Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/504a2c0b-e942-3392-a51f-7d8c0fe34915.roa
File:                     504a2c0b-e942-3392-a51f-7d8c0fe34915.roa (raw, json)
Hash identifier:          YbHPdvZbfdJxHqrcCC/OpEVR4oIoxFKi636AFb9MOBY=
Subject key identifier:   65:F8:36:18:01:09:AC:C9:52:D8:6B:64:BF:C9:9C:97:C1:7C:DF:88
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F432858493C0929814A4E270B7870CE00
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/504a2c0b-e942-3392-a51f-7d8c0fe34915.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     29802
IP address blocks:        66.165.224.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:29:81:4a:4e:27:0b:78:70:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=41af4959-5609-4f62-8327-098ef1f06b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:64:fd:8f:c0:09:d4:bc:f5:49:9e:d1:f8:f3:
                    74:df:03:07:ce:59:4e:a3:f6:d0:91:98:a0:13:cb:
                    64:db:5a:27:56:a1:41:5c:30:09:26:12:f8:cf:d0:
                    11:7b:97:33:6d:99:fe:6b:ca:e9:c7:bf:97:c5:65:
                    2c:80:65:a7:cb:10:d4:9e:58:4b:4f:e4:19:d4:52:
                    52:fb:6e:34:fb:7b:24:11:75:d3:4e:68:9f:e0:df:
                    a0:73:e6:fd:b5:9d:f3:fb:42:53:02:f5:65:62:65:
                    fd:a9:63:ab:4d:eb:22:f2:f9:97:06:b9:e5:dd:c8:
                    76:cd:ad:f4:c1:94:71:de:42:d4:c9:c1:5d:a0:ac:
                    00:81:7c:0c:62:28:17:67:9d:fa:96:61:5f:ca:01:
                    e1:3c:14:79:b5:4b:b4:f7:56:57:36:2e:3d:c8:8d:
                    20:de:a9:bb:1d:93:90:e0:0b:4a:18:8d:68:f4:63:
                    c2:54:c7:7e:fc:0f:24:59:25:ff:a1:7f:a3:b4:d2:
                    fb:c5:b4:53:37:a9:ed:d3:59:92:20:c9:e4:5b:28:
                    18:9d:a3:bb:3e:56:e2:ac:e4:1a:30:4c:3c:43:9f:
                    e2:4b:95:e6:ec:43:b2:0d:fc:4c:fb:c8:88:65:96:
                    28:cc:41:6f:53:b6:07:ce:e8:e1:21:3f:10:89:1b:
                    45:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F8:36:18:01:09:AC:C9:52:D8:6B:64:BF:C9:9C:97:C1:7C:DF:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/504a2c0b-e942-3392-a51f-7d8c0fe34915.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.165.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:cf:52:86:37:9e:a7:14:78:54:be:5a:d1:80:3e:23:e6:e1:
         05:5a:a3:70:55:d5:39:f1:8b:a9:9c:ab:33:25:0d:24:dd:7d:
         b2:1d:98:2c:42:53:e4:19:46:31:52:ff:9e:65:39:95:45:90:
         9f:a1:12:bf:ca:a2:36:e5:75:69:3a:00:01:70:47:fc:02:71:
         32:81:04:41:f6:e2:07:1d:a3:37:46:74:58:fa:66:79:ab:64:
         9a:b4:db:a3:4b:47:eb:ac:88:a5:c5:1d:34:ea:b0:78:bc:b3:
         65:af:2e:f7:8d:56:8e:f1:40:62:a0:64:e1:7b:a4:cb:a0:20:
         33:20:71:39:57:fe:2d:e5:29:31:a3:c8:91:a4:d1:04:ff:12:
         77:d0:5e:06:12:48:83:76:16:15:ed:90:7d:87:22:9c:72:0d:
         4e:75:08:d4:44:a4:dd:62:51:ec:7b:48:58:3b:17:08:b9:81:
         fe:a2:38:9a:74:ec:5a:e0:4e:d7:29:01:05:a8:f3:33:62:99:
         48:40:9f:94:f9:48:70:39:11:f6:26:be:3e:6d:5f:e2:12:aa:
         5c:8c:7b:10:a1:13:8b:35:ab:b7:41:23:6e:14:ad:4e:ec:ea:
         5a:e6:d8:78:cb:48:89:c9:52:b5:22:74:f8:59:86:1d:6d:ec:
         43:1a:b5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:07:50 2025 by rpki-client