Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/6c91a7dc-b329-3ac6-bb84-10549bf3d44c.roa
File:                     6c91a7dc-b329-3ac6-bb84-10549bf3d44c.roa (raw, json)
Hash identifier:          QiFDxERTG1P/amfOesKhv3qt6p/haU7Unx9x0HzOMck=
Subject key identifier:   2E:0A:16:60:07:C0:8C:2F:3D:E0:4D:1D:FB:FD:0F:E1:73:EB:A7:5E
Certificate issuer:       /CN=47a6fbc4-59e2-49b4-a345-3edde81f26a4
Certificate serial:       010D0C9F43285848FD56C83F66F425D9E5096900
Authority key identifier: F0:0D:FE:5B:7C:27:3A:40:80:44:7C:E8:75:9B:8B:31:AD:CB:57:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/6c91a7dc-b329-3ac6-bb84-10549bf3d44c.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        66.33.34.0/24 maxlen: 24
                          66.33.35.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:c8:3f:66:f4:25:d9:e5:09:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47a6fbc4-59e2-49b4-a345-3edde81f26a4
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=61d9e5a0-44d8-470e-ae10-099d488b6162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ce:37:fa:c2:77:87:49:25:d9:81:82:f8:ae:
                    69:bb:24:6e:59:5e:7e:87:4f:b4:b7:2a:e1:90:45:
                    b8:13:d1:e9:b7:2c:f2:ec:1a:4e:ab:35:f7:59:42:
                    78:36:f8:5d:71:f7:2e:4f:56:96:b5:f6:0e:76:61:
                    66:bb:00:31:de:22:67:47:23:eb:e2:84:90:89:6c:
                    f8:5c:6b:3c:57:ea:e6:0f:3c:1f:96:2d:e9:dd:46:
                    0d:3a:7b:3b:94:a0:c7:70:75:83:ff:26:c3:f2:8c:
                    7e:12:05:1c:bc:40:45:95:0f:2e:3f:8e:be:16:b3:
                    c7:f0:59:1e:76:34:13:c2:ae:5d:c9:a8:23:0f:8d:
                    2f:98:f2:b6:0d:dd:32:61:08:2a:5d:bf:ec:38:c0:
                    d8:6f:e2:b4:7a:7f:7b:a3:e1:14:ba:49:6c:0b:4e:
                    23:9a:bc:1e:c2:7c:df:84:9b:a0:48:92:85:c6:05:
                    f4:73:81:7a:a0:43:c7:cd:25:ae:2d:58:ed:a3:01:
                    63:dc:47:b4:3d:f5:e0:e3:6f:e8:61:a6:fd:90:4f:
                    ea:e9:42:93:5b:b9:0e:f7:50:5d:e5:54:84:43:8a:
                    fe:5d:83:8d:ff:03:cd:14:52:83:3c:38:f8:de:db:
                    ae:e7:e5:82:cd:68:30:ea:f1:92:24:42:a8:68:35:
                    cc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:0A:16:60:07:C0:8C:2F:3D:E0:4D:1D:FB:FD:0F:E1:73:EB:A7:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/6c91a7dc-b329-3ac6-bb84-10549bf3d44c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.crl

            X509v3 Authority Key Identifier:
                keyid:F0:0D:FE:5B:7C:27:3A:40:80:44:7C:E8:75:9B:8B:31:AD:CB:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.33.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:05:c2:93:7e:0c:2a:62:12:65:0b:4e:5a:e4:87:ca:16:26:
         a5:f1:da:df:09:eb:6a:cf:59:e2:97:06:85:07:19:67:a8:bd:
         66:70:ee:fc:27:c8:d8:48:75:be:17:68:c1:1e:ef:f3:30:27:
         09:38:0d:29:13:d5:b0:24:9e:c4:4a:b9:f9:d2:24:8a:77:a8:
         37:96:49:64:22:94:58:04:e6:56:5b:b7:76:e6:77:f0:2a:62:
         04:fc:06:87:83:3d:0d:8d:f7:44:32:0c:db:8b:7c:ba:1a:69:
         59:01:09:7b:77:e9:95:a1:a6:dc:18:7a:7f:fa:b0:5c:31:5b:
         9b:17:c1:e1:5c:a8:1b:eb:d2:32:d8:8c:8f:c0:9f:51:84:59:
         85:44:fc:1d:21:86:9c:85:b4:54:bf:fb:83:61:0a:9f:91:cc:
         a7:84:10:ec:3d:e4:8e:d6:17:62:59:c7:90:9f:3f:df:22:55:
         6f:bc:ca:8c:75:95:de:03:60:32:84:1a:99:fb:9d:ba:45:ac:
         66:fa:4c:87:62:8b:08:f5:f6:14:81:9c:2b:62:f8:85:55:00:
         bc:8c:be:22:de:2c:4e:31:fe:ac:b8:19:94:de:13:2b:fe:8d:
         10:37:e0:fa:e4:c7:82:6e:3c:e9:7e:1e:71:fa:bb:db:e9:f5:
         86:09:90:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----