Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/92078ffe-c821-3634-ac6a-82cf20232772.roa
File:                     92078ffe-c821-3634-ac6a-82cf20232772.roa (raw, json)
Hash identifier:          sF4DGNEq4QAlFDhtoiEyJe/Pb7fUi+UONm8n0rrME7o=
Subject key identifier:   53:EE:92:49:36:60:7B:42:D2:B4:66:2A:BE:6D:7C:05:1E:00:90:3B
Certificate issuer:       /CN=147f088f-ace0-45c8-9c73-f06e60d7debb
Certificate serial:       010D0C9F43285848B835CE26352A4669DBE4C7C0
Authority key identifier: A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/92078ffe-c821-3634-ac6a-82cf20232772.roa
Signing time:             Thu 30 Jan 2025 19:44:02 +0000
ROA not before:           Thu 30 Jan 2025 19:44:02 +0000
ROA not after:            Wed 30 Apr 2025 18:44:02 +0000
asID:                     14618
IP address blocks:        66.97.237.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:35:ce:26:35:2a:46:69:db:e4:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=147f088f-ace0-45c8-9c73-f06e60d7debb
        Validity
            Not Before: Jan 30 19:44:02 2025 GMT
            Not After : Apr 30 18:44:02 2025 GMT
        Subject: CN=1d9f3541-62b1-4408-b235-72933703f4d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f1:9c:73:1a:e9:d3:0d:bf:04:b0:a4:1b:cb:
                    90:2d:bd:54:76:d8:86:23:7e:97:3d:74:2d:4a:29:
                    ec:cc:c0:49:90:b5:9a:d6:f2:94:25:a2:04:16:23:
                    24:b1:69:a6:82:76:3b:53:53:b7:a8:d3:3b:3a:48:
                    aa:75:0f:8d:ac:bb:bd:0f:5e:90:92:90:6b:64:6d:
                    b9:8a:bd:8d:d0:64:b6:2a:f1:0b:7b:8f:f7:f8:55:
                    27:26:6e:85:c8:77:b9:97:70:aa:da:2d:75:60:2d:
                    f5:3f:48:9f:88:d2:c0:63:29:53:9a:e8:bf:c2:dd:
                    a3:d1:d0:84:73:5e:62:30:43:17:3d:d2:4f:03:bb:
                    bc:f0:94:d5:6e:d6:4c:b6:2f:e8:15:37:7c:8a:1b:
                    20:a8:f2:02:29:ab:1e:68:7b:eb:dc:ee:0a:c3:33:
                    fe:13:a5:ce:d7:4d:44:af:8c:07:4c:0e:36:73:61:
                    66:59:9c:69:b1:87:33:0e:17:30:05:ff:65:0b:ae:
                    aa:1c:ec:13:96:8f:72:ac:8b:e2:d2:be:32:55:bd:
                    88:75:75:0a:f0:a0:59:da:08:d8:44:ca:2d:80:07:
                    89:ac:51:55:b5:83:c3:c9:8a:4f:8d:9c:ef:3d:da:
                    ae:54:c1:84:36:e9:60:2c:0e:02:cb:1d:8e:16:3c:
                    20:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:EE:92:49:36:60:7B:42:D2:B4:66:2A:BE:6D:7C:05:1E:00:90:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/92078ffe-c821-3634-ac6a-82cf20232772.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl

            X509v3 Authority Key Identifier:
                keyid:A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.97.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:80:ab:6b:3c:ee:8c:f2:5b:5b:67:1f:86:c4:32:27:07:72:
         34:7c:23:0a:1c:87:b7:0b:f0:fc:f9:39:bc:0b:c5:07:51:8c:
         10:f4:df:07:93:16:03:9a:44:6e:9c:ab:13:8b:dc:85:35:b8:
         49:d2:4e:e4:84:4a:39:c3:48:05:7b:6c:1e:7b:ba:8a:37:1a:
         ab:e7:ef:51:2c:1b:45:a7:75:64:4d:b9:d1:3c:ce:a6:b3:b5:
         0d:ee:8e:b6:8f:d7:a9:62:01:c1:c8:d0:92:a3:f4:b5:7a:40:
         8e:d2:63:43:ba:b1:b3:74:96:24:85:96:20:a3:2c:78:6e:35:
         6e:0d:3a:6b:5a:cf:ab:b2:39:b4:d8:61:53:79:b2:32:ec:38:
         77:3d:89:4b:4a:7d:a1:27:0e:1e:3c:cf:da:cd:13:6f:89:32:
         b5:80:56:9f:83:5d:c1:5b:64:6d:fe:e5:47:56:f4:66:f3:15:
         fe:4b:c6:11:25:7d:16:f6:8d:7d:7a:fc:e5:32:95:22:41:84:
         ea:cd:01:47:5b:09:15:b8:42:e1:40:cc:55:ee:c6:fc:bf:2e:
         ba:f6:ba:35:0e:aa:3e:81:7f:8b:ea:7e:fc:ff:21:42:81:27:
         d0:75:57:f8:31:01:c7:74:12:d8:d5:59:a9:e5:ad:42:7c:8a:
         e6:d4:49:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi4Nc4mNSpGadvkx8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTQ3ZjA4OGYtYWNlMC00NWM4LTljNzMtZjA2ZTYwZDdk
ZWJiMB4XDTI1MDEzMDE5NDQwMloXDTI1MDQzMDE4NDQwMlowLzEtMCsGA1UEAxMk
MWQ5ZjM1NDEtNjJiMS00NDA4LWIyMzUtNzI5MzM3MDNmNGQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvGccxrp0w2/BLCkG8uQLb1UdtiGI36XPXQt
SinszMBJkLWa1vKUJaIEFiMksWmmgnY7U1O3qNM7OkiqdQ+NrLu9D16QkpBrZG25
ir2N0GS2KvELe4/3+FUnJm6FyHe5l3Cq2i11YC31P0ifiNLAYylTmui/wt2j0dCE
c15iMEMXPdJPA7u88JTVbtZMti/oFTd8ihsgqPICKaseaHvr3O4KwzP+E6XO101E
r4wHTA42c2FmWZxpsYczDhcwBf9lC66qHOwTlo9yrIvi0r4yVb2IdXUK8KBZ2gjY
RMotgAeJrFFVtYPDyYpPjZzvPdquVMGENulgLA4Cyx2OFjwgYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFPukkk2YHtC0rRmKr5tfAUeAJA7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNDdm
MDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZlNjBkN2RlYmIvOTIwNzhmZmUtYzgyMS0z
NjM0LWFjNmEtODJjZjIwMjMyNzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTQ3ZjA4OGYtYWNlMC00NWM4LTlj
NzMtZjA2ZTYwZDdkZWJiLzE0N2YwODhmLWFjZTAtNDVjOC05YzczLWYwNmU2MGQ3
ZGViYi5jcmwwHwYDVR0jBBgwFoAUoxrva0w2lGjtPSODrmMFH5s+HX8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xNDdmMDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZl
NjBkN2RlYmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmHtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIuAq2s87ozyW1tnH4bEMicHcjR8Iwoch7cL8Pz5ObwLxQdRjBD03weT
FgOaRG6cqxOL3IU1uEnSTuSESjnDSAV7bB57uoo3Gqvn71EsG0WndWRNudE8zqaz
tQ3ujraP16liAcHI0JKj9LV6QI7SY0O6sbN0liSFliCjLHhuNW4NOmtaz6uyObTY
YVN5sjLsOHc9iUtKfaEnDh48z9rNE2+JMrWAVp+DXcFbZG3+5UdW9GbzFf5LxhEl
fRb2jX16/OUylSJBhOrNAUdbCRW4QuFAzFXuxvy/Lrr2ujUOqj6Bf4vqfvz/IUKB
J9B1V/gxAcd0EtjVWanlrUJ8iubUST0=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:40 2025 by rpki-client