Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d21f87b2-d00e-3b82-bd81-32801569306b.roa
File:                     d21f87b2-d00e-3b82-bd81-32801569306b.roa (raw, json)
Hash identifier:          /CBFbxA+R9mQvQp7bEXcm7LHKyLRqb42oGVkILdn2Uk=
Subject key identifier:   50:E1:C1:C9:D1:57:6B:87:22:DA:03:BF:12:1C:89:78:56:2F:27:57
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285849393E82897919BFDA5E010900
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d21f87b2-d00e-3b82-bd81-32801569306b.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     5650
IP address blocks:        166.88.190.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:82:89:79:19:bf:da:5e:01:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=176235d1-fa63-4092-a26f-ffa027d7a123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a6:da:ef:db:d3:78:19:b0:d0:04:6f:2f:8d:
                    85:9b:18:ef:18:77:1b:9b:e8:fa:a2:14:3e:ef:ee:
                    1d:59:d6:7d:94:d2:1f:34:e3:ee:96:2a:7c:61:73:
                    c5:2b:53:d2:6f:4f:96:74:3b:9d:46:c9:69:4c:93:
                    99:fe:81:90:24:15:da:88:02:d4:1f:d5:e8:fc:ea:
                    b4:de:0e:b9:2c:80:11:ee:89:7b:ca:94:ae:5b:08:
                    dd:72:4f:a1:4e:2f:12:09:8b:ea:e2:eb:39:8c:6e:
                    60:c3:37:8c:e3:b7:f4:57:c2:ee:44:90:5f:af:6c:
                    ee:56:69:38:a7:d9:b4:d8:1d:7c:db:1c:23:7d:93:
                    3a:21:d9:6e:88:cf:2b:32:4f:97:d4:e2:51:53:c0:
                    f5:19:34:ab:15:42:d0:ca:a9:93:67:00:07:47:e1:
                    cd:4a:98:e0:a9:f7:3a:3e:ca:e5:93:b0:b1:27:94:
                    91:f7:53:1b:a1:9c:ce:ac:6b:0c:fe:d5:8f:d4:25:
                    c7:50:76:4a:39:21:f1:ab:5e:0b:36:25:48:d6:3a:
                    03:1b:95:b3:c2:99:27:91:36:4e:87:6a:da:e0:7e:
                    9e:ee:97:9d:6d:63:b6:0f:d1:1e:2a:4b:52:ca:44:
                    5e:0c:3c:dd:a8:8f:ae:8d:2c:de:64:88:71:5f:b9:
                    31:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E1:C1:C9:D1:57:6B:87:22:DA:03:BF:12:1C:89:78:56:2F:27:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d21f87b2-d00e-3b82-bd81-32801569306b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:82:ec:4d:cd:dd:30:99:28:7b:f1:c6:b7:e3:6c:30:1f:54:
         44:3a:36:61:80:50:10:ca:32:5a:b9:e7:f2:a6:5e:11:2f:0d:
         e3:7a:e9:ed:81:21:63:45:ee:e3:c5:48:bc:36:24:08:4d:16:
         f8:58:7f:c0:b2:04:0d:1a:d1:0c:d8:72:68:0a:f6:61:54:ac:
         d8:a1:00:f7:95:34:e4:99:ec:94:33:90:f5:92:cb:da:fb:31:
         96:34:d2:e8:5e:0b:6f:53:08:8e:e1:e5:a2:b0:ea:f8:67:b0:
         1f:56:a0:0b:7f:27:c7:d0:49:62:c2:c2:b5:c2:25:de:c7:53:
         51:9f:57:d2:48:24:57:bd:8a:ed:72:d1:41:b0:87:56:16:7b:
         a4:2d:b6:aa:4b:51:0a:b9:75:14:a6:38:1f:80:3f:aa:f2:61:
         37:60:d7:d6:46:98:d9:40:ca:e0:44:e0:d0:45:59:60:1b:d7:
         75:7f:96:d5:61:13:b5:93:3d:fd:0f:6c:8e:b3:e9:d0:59:0a:
         e2:1d:bb:9d:11:3a:f8:ca:72:b4:48:e8:30:fe:f9:db:7a:14:
         c3:43:48:fc:ac:c3:1d:35:98:9c:ec:54:62:9d:ee:8f:27:42:
         db:89:52:da:50:a7:bb:4d:07:b4:15:b7:d2:23:f0:34:24:53:
         64:1a:5a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:35:36 2025 by rpki-client