Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/71428917-1150-3057-a18b-55412b2abe5c.roa
File:                     71428917-1150-3057-a18b-55412b2abe5c.roa (raw, json)
Hash identifier:          bcPaXw667TxbzisqkuPMDHqlHmi6tkWtkbChAV9VwCA=
Subject key identifier:   56:EE:A1:59:54:19:E8:08:5E:8D:03:09:72:DA:96:53:E1:59:DC:F9
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858491D717EF0DB0F598263DBD0C0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/71428917-1150-3057-a18b-55412b2abe5c.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     6461
IP address blocks:        66.46.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:7e:f0:db:0f:59:82:63:db:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=2a7521a9-a629-42d7-8932-5427c52ef51b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:cb:41:2f:a1:4f:ea:e3:9b:99:b1:da:40:5e:
                    29:20:7f:ca:96:a8:38:f1:88:b6:a0:fc:2a:b9:ca:
                    37:0b:14:9b:17:f7:98:2a:62:9d:60:ec:66:0f:8f:
                    dc:d1:c3:f5:06:09:27:78:7f:d5:6e:6a:36:af:07:
                    db:c3:bc:08:da:21:42:ee:0a:72:61:30:8b:fc:91:
                    15:d0:06:ed:c2:f7:19:bf:ca:f9:45:3c:58:59:39:
                    04:0c:21:fc:f9:48:3e:e6:ae:12:67:2b:69:b6:76:
                    98:97:58:1f:ea:c2:23:1d:8f:9d:4c:cf:4f:4c:ce:
                    ad:85:84:9e:ea:b1:ea:66:36:0d:44:ec:7a:48:17:
                    a8:6d:bc:8b:11:b9:ca:0f:85:91:b0:03:05:b1:6d:
                    ac:43:41:53:fd:16:6b:09:4f:96:d8:a7:26:12:a7:
                    55:a6:f1:59:ff:8b:a3:33:5b:9e:a4:0a:0b:f2:9a:
                    6c:5b:73:51:ee:29:51:e1:3c:54:83:ab:31:5b:2e:
                    51:a4:a6:87:b4:57:7c:e4:75:74:9c:47:61:34:ab:
                    58:9c:3f:92:8e:d6:4a:92:d9:da:db:4f:9d:7a:c9:
                    d3:82:11:aa:08:3b:34:66:29:dc:d2:65:2a:97:01:
                    31:25:a1:ff:12:05:fa:c6:34:e0:10:73:45:ad:9e:
                    44:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:EE:A1:59:54:19:E8:08:5E:8D:03:09:72:DA:96:53:E1:59:DC:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/71428917-1150-3057-a18b-55412b2abe5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.46.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:c7:fe:c3:1e:f5:b8:b4:f4:7c:c2:64:02:25:1c:ec:8b:24:
         de:01:f7:44:54:ba:82:08:09:45:8d:cf:b3:d3:63:0a:3a:7c:
         3a:7b:a8:c6:67:8b:04:17:9e:91:cb:ee:a7:e3:f8:8d:ec:cd:
         e0:2b:d6:7c:23:d7:1c:4e:10:8b:7d:ae:ab:00:82:9d:9d:79:
         f4:a7:c1:fa:e5:0c:25:6a:0e:c2:cd:b6:17:74:67:2f:e1:bd:
         73:3f:d4:5b:e3:17:e6:3c:0b:bd:a7:1a:c7:ef:52:ab:47:dd:
         16:d6:58:54:8e:3f:9b:31:a8:c6:53:e0:56:0a:2b:0a:ce:df:
         eb:64:84:78:54:8d:47:c7:93:d6:a1:19:ac:ce:16:56:a1:ca:
         1c:ff:5d:77:5b:f4:d8:6f:33:31:da:07:30:f6:3f:0d:ac:5a:
         26:e7:99:aa:da:9c:7e:12:1d:35:d3:e0:29:4a:a4:73:7a:ab:
         be:f5:ae:81:c8:3d:6e:99:87:ef:43:a1:78:cf:f4:16:2a:af:
         9e:55:ea:a2:78:7a:21:68:07:55:cc:15:63:3c:e3:2e:29:95:
         d1:ea:39:d1:97:95:2c:75:8d:57:47:c8:70:84:0d:92:2b:2a:
         f7:29:ff:67:66:92:c3:a8:3e:0a:c8:76:ee:78:3b:2b:53:48:
         eb:9e:c8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:47 2025 by rpki-client