Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/76773235-e31b-3df7-b1e7-b95d0d10108e.roa
File:                     76773235-e31b-3df7-b1e7-b95d0d10108e.roa (raw, json)
Hash identifier:          eqVAxFGniTcEhY58X+P9CumJJAJhun8pSoMMwCkcNVQ=
Subject key identifier:   A6:5F:52:05:B2:49:0F:73:58:47:B3:1F:46:45:D5:56:B0:9F:DB:83
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848AF2BA0A89D8F2E28AAA45B00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/76773235-e31b-3df7-b1e7-b95d0d10108e.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     18779
IP address blocks:        166.88.20.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:a0:a8:9d:8f:2e:28:aa:a4:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=f50aeb32-774a-4b96-a7a8-ed37376991aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:94:09:03:1b:55:62:b7:cf:77:94:23:3a:11:
                    1c:91:52:4a:82:ff:86:81:15:ce:ea:65:10:80:34:
                    25:9e:ce:f8:36:dc:8e:ef:ff:fa:0f:8a:7d:93:02:
                    f9:83:cf:11:2d:cc:56:a7:e6:aa:bb:8d:90:01:2a:
                    52:67:a7:5a:73:49:68:4e:3c:e7:34:a4:97:e3:72:
                    f6:5f:c0:d9:11:c8:55:75:75:52:01:53:0f:ef:c9:
                    20:82:87:08:4f:7a:ad:00:4b:90:4f:8b:71:ae:6e:
                    cf:53:e1:49:e0:3d:1f:28:da:9a:33:9b:e7:4a:44:
                    ca:81:3a:10:d5:b9:7e:6a:fb:39:c6:18:7e:80:2e:
                    19:81:4e:a1:a7:2e:82:ba:ea:dc:5a:97:a2:0e:f7:
                    07:63:0f:99:02:1f:b3:fb:65:dc:b8:b1:c2:10:cc:
                    38:6f:ec:54:21:b7:48:a3:43:af:cf:4a:e6:6a:0b:
                    08:ac:25:3d:81:c1:99:ca:ca:02:c2:17:ea:8e:1d:
                    cb:91:2b:7c:61:c3:9a:ce:a1:58:87:35:f7:d5:d4:
                    26:7b:46:c6:40:69:63:e6:88:17:04:2c:62:73:7f:
                    1f:d4:7a:20:61:ee:ab:f0:20:3a:eb:f4:c9:62:66:
                    81:70:25:87:ac:7d:75:29:f2:ee:96:1c:99:fa:5d:
                    01:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:5F:52:05:B2:49:0F:73:58:47:B3:1F:46:45:D5:56:B0:9F:DB:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/76773235-e31b-3df7-b1e7-b95d0d10108e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:03:9c:de:17:19:97:a8:0e:a0:f7:1f:d4:d5:9c:ce:eb:6f:
         82:5a:1f:0d:c1:6f:c0:53:86:47:dd:c9:0a:38:a3:a2:03:06:
         d1:45:4b:ec:3f:c5:b7:a2:29:6f:3d:21:52:66:b1:4a:98:2a:
         d1:72:85:c5:0c:7c:ba:e8:5f:25:06:d2:ab:11:87:bd:e4:e3:
         f8:be:ae:13:db:ee:22:35:74:dd:a1:19:48:0a:04:62:ba:6e:
         b2:48:12:de:6e:4b:c3:fd:13:11:68:fb:6f:58:db:67:4a:6e:
         01:5e:fc:8e:4c:27:e9:c8:80:4c:b8:54:69:e4:b9:77:e1:1b:
         02:75:8c:89:bb:13:90:53:68:e0:50:be:e7:99:b6:26:a1:92:
         15:1a:29:83:f6:dd:31:77:ef:5e:31:95:79:ac:28:88:a4:4e:
         2c:c5:3c:8e:bc:84:3d:0b:9b:0b:02:3b:95:0a:e1:9a:0c:71:
         ec:c1:4b:dc:46:90:1c:b2:d8:56:f9:89:4f:34:eb:d3:d2:27:
         fd:92:be:ef:73:bd:a6:b8:a0:1d:e0:9d:a3:2c:01:97:23:39:
         69:e5:97:3a:91:a4:2e:f4:4e:82:f1:42:a5:d7:d7:31:e4:0e:
         89:f3:23:66:14:20:f5:23:ab:a1:45:f9:e8:8d:41:21:ec:33:
         b8:23:fe:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:22:07 2025 by rpki-client