Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9208aa7e-74bd-34ba-9977-76859d2acbff.roa
File:                     9208aa7e-74bd-34ba-9977-76859d2acbff.roa (raw, json)
Hash identifier:          VSOXE7oP9kCuz/g1Sw+k5rwpgUcT3fpxYx77ijsit+g=
Subject key identifier:   21:B2:43:49:79:2D:BF:15:8C:11:AE:6C:05:93:CB:A7:07:2F:FF:43
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848AF2BA8F040326AD4DBCFA880
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9208aa7e-74bd-34ba-9977-76859d2acbff.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     18779
IP address blocks:        166.88.155.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:a8:f0:40:32:6a:d4:db:cf:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=207ea3ea-d474-4cea-b753-43ae852d57f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f8:9d:3b:fb:4a:54:63:c5:1f:c1:38:33:c7:
                    1e:19:04:51:98:5a:54:d1:75:ee:53:80:58:57:d2:
                    80:8a:3c:10:7a:ee:eb:ba:fe:2f:61:48:9b:ef:2c:
                    13:5e:b1:8e:06:7f:61:13:d6:65:a8:0a:a4:16:f4:
                    a1:5e:4b:16:2f:0d:1f:35:d5:ab:78:73:33:d3:59:
                    b2:d6:85:c5:f8:0e:c6:99:52:8a:2b:36:61:43:73:
                    0c:8a:04:18:97:56:d9:e9:29:4c:b7:21:a1:e5:f6:
                    1a:04:88:17:38:72:d0:16:63:60:0d:a7:5e:5c:5d:
                    56:bb:7f:b4:c3:93:2d:c2:f7:0b:36:2b:67:bc:88:
                    70:24:5d:15:f2:51:80:ef:52:0c:2f:2a:0e:9b:1a:
                    7b:44:8a:78:9d:61:8b:21:31:fe:ab:71:50:a2:ec:
                    1d:9e:3a:8c:63:6a:d5:e3:01:bc:c0:3d:d8:3d:51:
                    b9:d4:88:5c:45:9b:6e:84:07:93:dc:d9:4d:3e:3a:
                    e9:e1:bd:06:66:08:3a:04:39:b6:88:4e:c7:8e:9f:
                    09:57:ed:8a:a1:25:de:15:ee:ea:a6:b8:52:15:61:
                    b7:e3:04:57:3e:a9:95:53:d5:49:00:6d:57:00:c2:
                    47:26:7f:34:c3:63:58:3e:98:d7:93:d9:11:bb:5e:
                    3e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B2:43:49:79:2D:BF:15:8C:11:AE:6C:05:93:CB:A7:07:2F:FF:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9208aa7e-74bd-34ba-9977-76859d2acbff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:77:4f:32:20:f2:05:72:fa:70:38:ce:81:e3:7d:cd:04:f8:
         08:61:91:bb:6d:f6:40:ee:47:02:78:82:4c:65:0d:a2:6c:04:
         8f:6e:20:db:13:1d:12:d1:3c:8f:9b:45:a6:f3:24:a0:d0:81:
         69:c4:e0:6f:a3:c8:c6:80:52:e0:d5:a9:4e:48:dd:ca:5a:7a:
         06:b5:ae:63:88:19:cc:8a:cd:30:ee:3e:f7:3d:32:a3:66:35:
         23:98:14:e8:6d:45:36:36:72:bf:7c:86:05:00:03:07:ae:92:
         5e:be:6d:98:d0:6b:d6:cf:60:64:ef:1a:2c:4c:ab:de:b9:ca:
         42:a7:bd:3d:3c:75:c9:17:ab:92:31:bc:ac:3d:21:09:39:3b:
         04:85:10:51:b8:92:80:38:60:fd:ae:ee:2a:a8:73:3f:aa:7a:
         be:8b:be:0b:78:15:87:e2:21:7f:ac:71:a5:28:3c:2c:89:43:
         a5:6c:7c:70:67:aa:44:ef:cf:5d:5e:5b:a3:7a:66:bc:22:29:
         03:ce:fc:fb:e3:cc:e7:41:79:65:c2:b8:95:1a:f6:17:36:26:
         f5:33:d3:c2:ae:6a:b0:84:00:f2:d8:ac:52:95:6b:bc:80:4b:
         84:93:29:36:18:ec:bd:05:e5:be:08:3a:ac:be:f4:2a:2c:4b:
         fb:59:5e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:59:33 2025 by rpki-client