Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f36f7462-c7a9-4aa8-af42-792dae19380f/e16baff4-7918-391a-b882-0b5aec46e403.roa
File:                     e16baff4-7918-391a-b882-0b5aec46e403.roa (raw, json)
Hash identifier:          cKjT7KXrxR7YXC4iB/67oTyWkycSF30ww+inKSXWKzc=
Subject key identifier:   7C:8E:AE:11:7F:43:94:D9:5C:F8:9A:1A:68:65:CE:FF:35:67:D5:2E
Certificate issuer:       /CN=f36f7462-c7a9-4aa8-af42-792dae19380f
Certificate serial:       010D0C9F43285848F4F69D16AAFFE223F9E18C20
Authority key identifier: 3A:27:A1:D0:28:2E:FC:FB:82:DB:21:5F:1B:F2:3A:CC:FC:E7:2E:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f36f7462-c7a9-4aa8-af42-792dae19380f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f36f7462-c7a9-4aa8-af42-792dae19380f/e16baff4-7918-391a-b882-0b5aec46e403.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     394564
IP address blocks:        66.112.201.0/24 maxlen: 24
                          66.112.202.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:9d:16:aa:ff:e2:23:f9:e1:8c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f36f7462-c7a9-4aa8-af42-792dae19380f
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=c0e85402-4ccd-4b7f-a918-d70388b0cd02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c8:d0:e7:9d:ab:17:bf:13:99:dc:fe:ac:e5:
                    ad:dc:f0:a7:25:44:a2:20:08:3f:54:9f:9f:41:65:
                    6d:5a:21:32:96:58:32:5d:ce:a2:5d:60:61:e2:cc:
                    20:bd:9a:ac:a7:1e:1d:7c:59:49:a2:e8:ec:bc:4e:
                    ad:b9:f3:0a:8b:fc:05:b2:90:45:19:c6:26:eb:28:
                    00:18:49:ae:2d:a5:c3:60:60:9f:a4:4a:ca:8c:73:
                    e8:06:87:59:b7:bf:ee:74:37:58:60:4a:c9:98:1f:
                    fd:dd:5f:01:12:fd:78:58:4b:9d:ed:65:3b:03:24:
                    d2:a1:38:de:dc:e5:08:ae:53:2f:b3:a7:65:f1:4d:
                    7c:67:84:bf:9e:19:28:c7:9e:0a:b8:26:c7:16:ed:
                    3a:7a:4e:c1:ff:02:ea:c3:81:b5:b9:fb:93:d9:78:
                    66:a8:b9:ef:07:72:7f:6b:19:07:8b:e0:ea:33:8b:
                    9c:38:8d:08:31:34:30:31:05:90:ef:ea:91:88:a4:
                    63:cf:44:7c:06:9b:2a:0f:c8:58:7c:f2:ba:d5:63:
                    da:5e:97:b2:c6:f2:74:c8:7c:7f:13:21:1e:c2:a6:
                    97:79:a5:0e:60:3f:af:95:3a:c6:dd:94:cb:e4:bb:
                    c0:3f:4d:73:87:ba:f4:7f:74:c2:d0:cc:94:35:14:
                    94:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:8E:AE:11:7F:43:94:D9:5C:F8:9A:1A:68:65:CE:FF:35:67:D5:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f36f7462-c7a9-4aa8-af42-792dae19380f/e16baff4-7918-391a-b882-0b5aec46e403.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f36f7462-c7a9-4aa8-af42-792dae19380f/f36f7462-c7a9-4aa8-af42-792dae19380f.crl

            X509v3 Authority Key Identifier:
                keyid:3A:27:A1:D0:28:2E:FC:FB:82:DB:21:5F:1B:F2:3A:CC:FC:E7:2E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f36f7462-c7a9-4aa8-af42-792dae19380f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.112.201.0-66.112.202.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:94:56:ea:53:74:66:00:7e:36:39:8c:5a:f1:7c:9b:93:0c:
         17:4b:3c:79:04:8b:b9:0c:5b:14:e7:3b:eb:4d:a0:eb:7b:77:
         b9:71:cb:15:fa:7d:e4:93:cf:07:58:7c:7f:22:ed:1b:f1:20:
         e5:b4:c0:c1:a2:fb:d7:c0:f0:2b:d4:e9:7e:9e:c8:08:5b:4c:
         03:6a:d7:af:01:ed:b5:80:22:00:f3:8c:d9:d3:a2:c5:c9:26:
         5f:60:f2:9d:d2:8e:05:09:65:c8:eb:99:f5:42:e6:bd:0c:0d:
         f6:f5:ce:36:3c:96:f9:36:d8:d9:85:20:a4:10:2b:aa:5a:ec:
         04:9d:d5:63:69:78:aa:be:32:e0:ba:6e:44:29:b9:41:50:fc:
         e0:94:15:4b:c4:be:2e:7a:a0:a5:b5:ed:cb:23:17:17:79:69:
         b8:24:62:69:c8:d9:72:77:8f:72:1b:f0:75:83:29:03:52:a6:
         6f:45:e8:c2:99:97:13:1c:97:57:cf:6b:78:9b:c3:2c:80:be:
         e7:6e:9f:9d:6c:72:57:89:96:58:bf:6a:e7:d0:09:a8:67:cb:
         de:c1:3d:dc:c4:7e:71:be:0b:86:55:12:cd:2b:ae:2d:dc:b6:
         68:64:f6:b3:94:a3:30:c3:54:88:90:7c:de:00:83:ab:d6:0b:
         bd:a1:8a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:16:55 2025 by rpki-client