Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b7835905-fb01-3c6e-ba09-5af18d7b96a4.roa
File:                     b7835905-fb01-3c6e-ba09-5af18d7b96a4.roa (raw, json)
Hash identifier:          UasTYPC6m/LL5d0yvA8haehOjTEkn4iYCTwD8wVmPHg=
Subject key identifier:   AB:B6:D3:4D:97:67:E8:EF:3A:16:95:05:CA:67:73:36:37:25:36:9E
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848AF2BA022B1A2936972505E50
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b7835905-fb01-3c6e-ba09-5af18d7b96a4.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     18779
IP address blocks:        166.88.233.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:a0:22:b1:a2:93:69:72:50:5e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=83dca66f-d4fc-42d1-9afc-74aa90181bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:94:cd:fa:b7:13:42:cf:65:a9:06:87:36:fe:
                    6c:be:e9:aa:e1:83:0e:1f:e4:12:bb:20:c1:90:00:
                    b1:24:34:0e:b8:ec:f8:56:31:88:95:5c:88:4e:9d:
                    e6:87:b2:4b:4f:a9:06:1f:40:2d:ab:b4:a4:4b:c3:
                    c8:d7:db:c8:34:52:62:9d:14:ff:42:76:5f:bd:bf:
                    53:1c:18:4f:45:0c:93:82:ac:61:7c:ae:16:de:0e:
                    99:a1:d6:66:03:3b:70:4c:05:7b:49:87:72:bd:95:
                    92:1a:43:8d:25:94:f6:3e:f2:11:1a:61:07:6f:ec:
                    96:50:6a:78:98:ec:a0:8a:23:79:9c:8f:76:db:c5:
                    0d:3f:cf:a8:52:3d:46:3b:a8:e5:e6:a2:fd:71:ed:
                    33:e0:07:66:a9:68:95:c9:5e:27:70:f2:16:ff:2a:
                    f3:22:01:4d:2e:64:1e:7a:94:88:7b:2c:59:99:93:
                    af:7a:16:fd:33:8e:e8:98:db:48:16:a5:a7:cd:07:
                    42:74:0e:99:3c:86:53:11:37:99:d1:05:a6:eb:be:
                    b6:16:d1:cc:e9:1f:e1:7b:5f:92:d3:86:94:ed:ff:
                    b1:ce:1c:d7:f1:07:90:64:a7:bc:bc:2e:97:df:97:
                    fa:45:21:ff:60:81:6c:db:58:31:4e:c5:1d:8f:69:
                    b8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B6:D3:4D:97:67:E8:EF:3A:16:95:05:CA:67:73:36:37:25:36:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b7835905-fb01-3c6e-ba09-5af18d7b96a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:a0:2d:a1:a7:54:0a:b9:05:3f:43:f0:6c:a2:dd:d8:64:d1:
         f1:06:70:81:51:a4:3e:1f:50:98:66:2a:13:7b:f3:75:4d:19:
         5b:e2:a7:9d:ea:ba:41:4f:d4:66:c0:78:4d:34:a8:c4:30:19:
         88:fc:f0:bd:80:4d:01:74:e8:5c:c4:4e:5b:27:ba:33:36:c3:
         02:5d:23:6d:cc:57:05:d2:0f:06:af:c9:10:f3:fc:e9:f3:bd:
         70:a0:88:36:f2:ad:47:f1:67:18:76:b9:78:5e:cb:cd:4d:6b:
         45:13:af:f7:30:f6:16:9d:0e:dd:52:8d:45:5f:c5:77:66:fb:
         05:73:f8:60:f7:67:43:94:f8:27:09:23:e3:70:8c:22:08:b8:
         8a:22:dc:32:88:4d:13:4c:6e:c4:5e:64:46:5f:db:77:e1:d4:
         e8:87:92:55:64:9b:bc:0c:7d:ff:45:14:e7:7c:dc:b4:6e:e0:
         e9:61:09:56:52:b8:98:6d:a7:25:40:5f:cb:7b:2a:f0:6a:11:
         50:42:4f:be:8d:6b:55:79:2b:d5:41:7d:34:d7:ed:44:12:83:
         a0:de:2d:97:b3:47:a6:24:7c:d9:1d:82:4e:19:74:ef:73:45:
         ad:28:44:e3:70:50:4e:f6:88:e7:93:02:0f:73:71:d5:0c:8f:
         d4:86:96:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:01:56 2025 by rpki-client