Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/f4a74179-bca2-3eed-8890-6681deae4ca9.roa
File:                     f4a74179-bca2-3eed-8890-6681deae4ca9.roa (raw, json)
Hash identifier:          4861wXOTnzFulRai3lAJe7g6hgPjLNhzKEg9h+4r5wY=
Subject key identifier:   04:C7:32:F1:32:C8:07:D0:47:F5:8B:C6:02:13:98:29:10:E0:E6:AC
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F43285848F22C602E863A66ED63780000
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/f4a74179-bca2-3eed-8890-6681deae4ca9.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        66.198.8.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:60:2e:86:3a:66:ed:63:78:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=52c6f7b0-c108-48a6-9926-d9ef98c64afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f2:fd:61:ad:31:0f:fd:f6:f1:25:ce:97:24:
                    ae:20:e8:b4:f2:8b:b9:c0:35:8f:fe:9b:5d:c2:1b:
                    cd:58:67:b4:cc:98:26:47:aa:49:e2:a1:44:4a:6c:
                    e8:ff:7b:ff:fa:f7:ab:7e:cd:72:a9:53:0d:a6:0a:
                    9a:6a:bc:14:8c:29:92:59:49:35:39:e2:b9:cd:66:
                    c2:bf:ec:23:10:48:f1:c5:21:59:0c:dc:f6:36:61:
                    9e:f4:ba:e7:3c:bf:27:56:49:8e:90:14:17:d9:88:
                    00:cf:7c:fc:ff:c0:a9:1c:e2:20:8d:44:86:da:bb:
                    0f:b1:73:bd:35:d3:d3:20:d6:d1:01:ce:42:51:95:
                    dd:3a:d4:80:22:a2:99:97:d0:09:c3:74:72:1b:ab:
                    91:ce:a8:c5:a9:10:a3:b4:06:59:cb:91:a5:a9:91:
                    f9:f3:f0:ca:a2:05:43:5d:6d:16:7f:32:89:d9:11:
                    24:92:81:88:5e:7b:3b:b7:cd:45:e0:0a:8e:e0:ff:
                    b9:f6:89:8d:7d:90:f3:7e:02:00:ac:55:30:a1:12:
                    a2:46:9f:b8:19:84:f1:1f:56:6d:4c:bd:76:5d:0b:
                    1f:fe:64:54:ac:fc:cf:77:31:59:c5:57:5e:98:5f:
                    fe:79:c7:58:2d:ff:d5:ec:f2:4b:73:35:17:70:57:
                    f3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C7:32:F1:32:C8:07:D0:47:F5:8B:C6:02:13:98:29:10:E0:E6:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/f4a74179-bca2-3eed-8890-6681deae4ca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.198.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:74:bf:69:37:7c:b6:b1:64:ea:8f:85:cf:e5:b4:25:bf:00:
         ce:e5:0c:41:ae:23:f8:53:ee:b4:e6:9f:f1:fd:c2:30:82:b8:
         fa:5d:98:67:96:cd:d6:58:ba:29:4e:ca:df:89:7b:24:2c:82:
         54:af:a8:7c:0e:11:71:da:3b:0b:9a:60:6c:22:8d:45:7b:35:
         c0:4c:c0:d8:08:c4:22:a3:3b:52:0b:84:17:0f:16:d1:13:2f:
         b6:8a:2c:2b:58:9c:8d:e0:00:c4:24:21:38:4b:08:74:ed:46:
         8d:b4:e2:f8:b4:36:74:6a:c3:33:92:1c:33:3f:35:3d:95:ce:
         b9:fa:5c:b1:98:df:dd:2c:e7:f9:82:6b:25:f8:75:0b:89:42:
         41:47:58:77:b1:96:43:d3:37:70:4e:f3:2e:e6:46:d9:e4:0a:
         a1:67:3a:a1:ab:bc:4f:c0:47:d8:24:94:aa:6f:2e:02:79:41:
         06:6b:2e:da:9d:10:88:f9:40:ff:6d:94:c9:a6:6f:c6:0c:8d:
         79:a4:f7:b5:5f:73:a5:53:56:82:d7:d9:9b:ea:ba:5e:74:cf:
         6a:fa:a3:18:4e:8a:8c:70:f1:76:28:39:eb:25:a6:e1:58:b4:
         23:5e:1e:e2:95:77:bf:fc:93:cd:96:09:ef:75:d1:43:fd:bf:
         61:92:5c:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLGAuhjpm7WN4AAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm
NzU4MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk
NTJjNmY3YjAtYzEwOC00OGE2LTk5MjYtZDllZjk4YzY0YWZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPL9Ya0xD/328SXOlySuIOi08ou5wDWP/ptd
whvNWGe0zJgmR6pJ4qFESmzo/3v/+verfs1yqVMNpgqaarwUjCmSWUk1OeK5zWbC
v+wjEEjxxSFZDNz2NmGe9LrnPL8nVkmOkBQX2YgAz3z8/8CpHOIgjUSG2rsPsXO9
NdPTINbRAc5CUZXdOtSAIqKZl9AJw3RyG6uRzqjFqRCjtAZZy5GlqZH58/DKogVD
XW0WfzKJ2REkkoGIXns7t81F4AqO4P+59omNfZDzfgIArFUwoRKiRp+4GYTxH1Zt
TL12XQsf/mRUrPzPdzFZxVdemF/+ecdYLf/V7PJLczUXcFfzkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFATHMvEyyAfQR/WLxgITmCkQ4OasMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2
MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvZjRhNzQxNzktYmNhMi0z
ZWVkLTg4OTAtNjY4MWRlYWU0Y2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk
ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1
Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz
ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQsYIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGx0v2k3fLaxZOqPhc/ltCW/AM7lDEGuI/hT7rTmn/H9wjCCuPpdmGeW
zdZYuilOyt+JeyQsglSvqHwOEXHaOwuaYGwijUV7NcBMwNgIxCKjO1ILhBcPFtET
L7aKLCtYnI3gAMQkIThLCHTtRo204vi0NnRqwzOSHDM/NT2Vzrn6XLGY390s5/mC
ayX4dQuJQkFHWHexlkPTN3BO8y7mRtnkCqFnOqGrvE/AR9gklKpvLgJ5QQZrLtqd
EIj5QP9tlMmmb8YMjXmk97Vfc6VTVoLX2Zvqul50z2r6oxhOioxw8XYoOeslpuFY
tCNeHuKVd7/8k82WCe910UP9v2GSXFI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:07 2025 by rpki-client