Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/65485b9e-0107-3a09-ad0a-a5f6be081648.roa
File:                     65485b9e-0107-3a09-ad0a-a5f6be081648.roa (raw, json)
Hash identifier:          g4pmuijptoI4uJX4URUG3bdnTdzB6i8x36hPFVZEYkw=
Subject key identifier:   C3:07:F7:83:DB:E5:B8:F5:A1:9C:88:4D:D4:EC:1A:EF:E5:B5:06:92
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F43285848A830B33CFB9408CB72149E00
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/65485b9e-0107-3a09-ad0a-a5f6be081648.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     203724
IP address blocks:        161.69.66.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:b3:3c:fb:94:08:cb:72:14:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=8829d30c-86d7-4b89-8921-9ad6176bab07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:15:90:90:d3:36:ac:53:db:c4:71:f8:20:6c:
                    49:81:4f:d8:0b:78:0d:3b:09:86:45:96:31:95:f3:
                    2d:fd:9d:d8:6a:3f:dd:bb:0c:a9:10:65:cb:16:db:
                    cf:8b:8a:8b:74:3f:dc:90:b7:f0:d4:03:60:0f:27:
                    05:23:07:a4:98:79:92:11:85:41:62:bd:1d:af:12:
                    0c:4c:b3:fd:d1:c7:08:72:17:cc:9f:26:8c:b8:cf:
                    09:37:a8:8a:39:41:bd:cf:e8:7f:55:ed:bf:ff:26:
                    55:b1:f0:03:dd:7c:9f:0a:a5:56:bd:4f:7a:74:18:
                    33:24:28:bc:68:d2:f1:31:69:7d:1f:e3:37:6f:34:
                    92:3a:db:57:cd:68:39:da:41:77:5c:df:bd:af:1f:
                    8f:2a:15:34:3f:4e:ad:e4:38:45:0a:9f:36:0d:e4:
                    04:cb:0e:f2:79:b3:64:6b:b4:8b:e7:94:54:74:98:
                    c7:cd:68:c5:c3:df:c9:52:94:a3:c7:c2:19:cd:74:
                    c5:af:0f:62:9c:da:28:7f:ff:20:d8:61:15:8a:b7:
                    cb:01:a7:6d:11:c0:3a:33:76:9c:dd:96:f2:8a:e4:
                    18:0f:e0:de:a7:69:16:7a:64:96:d3:77:ce:f0:74:
                    15:cb:5e:aa:d0:5b:53:e1:95:af:6f:fd:84:97:22:
                    d1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:07:F7:83:DB:E5:B8:F5:A1:9C:88:4D:D4:EC:1A:EF:E5:B5:06:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/65485b9e-0107-3a09-ad0a-a5f6be081648.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:fe:06:8d:97:73:fb:b7:7e:23:9c:44:e5:6e:f8:2d:d6:ec:
         73:73:e3:59:77:9c:c9:91:08:75:3a:e7:e4:fb:08:27:74:31:
         14:fa:1a:20:68:90:03:d0:d0:7b:17:67:f5:10:28:fa:5c:87:
         6c:05:29:f7:55:1d:00:8f:d1:6c:8c:b8:03:25:5b:a9:4b:38:
         5b:08:b5:d8:56:fb:21:40:94:99:72:7c:47:9b:57:19:d6:7b:
         64:cb:c6:40:04:d2:d6:1b:d5:f6:16:8f:35:ee:5f:46:e9:f3:
         44:4f:7b:5e:89:80:27:ff:d1:18:83:c3:b4:14:5f:49:b1:2b:
         f9:36:1d:ac:8b:2c:d9:47:49:32:d1:57:67:c3:cb:f5:48:62:
         67:0b:84:45:90:78:09:ed:26:29:64:c0:88:e6:bf:f2:b1:a9:
         84:bc:c7:82:ce:bd:04:16:c3:68:de:c2:da:17:34:49:90:78:
         b4:c0:84:d8:79:24:00:a5:62:70:2c:99:71:57:27:c0:3d:b3:
         53:30:a4:8f:75:8d:96:0b:8f:1d:62:0e:55:c0:ad:79:8d:ac:
         2e:de:fd:14:7c:43:57:85:e0:7e:85:21:9f:f8:79:5d:94:59:
         79:e5:09:ad:d5:fc:81:56:99:fd:63:5d:e9:d1:86:45:93:fa:
         ce:81:60:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:12:49 2025 by rpki-client