Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/975ebd21-00c4-32f7-baf2-53fa6ef43997.roa
File:                     975ebd21-00c4-32f7-baf2-53fa6ef43997.roa (raw, json)
Hash identifier:          IW+OYrKZA0fOKtMiGKF2IiIsm+5N3KP7u2upZ0D3QNk=
Subject key identifier:   11:44:20:B0:AE:38:82:CD:6B:E3:E9:7B:F2:7F:BE:8B:F0:6E:F0:40
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849194180A8F8D71FC486218F00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/975ebd21-00c4-32f7-baf2-53fa6ef43997.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     36222
IP address blocks:        66.62.61.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:80:a8:f8:d7:1f:c4:86:21:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=24574b54-d544-46c2-88f6-1f282b75a3c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:df:0c:43:41:77:b6:73:12:8f:ba:b4:e8:79:
                    70:a6:a0:b3:5d:33:79:2f:86:e9:d8:eb:2a:d0:40:
                    71:26:53:87:70:50:a0:ba:a4:c7:1a:63:65:3a:46:
                    69:93:a4:2a:62:3d:fc:f4:6e:86:b9:2a:f4:11:ab:
                    be:06:b1:ab:cd:96:30:18:a0:ef:c5:40:81:4d:eb:
                    04:db:83:71:8e:09:b2:1e:cb:93:6b:fd:c5:18:03:
                    9c:6d:bd:c2:50:37:0b:24:2f:b4:ec:22:f5:6b:e3:
                    bd:cc:aa:16:58:e9:95:bf:f0:95:2f:ab:5d:2d:19:
                    76:95:a3:e1:39:90:a7:e1:f4:39:33:0b:02:90:da:
                    e7:e2:a0:63:af:0d:ee:a6:de:cb:63:16:8a:7e:40:
                    5a:e9:47:e8:71:18:41:05:41:55:f8:39:82:57:79:
                    90:fb:3c:d7:60:83:30:1a:d3:c1:22:4a:50:2c:14:
                    c3:eb:3f:1e:94:6f:b5:f7:73:b2:17:97:1e:c8:54:
                    88:70:05:67:4f:71:fd:19:7e:8d:d0:24:ef:21:49:
                    b2:6a:32:ab:8e:36:0b:a3:54:b8:73:93:ad:2f:ce:
                    1f:a4:ec:28:a9:9a:ae:b8:ac:99:c2:47:55:46:17:
                    7c:7a:31:6b:c7:01:ac:8c:b2:71:a4:5b:f6:40:32:
                    f3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:44:20:B0:AE:38:82:CD:6B:E3:E9:7B:F2:7F:BE:8B:F0:6E:F0:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/975ebd21-00c4-32f7-baf2-53fa6ef43997.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.62.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:7f:05:f2:14:2a:66:a5:98:d4:71:29:f6:1b:ed:16:98:cc:
         65:74:6f:e5:04:5a:2a:ac:e7:e6:6d:3d:b9:cc:ec:ac:44:43:
         5a:6c:3a:3e:18:3e:91:78:31:02:11:2c:27:19:8f:fd:cc:3c:
         1d:8d:b6:a6:0a:1f:96:08:4b:b1:87:90:60:df:fc:65:47:e5:
         12:4a:b5:cd:91:fe:ff:2e:10:46:cb:6d:7a:79:27:6a:aa:d4:
         18:17:83:53:63:10:63:1a:27:1d:ea:bd:1e:ea:62:b7:ed:33:
         86:0c:55:47:99:cc:64:86:c0:79:93:4a:f6:e2:56:8a:7f:6f:
         06:ed:ac:40:76:f2:84:19:6b:99:0b:95:c4:d2:0b:cd:cb:e9:
         0f:66:3d:5d:f4:de:2a:12:df:46:8c:91:97:12:54:30:db:94:
         08:a5:c5:e5:6c:9f:ba:e9:b1:3e:e2:a7:d1:d2:41:45:72:df:
         9b:d2:31:e0:c3:97:80:cb:d2:0b:68:82:6b:82:4a:6c:74:74:
         33:78:53:14:de:f8:40:b4:af:62:b1:20:50:2c:5e:2d:ff:99:
         df:60:27:ca:e8:74:78:0e:7a:0c:76:a9:11:0c:ad:78:df:31:
         2d:72:fd:63:5c:a2:e7:02:81:6a:ca:61:8b:ed:05:87:ef:23:
         d7:3d:9d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:40:06 2025 by rpki-client