Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b/1fed6c3c-17d8-3f60-ac4e-0757fcf0829a.roa
File:                     1fed6c3c-17d8-3f60-ac4e-0757fcf0829a.roa (raw, json)
Hash identifier:          H6xApT+xujX5jPoRALdVjDyDAaj5Nqn3LohEfD/2/JA=
Subject key identifier:   88:B3:12:8C:41:95:3C:31:AB:1A:14:65:1D:2B:06:0B:E7:10:E4:D2
Certificate issuer:       /CN=76d1290b-e045-43ca-96b8-a3da87e72c4b
Certificate serial:       010D0C9F432858492184054337408E6C05FAC580
Authority key identifier: 7F:96:EF:CA:02:7E:0C:BE:ED:E1:6B:31:77:0E:29:D4:0A:B4:F3:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b/1fed6c3c-17d8-3f60-ac4e-0757fcf0829a.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     400191
IP address blocks:        66.59.195.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:05:43:37:40:8e:6c:05:fa:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76d1290b-e045-43ca-96b8-a3da87e72c4b
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=dd2c3cc8-8998-4b8e-9f62-08526e88d30a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:35:3c:ba:7f:bd:bc:be:5f:e2:0c:3e:6b:4e:
                    18:30:7a:63:2d:e3:c6:97:54:47:88:dd:97:8a:72:
                    c7:7f:d8:64:80:bc:34:bb:e0:27:4b:a4:c6:d6:69:
                    4f:5a:c3:b2:e2:e5:4f:b3:f1:98:06:6e:64:0d:e0:
                    8b:0d:c6:60:37:05:0c:73:c9:73:cb:b6:06:71:18:
                    a9:8a:b3:e4:16:9c:8a:dd:6e:fb:e8:c8:51:2d:57:
                    ce:ae:b7:36:77:ae:fc:cd:b6:c2:c8:98:43:6c:16:
                    bc:ef:da:9a:64:15:e8:a0:ec:af:02:19:23:11:a0:
                    df:38:26:e2:15:f7:21:f0:4b:89:db:4d:20:66:de:
                    0c:c7:58:d2:9d:dc:68:d7:a0:8b:19:8c:b9:2b:55:
                    e9:92:e2:98:b9:87:a4:89:71:c2:70:a6:4e:fe:e5:
                    d5:dd:bc:13:da:28:0e:fe:b0:07:52:6c:16:04:47:
                    b4:4c:5f:4d:96:53:f8:0a:e6:5e:48:fd:70:3b:e9:
                    9a:e4:89:26:99:5e:bf:79:d9:7e:3a:49:96:c7:05:
                    19:f8:77:3d:2f:a0:bb:86:78:c6:85:d4:79:09:27:
                    2b:f0:0a:47:49:f0:64:09:83:c2:48:4e:65:4f:a4:
                    55:78:3a:eb:be:f4:cd:aa:c4:be:64:22:0a:2c:ad:
                    59:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B3:12:8C:41:95:3C:31:AB:1A:14:65:1D:2B:06:0B:E7:10:E4:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b/1fed6c3c-17d8-3f60-ac4e-0757fcf0829a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b/76d1290b-e045-43ca-96b8-a3da87e72c4b.crl

            X509v3 Authority Key Identifier:
                keyid:7F:96:EF:CA:02:7E:0C:BE:ED:E1:6B:31:77:0E:29:D4:0A:B4:F3:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.59.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:81:0f:f6:b0:62:64:c0:03:0b:c8:30:3f:bf:c8:6a:d4:f8:
         c4:a8:95:9a:cb:c1:3e:07:c6:8d:c2:63:f6:4c:b5:b0:4b:80:
         56:42:1e:d9:29:79:2f:c4:eb:d8:c7:cc:2b:5f:92:cf:97:c0:
         02:62:38:40:6f:12:41:ee:8b:2a:25:2f:bd:3b:16:45:a1:0b:
         4a:5e:57:da:25:0c:a7:5f:99:95:c0:ff:3f:cf:42:ee:7e:45:
         bc:58:47:80:6f:a1:71:23:74:e3:6f:96:94:fc:af:1c:9f:0c:
         e1:3b:4c:2b:7d:b6:48:75:e4:83:a2:f1:ba:bd:95:6e:24:7f:
         85:0c:60:9a:62:09:b9:34:84:96:1d:e7:19:97:0e:48:6b:10:
         bf:38:8b:1b:6d:9e:17:26:21:0b:c7:26:87:f7:44:15:eb:80:
         ad:65:0b:0a:68:c4:fa:4b:66:47:3a:d9:a1:57:a8:b5:c4:72:
         1b:4b:d8:56:0d:ae:a2:c9:c2:70:fb:1a:99:49:09:3a:bb:cd:
         f2:db:3b:a2:92:5b:38:40:75:64:0a:c2:44:84:99:9a:52:aa:
         1a:cb:33:4a:fe:2f:1c:55:f6:6e:4b:d4:20:47:a3:34:c6:49:
         75:b7:53:d1:b0:8f:74:7c:2f:53:bf:f6:44:75:81:85:ce:dd:
         a5:8e:6d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:22:20 2025 by rpki-client