Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/65d63c28-1e3e-3326-acdb-7ebdfc1837fb.roa
File:                     65d63c28-1e3e-3326-acdb-7ebdfc1837fb.roa (raw, json)
Hash identifier:          spxYyC3Jkx9woN3X8k2hVS43EIiU58tDnunJoTvrb/4=
Subject key identifier:   2F:DD:F9:D3:DB:5E:61:DD:FF:00:3C:79:B8:74:A9:0E:DD:50:9C:B6
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848F00C4AC03B7773385EB29D40
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/65d63c28-1e3e-3326-acdb-7ebdfc1837fb.roa
Signing time:             Wed 19 Feb 2025 19:45:39 +0000
ROA not before:           Wed 19 Feb 2025 19:45:39 +0000
ROA not after:            Tue 20 May 2025 18:45:39 +0000
asID:                     204957
IP address blocks:        166.88.0.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f0:0c:4a:c0:3b:77:73:38:5e:b2:9d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 19 19:45:39 2025 GMT
            Not After : May 20 18:45:39 2025 GMT
        Subject: CN=6edc2833-e25b-4531-9df3-c5ef9996cbfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3b:36:62:2c:6a:47:a9:8f:da:92:6b:be:eb:
                    70:2e:20:7e:1d:32:66:2d:d2:04:02:c3:ba:f8:35:
                    a6:1f:aa:7f:dc:e1:3c:2f:14:c6:90:28:ee:ac:f1:
                    2a:e4:37:1b:c0:a1:76:59:02:9f:a3:2d:dc:c1:92:
                    75:26:56:94:68:22:dc:60:49:f1:11:c0:eb:72:98:
                    c1:e6:7f:c8:9b:9d:39:b3:03:c0:72:ce:8f:80:ff:
                    69:1e:25:91:f8:ff:cd:93:c9:9c:46:d6:18:4c:97:
                    62:17:46:65:9e:92:0d:69:43:7a:39:76:98:35:f8:
                    99:c1:9d:52:b7:ab:e6:5f:aa:a7:6e:22:a8:3c:57:
                    c7:8b:42:78:0b:36:8f:e9:88:ec:cd:82:68:ad:94:
                    a4:ff:f5:d2:32:40:30:40:65:ac:65:99:6c:23:f0:
                    2c:58:20:f2:59:3a:3d:58:fc:51:97:b1:8e:9a:fd:
                    29:33:fd:4c:fd:3a:16:6a:07:61:4d:44:07:d8:97:
                    19:8a:4c:d9:c2:e0:42:bd:15:f8:87:f2:50:93:b6:
                    57:fd:b0:79:6e:df:97:43:38:11:34:a5:7f:dc:dc:
                    1d:a9:da:f0:75:8f:fb:35:27:6a:a7:6d:7e:3f:eb:
                    f1:78:0d:01:92:c9:b8:4e:bc:04:d0:59:13:68:73:
                    16:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DD:F9:D3:DB:5E:61:DD:FF:00:3C:79:B8:74:A9:0E:DD:50:9C:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/65d63c28-1e3e-3326-acdb-7ebdfc1837fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:c9:5c:d3:78:9e:64:a5:00:27:0b:c7:db:19:00:92:76:6c:
         b6:57:1c:66:2b:1f:5a:c9:20:14:3c:8a:9b:13:e5:c9:06:d3:
         f0:38:47:e5:ec:dc:37:2d:3c:58:4b:34:ad:e9:07:09:3d:fd:
         64:c7:8d:ae:7c:c2:fa:3e:78:32:a6:ce:7c:d3:25:95:09:98:
         ce:62:9f:36:04:fe:8b:58:4a:cd:71:9a:f9:07:81:34:0f:db:
         b7:d4:d9:7d:2b:88:94:8b:82:e6:66:c9:16:3f:6a:d0:7d:66:
         4d:30:fe:35:a6:b9:24:e7:d3:f7:4f:32:99:39:ca:cc:08:cc:
         15:aa:84:a7:55:5c:42:eb:56:07:08:d1:db:49:2c:b8:17:46:
         65:72:9c:61:c4:83:72:14:e0:0c:27:16:7c:a5:3f:0c:6a:cd:
         87:dd:d1:e5:24:33:b0:46:2f:37:84:1b:88:e5:ef:f7:c1:45:
         94:19:10:22:7b:44:27:70:7b:71:b0:59:2e:82:2a:4c:69:b2:
         5d:9f:77:a0:4b:e6:37:f9:32:03:b4:c7:53:a5:35:57:7a:5e:
         48:97:a1:44:1e:a0:46:fb:f2:d7:07:73:5d:16:44:13:fd:14:
         a9:e5:38:06:90:79:03:d8:5b:48:d4:a9:d7:be:14:51:9c:a1:
         51:59:06:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:40:44 2025 by rpki-client