ff:a0:82:10:14:da:db:b3:b0:c6:
                    69:8d:74:be:03:ee:85:b7:f7:b2:72:7d:86:f8:aa:
                    d7:31:5d:67:d6:22:b9:e0:e4:8e:82:f5:a5:89:3a:
                    ac:7a:0b:55:71:d5:22:d7:87:7c:9a:48:ae:33:b5:
                    24:5c:3f:74:3f:10:d7:72:4b:2b:5b:5b:9d:25:25:
                    78:14:1a:5d:f4:7b:14:4d:4f:31:8c:a1:23:29:7b:
                    92:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4D:F7:BF:41:AB:58:BE:E9:83:79:32:7D:1E:4B:A0:BD:9E:04:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1fb191ca-65ff-31d9-887b-bebe7fde8afd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:fb:4c:d0:fa:42:e8:53:88:9f:5f:d3:36:a3:f3:18:90:08:
         03:48:c5:d9:fb:70:a1:e0:5b:ff:10:7e:c8:9f:1c:0a:6d:be:
         b5:19:99:87:5e:e9:99:9f:29:8c:13:4f:46:88:43:40:57:5d:
         f0:26:53:b4:d6:6b:a8:74:ab:18:4d:bb:03:83:df:c4:82:a8:
         63:e8:8c:26:59:b5:88:54:e3:cf:51:f0:86:2d:13:f8:d7:1a:
         72:20:6c:c9:8b:36:26:89:f6:97:6e:22:9c:bb:7f:59:70:c7:
         62:a0:e4:08:30:84:05:06:66:5b:97:4d:bd:61:1c:d4:67:f2:
         08:36:cf:c0:de:94:1f:5e:31:a4:32:c8:c6:48:2e:67:8a:f2:
         c4:c1:39:89:a7:ee:65:9e:fc:90:34:ae:15:1a:b1:39:3d:81:
         e9:af:00:e5:88:30:f6:2e:88:cc:56:2f:ab:91:1c:69:1d:c8:
         b0:32:62:d9:22:90:49:f8:64:36:1f:3c:f5:07:9f:ab:ec:4b:
         3b:c1:d5:17:22:73:50:45:e8:d0:89:ce:1a:51:57:86:eb:ba:
         e4:c1:a4:b7:5a:e8:84:91:f1:36:37:76:49:c4:d3:18:03:9d:
         c8:e9:e8:d8:19:a3:46:f7:18:61:c3:79:2c:e2:99:f5:d3:5a:
         87:bc:24:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:06:13 2025 by rpki-client