Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5039a8fc-8c7b-3dc8-a245-8d174192829f.roa
File:                     5039a8fc-8c7b-3dc8-a245-8d174192829f.roa (raw, json)
Hash identifier:          xPB4Q/u/uS0Hf1LP9y9PiUPtVF9Kx4VgvyncRfsuSBE=
Subject key identifier:   D1:DD:4D:33:A8:1D:46:4A:5A:9E:4E:90:52:2E:70:F4:FE:34:23:5F
Certificate issuer:       /CN=5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8
Certificate serial:       010D0C9F4328584954A6DDB6AE7B3D5B43A4B080
Authority key identifier: 92:9F:B9:15:00:7A:DA:95:56:D3:15:81:73:8D:42:02:1C:CA:3A:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5039a8fc-8c7b-3dc8-a245-8d174192829f.roa
Signing time:             Thu 27 Mar 2025 20:37:56 +0000
ROA not before:           Thu 27 Mar 2025 20:37:56 +0000
ROA not after:            Wed 25 Jun 2025 20:37:56 +0000
asID:                     25826
IP address blocks:        66.97.23.248/29 maxlen: 29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:54:a6:dd:b6:ae:7b:3d:5b:43:a4:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8
        Validity
            Not Before: Mar 27 20:37:56 2025 GMT
            Not After : Jun 25 20:37:56 2025 GMT
        Subject: CN=d6bf0bad-6224-4edc-834a-0151ca887fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:70:8a:88:0a:02:6b:95:71:7c:34:dc:58:4d:
                    44:66:c4:5d:c4:2e:fc:4e:a5:1c:79:0b:ec:c0:4e:
                    7b:79:ec:63:39:a4:2b:f8:b5:7b:97:1c:a4:2e:1e:
                    49:15:42:30:9c:10:3d:f9:f1:77:03:66:32:52:76:
                    64:5f:7f:3f:03:63:c0:5c:7a:f2:b4:fc:de:48:25:
                    57:67:1c:d1:66:3c:b7:34:f1:f3:21:94:1a:74:9c:
                    23:49:d6:30:16:29:63:37:96:5f:fb:8d:8a:2e:5d:
                    7c:f4:ef:82:b7:ed:c3:4d:0e:08:8f:9d:28:af:1b:
                    dc:7a:61:d1:18:89:ef:1a:ca:89:92:8d:51:cf:8c:
                    43:15:e6:1d:64:c8:f3:f5:87:11:15:5d:be:c1:a5:
                    c7:b7:b9:a3:10:83:16:8f:6e:dd:ca:fa:68:62:98:
                    7d:c3:ba:cb:84:46:a5:f1:de:ba:fc:28:14:1e:af:
                    f0:10:4a:28:0c:0d:ca:16:c1:d5:68:da:db:da:46:
                    14:12:06:26:03:f0:a1:10:74:32:b9:47:75:85:19:
                    51:22:19:d8:05:76:ff:5f:10:33:32:4e:ac:e5:b1:
                    4d:8a:9f:d3:5d:5b:8b:56:98:c0:43:eb:be:6c:4f:
                    d2:af:49:56:44:0f:6d:19:4c:e4:10:7a:be:04:c4:
                    7e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DD:4D:33:A8:1D:46:4A:5A:9E:4E:90:52:2E:70:F4:FE:34:23:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5039a8fc-8c7b-3dc8-a245-8d174192829f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.crl

            X509v3 Authority Key Identifier:
                keyid:92:9F:B9:15:00:7A:DA:95:56:D3:15:81:73:8D:42:02:1C:CA:3A:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.97.23.248/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:bd:2a:5a:2b:17:69:14:c0:5e:83:93:c2:b1:9b:b8:39:a8:
         51:37:41:87:29:11:15:e1:cf:37:e8:57:43:37:39:6a:85:ff:
         b9:28:d5:7b:44:2a:fd:95:2c:bd:09:48:e8:88:24:cd:90:8c:
         1b:d6:83:07:d3:e9:63:80:e3:53:30:03:dd:63:97:1b:50:41:
         4a:87:5c:4f:86:b3:fe:68:77:9d:89:41:fb:9b:35:17:b9:82:
         93:fb:f3:ac:ea:8e:ff:5c:1e:b4:7d:fe:33:6a:72:03:2e:a4:
         78:55:24:00:6c:26:be:91:aa:e3:30:8b:87:2a:ed:c2:04:10:
         5d:d6:51:17:be:63:08:64:67:ae:df:9c:1d:7c:f5:97:a7:77:
         a5:91:7e:74:1d:ca:61:e0:bd:96:81:1e:5f:7a:c4:2c:39:9c:
         9d:ca:46:35:04:59:ae:ad:ea:aa:e6:a9:f1:46:7b:8e:15:21:
         b4:f5:dd:7e:08:c7:39:52:ce:42:6b:db:47:76:e9:86:f9:b0:
         df:fe:8a:33:56:e7:be:99:27:26:3c:7b:ec:2c:12:59:67:c9:
         70:5c:16:b2:8f:c9:0b:30:07:3d:60:66:d6:7b:ae:ed:88:4d:
         e6:32:a5:0d:50:9b:85:b2:5b:76:ce:55:91:ef:48:77:e4:f8:
         80:74:a1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:17:43 2025 by rpki-client