Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/97c6c268-891e-3f5f-9566-d104a9e7e615.roa
File:                     97c6c268-891e-3f5f-9566-d104a9e7e615.roa (raw, json)
Hash identifier:          lQ3kknUQ0+UH4QbS/+i0ldmxXLbahF6srGtERNAHANk=
Subject key identifier:   F4:73:B0:FE:31:ED:84:EE:5F:05:0A:A0:E6:C2:35:93:76:58:B9:6D
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848F00C4C5873DA77F7323D4200
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/97c6c268-891e-3f5f-9566-d104a9e7e615.roa
Signing time:             Wed 19 Feb 2025 19:45:40 +0000
ROA not before:           Wed 19 Feb 2025 19:45:40 +0000
ROA not after:            Tue 20 May 2025 18:45:40 +0000
asID:                     204957
IP address blocks:        166.88.219.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f0:0c:4c:58:73:da:77:f7:32:3d:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 19 19:45:40 2025 GMT
            Not After : May 20 18:45:40 2025 GMT
        Subject: CN=9b637b70-3541-4da0-a8b2-e1cb274de1d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1f:7f:11:24:97:f0:51:dc:cb:b3:f0:3c:cc:
                    22:02:3f:ef:11:3c:ca:b9:b3:92:93:2d:ba:d4:29:
                    11:60:25:f7:30:4e:e1:84:58:3b:2b:19:ad:07:5c:
                    e7:61:1b:e4:6c:8a:5d:17:34:a4:aa:d1:18:cb:5d:
                    6f:d3:c1:c4:57:14:6a:11:15:1e:27:a1:b0:9c:59:
                    fb:30:35:60:ca:4a:96:88:ce:13:21:6c:a9:2f:d5:
                    15:34:11:92:a0:d7:6c:2b:54:50:15:01:a1:7a:1b:
                    58:e2:d1:ec:81:2e:d7:24:5a:44:aa:bc:ec:b2:0a:
                    59:46:23:fb:6d:c5:d4:c7:eb:5b:13:39:30:bc:90:
                    34:8b:87:6c:7d:3d:d5:38:0c:df:15:9c:88:b1:28:
                    09:e5:76:d5:98:c1:73:85:eb:48:71:de:08:26:a8:
                    70:26:e2:97:be:39:d6:84:2b:a4:b9:bf:db:f0:57:
                    73:7a:6a:97:4e:9b:f4:f4:36:3b:ea:a6:6e:9d:c1:
                    9a:c6:2d:2c:b7:4a:39:2e:ad:3d:85:13:a3:a0:22:
                    68:6a:8c:54:ff:dd:5c:be:19:ca:28:58:51:91:c7:
                    5a:01:51:10:b5:dc:b5:fc:0b:f7:e9:6b:a4:d7:0c:
                    56:52:96:85:e1:a3:a9:b3:d4:80:14:58:45:a1:12:
                    86:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:73:B0:FE:31:ED:84:EE:5F:05:0A:A0:E6:C2:35:93:76:58:B9:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/97c6c268-891e-3f5f-9566-d104a9e7e615.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:2c:6a:d8:e4:7b:7e:fe:9f:08:4c:cc:42:a6:6e:68:9e:b9:
         7f:5c:e4:52:b0:29:98:23:f9:67:0e:fa:4c:4d:45:fc:34:38:
         54:d9:14:9d:83:da:14:3f:34:82:ed:0f:d4:12:cd:5d:26:0b:
         99:74:09:94:bd:15:fd:17:d5:cc:bc:be:6d:05:a8:9d:5d:6f:
         37:ca:db:a2:3a:d5:9b:3a:75:a8:c2:7c:8b:4e:b9:83:72:19:
         18:e8:05:96:13:02:bd:89:de:a7:c8:38:46:26:93:a7:d6:a8:
         a1:66:b2:e4:04:68:44:cb:0b:4a:79:4a:91:b1:d8:1a:a1:f2:
         8f:20:30:4c:38:40:18:67:dc:02:31:29:96:5b:8d:56:f1:20:
         cd:65:32:fd:28:d5:fb:d1:72:c6:9a:06:1d:3b:f8:60:fb:b8:
         64:71:9d:9b:07:94:98:44:f2:91:0a:c4:07:7a:4a:18:a9:8a:
         bc:97:fd:a7:74:ef:d3:b6:f1:00:e5:da:be:68:cd:96:a0:54:
         24:67:d7:71:86:06:fd:d3:5a:d3:87:fe:00:b0:44:84:ca:35:
         b3:36:d7:25:35:f7:a6:b7:74:6d:08:d0:5e:5c:7f:8f:bd:d8:
         da:b5:e2:1a:75:f0:54:54:08:35:3c:89:fe:06:9e:44:6e:3a:
         8f:d0:5b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:52:16 2025 by rpki-client