Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7c541c35-9ae3-3066-bca6-b11cee7fd18c.roa
File:                     7c541c35-9ae3-3066-bca6-b11cee7fd18c.roa (raw, json)
Hash identifier:          uSrfcb02WlkW0nXV46I3yhRRsXJU2w5teJCWKa6dk3E=
Subject key identifier:   E6:B1:84:AD:31:F4:05:20:05:99:06:2E:4A:4B:C5:BC:07:3E:00:33
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858487538EB2A1F71550303AE1900
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7c541c35-9ae3-3066-bca6-b11cee7fd18c.roa
Signing time:             Mon 06 Jan 2025 19:51:09 +0000
ROA not before:           Mon 06 Jan 2025 19:51:09 +0000
ROA not after:            Sun 06 Apr 2025 18:51:09 +0000
asID:                     6461
IP address blocks:        209.66.106.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:75:38:eb:2a:1f:71:55:03:03:ae:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jan  6 19:51:09 2025 GMT
            Not After : Apr  6 18:51:09 2025 GMT
        Subject: CN=8aa8ee26-a835-44be-8ddf-11c7a7277740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:08:9e:9d:b5:9a:a0:75:cb:82:26:4d:e8:b1:
                    35:65:ab:7a:67:5c:46:cd:aa:de:6e:2c:f1:6a:5c:
                    e1:63:56:ad:9a:43:41:9e:52:89:06:7c:ab:94:03:
                    9a:85:93:c0:be:0d:95:7d:1f:1a:a3:74:aa:8a:ca:
                    5e:94:46:8a:75:a0:ae:ce:74:d6:31:fd:bd:30:9e:
                    e0:94:7c:91:9f:9c:6e:20:73:00:6a:c1:60:0a:d0:
                    50:42:57:1a:ad:f5:3b:e0:c7:c2:da:44:ca:0c:ba:
                    cc:c2:0a:21:15:7e:cc:81:3d:4b:ab:bf:7d:9a:13:
                    47:dd:62:72:d0:41:0a:08:56:e9:be:92:1b:58:e4:
                    2f:9d:d1:34:c4:ad:dc:15:29:d2:c8:96:8f:2b:d3:
                    af:8f:1f:3c:f5:dd:9b:f5:60:40:5f:a6:3a:ee:78:
                    68:88:5f:a6:5a:af:c6:9b:86:c4:f4:23:3f:0d:2b:
                    b7:d0:c9:81:8a:86:96:ce:b8:c2:be:21:e5:ab:db:
                    58:9f:76:5b:e5:2c:29:55:e7:e5:54:2b:06:db:8b:
                    13:a1:23:a2:2d:aa:7b:ff:6f:45:30:75:e5:dd:98:
                    a2:de:05:8f:bf:0b:9c:16:a1:95:6e:ac:36:a5:d2:
                    6f:d0:70:29:84:3d:78:70:c2:3b:91:3f:c4:9d:70:
                    3a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B1:84:AD:31:F4:05:20:05:99:06:2E:4A:4B:C5:BC:07:3E:00:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7c541c35-9ae3-3066-bca6-b11cee7fd18c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.66.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:9c:c4:d7:bc:58:8e:c5:61:b4:39:b0:08:45:5c:b7:03:00:
         52:5a:11:bd:6f:6e:02:dc:7e:8f:cb:0e:61:1e:29:aa:39:16:
         3a:cb:6b:b3:12:36:da:99:9e:7a:d4:e5:da:5d:20:ed:74:91:
         b2:c6:99:13:20:c6:f5:a2:09:03:02:84:be:49:aa:a5:62:f2:
         55:df:71:a6:0f:fd:c9:d4:0a:7b:3e:ce:de:b4:ff:ad:5c:46:
         59:be:12:bc:b0:2a:cf:74:f0:2d:78:5b:66:9c:23:85:ef:51:
         38:3e:b1:0e:ae:70:73:0a:93:b4:69:89:76:8b:c9:e0:85:81:
         0e:8a:cc:7d:03:36:30:98:86:dd:09:a7:12:e3:7a:65:98:2b:
         8f:12:b0:cd:e9:da:b2:97:d2:ed:0a:b1:c2:d1:ef:ec:09:a1:
         33:03:a6:e0:3f:86:d9:d1:e3:c7:36:8e:30:dc:83:cc:ed:9f:
         31:d4:80:4a:ee:4c:f0:7b:52:19:8e:54:6a:79:2a:19:c7:69:
         84:36:6d:48:e4:13:2a:d0:13:b4:ae:ac:3b:83:9b:3b:17:ae:
         3d:37:c3:d1:58:8f:2e:0d:9e:75:96:23:a1:52:7f:cb:c5:01:
         7c:b6:b5:ec:52:b5:13:f5:54:25:73:20:4d:ca:9e:50:b5:c3:
         00:9c:4f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:37:45 2025 by rpki-client