Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6dc7f003-20d5-3d20-9e82-7468f060d660.roa
File:                     6dc7f003-20d5-3d20-9e82-7468f060d660.roa (raw, json)
Hash identifier:          njMmwuMjoj2gnzvX+vG8DOwsYmdlcvVCHfieGJyu7fc=
Subject key identifier:   D0:03:A0:1F:62:E5:11:7F:24:B2:27:ED:15:51:E1:F0:80:03:62:CC
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848F00C4C75B69260C6A0EC1100
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6dc7f003-20d5-3d20-9e82-7468f060d660.roa
Signing time:             Wed 19 Feb 2025 19:45:40 +0000
ROA not before:           Wed 19 Feb 2025 19:45:40 +0000
ROA not after:            Tue 20 May 2025 18:45:40 +0000
asID:                     204957
IP address blocks:        166.88.221.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f0:0c:4c:75:b6:92:60:c6:a0:ec:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 19 19:45:40 2025 GMT
            Not After : May 20 18:45:40 2025 GMT
        Subject: CN=31e4099b-ee97-40bc-be61-739018945eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:31:b6:a3:37:6c:89:d1:f2:9b:98:ce:34:bd:
                    81:fc:a5:39:10:fb:2b:4d:a5:f0:67:e8:4f:00:93:
                    44:49:fd:45:34:fd:6c:7a:c6:72:3b:c2:c4:a4:fb:
                    58:7f:ea:94:5c:4a:5a:3f:ff:0f:de:78:ea:3b:99:
                    15:0d:44:fd:8a:5b:76:c4:40:34:b4:7a:71:dd:7b:
                    f5:e9:d4:25:3f:ed:f9:dc:be:da:52:e6:6e:6a:b6:
                    2c:11:9c:17:cd:0f:5b:35:50:b3:8f:74:df:1f:29:
                    33:c2:57:e7:23:1b:91:d4:7f:55:c4:f1:7e:d8:3d:
                    68:6e:a9:6a:74:af:08:87:c5:1f:5c:63:35:d2:a2:
                    35:db:e1:b3:fe:4b:01:f7:5b:c4:23:62:a7:24:0d:
                    88:37:6b:0f:bb:93:03:75:20:40:ee:54:f3:1f:8d:
                    ce:98:4a:27:5e:e6:63:f1:66:4a:e0:5e:80:47:da:
                    d6:0b:7c:59:44:98:d4:33:a8:c6:96:60:5c:df:76:
                    8d:4f:91:9f:fe:15:a3:45:67:a2:0a:c4:b0:49:2b:
                    ca:92:ab:de:70:19:39:9a:e2:0e:c3:f5:02:55:ff:
                    be:75:b6:cf:cc:e1:8b:24:72:af:82:1b:33:9c:60:
                    32:5d:d7:b3:09:50:b6:6a:1b:6b:76:c1:5c:6d:18:
                    7f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:03:A0:1F:62:E5:11:7F:24:B2:27:ED:15:51:E1:F0:80:03:62:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6dc7f003-20d5-3d20-9e82-7468f060d660.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:9a:52:51:24:93:ff:fb:2f:a3:98:99:6b:12:34:c2:4a:62:
         7d:9a:54:ce:76:ee:0c:78:ee:83:50:9b:40:ef:13:1a:fb:e5:
         bd:e0:72:25:ec:be:b5:16:b1:eb:b6:db:c0:0d:a4:95:39:b3:
         95:3e:e7:b9:0b:99:5f:73:aa:dc:a4:8f:8f:07:c7:27:2d:5f:
         a1:51:16:66:ec:97:cd:85:00:bd:de:4a:c1:07:cb:a3:25:a5:
         5b:a1:3b:8f:ba:ab:a8:95:41:82:06:fb:a8:23:94:8a:fe:8f:
         2e:8f:9f:4d:66:60:e9:c1:c6:1f:4c:d0:62:06:d2:77:09:af:
         91:e9:19:c4:d5:fd:e1:13:87:ae:17:42:e6:72:63:18:0d:09:
         31:67:19:04:af:f1:26:fc:c1:81:e1:48:a3:ca:e5:95:9f:b4:
         ac:2f:1d:c0:e1:09:39:22:f5:5b:fc:4d:3c:5b:37:02:df:89:
         a2:dc:f4:01:d2:a8:d5:67:5d:ac:91:5e:d5:7d:bd:7c:1b:50:
         eb:33:69:25:2a:d6:22:8b:4b:a3:0f:fa:b0:57:ca:b5:60:2a:
         9e:ae:19:d1:cb:33:0f:42:0d:f0:dd:97:6e:99:9e:3d:3c:9d:
         1b:32:41:72:46:e4:66:05:9c:fb:20:7d:6c:aa:9a:c4:f4:d0:
         8d:b6:a6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:22:06 2025 by rpki-client