Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5a6552e0-4646-325f-a4e9-a24518ba66bb.roa
File:                     5a6552e0-4646-325f-a4e9-a24518ba66bb.roa (raw, json)
Hash identifier:          tw1nBcbQmAFLx6BYx/o0O/VvrOfAyFTP354v5xFZf/k=
Subject key identifier:   2A:7F:A1:69:25:1E:D0:5B:8E:4B:0D:87:81:CC:F9:58:83:E1:84:5D
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858490113B8A87FFF9E2F907FE300
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5a6552e0-4646-325f-a4e9-a24518ba66bb.roa
Signing time:             Tue 25 Feb 2025 22:09:22 +0000
ROA not before:           Tue 25 Feb 2025 22:09:22 +0000
ROA not after:            Mon 26 May 2025 21:09:22 +0000
asID:                     20001
IP address blocks:        66.91.0.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:01:13:b8:a8:7f:ff:9e:2f:90:7f:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 25 22:09:22 2025 GMT
            Not After : May 26 21:09:22 2025 GMT
        Subject: CN=781a00b8-aa41-4253-9725-9843ae6f8020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ff:18:22:94:61:20:b9:56:7b:33:7c:d1:fe:
                    7a:a9:a0:dd:1d:40:97:9f:20:4c:bd:bf:67:9a:96:
                    52:71:57:34:0f:2a:08:ae:d5:04:59:92:62:23:cf:
                    da:38:fd:2f:09:bb:84:24:9e:31:c1:d8:68:9f:92:
                    cc:90:14:4d:a1:29:f6:49:97:fc:01:65:d8:bf:46:
                    a9:b9:27:85:cb:51:e9:4c:b3:f1:ed:83:5a:cf:23:
                    fd:04:0e:1b:07:61:01:0e:29:d3:5d:9f:b6:ac:e2:
                    a8:29:9d:c1:9f:1a:01:82:75:dd:30:3d:22:17:3a:
                    63:49:d9:20:e9:2a:10:dc:f4:64:52:dc:a9:0f:57:
                    2b:1b:3d:f3:ef:93:d9:b7:1d:00:f2:c4:f1:c9:44:
                    80:f1:79:6b:6d:42:da:79:f9:33:9e:fc:29:e7:fe:
                    c2:27:65:a2:40:c3:12:65:75:05:27:bb:b4:da:dc:
                    b7:4c:f7:9b:b9:ec:e7:bb:86:51:45:55:fc:a5:c7:
                    8c:3c:5f:96:a6:3f:cd:1b:fa:25:5f:99:1c:f5:c3:
                    44:32:60:e3:b6:5d:14:f6:dc:c8:10:d6:cb:e8:66:
                    ba:f7:2f:0d:42:f7:1f:09:11:8c:1b:11:f8:14:b0:
                    0a:70:5b:01:80:2a:ce:a5:1f:00:cf:55:b8:e1:92:
                    80:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:7F:A1:69:25:1E:D0:5B:8E:4B:0D:87:81:CC:F9:58:83:E1:84:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5a6552e0-4646-325f-a4e9-a24518ba66bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.91.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:93:3c:4d:5e:6f:86:68:d5:c0:4e:96:af:dd:9a:2d:33:97:
         04:0c:b1:ba:84:cd:15:b4:56:c2:ad:17:02:c1:a5:41:b4:24:
         bf:bb:e1:5c:3e:70:67:8d:76:ad:f8:1a:e4:5f:10:b0:91:67:
         42:7f:04:c0:3b:53:2a:cd:74:ef:2a:46:02:a5:78:dc:71:b8:
         af:af:86:d6:a0:ee:10:5a:79:93:39:ec:ee:12:47:80:ef:00:
         10:6e:a2:e9:5e:b9:c0:69:62:af:3c:4b:70:2c:37:97:62:30:
         2c:39:5c:2d:c8:e0:38:7d:35:a9:6a:44:59:1b:6f:1f:ed:74:
         68:4b:ad:2a:56:ad:b4:c5:8d:52:39:c6:6f:66:93:c8:4f:20:
         ee:6f:89:e3:c8:1b:f7:f2:1e:48:2f:2f:9d:f1:68:6b:7d:70:
         d5:f7:b0:1a:59:c3:d6:31:1c:85:9d:5a:85:20:3f:b2:fa:1b:
         66:ee:14:42:56:81:25:d1:1b:a8:39:7b:ad:48:c8:34:ac:a3:
         29:81:61:64:e8:3e:f6:bc:d2:48:41:d8:9d:72:a6:e9:59:b1:
         a1:a7:9a:02:2a:b3:10:68:61:15:fc:6a:23:92:df:87:24:a9:
         06:89:02:8f:f7:0f:74:20:ee:45:ad:51:c7:e5:b6:14:e0:71:
         3e:9b:61:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:43:09 2025 by rpki-client