Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/7fab2202-8ae7-3fe8-b290-e87605fb2cb4.roa
File:                     7fab2202-8ae7-3fe8-b290-e87605fb2cb4.roa (raw, json)
Hash identifier:          LmAr1J3d+V9PpVd3OB/7z1RnfUdk8I0EINa8IhfMaY4=
Subject key identifier:   46:EF:EC:27:03:1E:30:FF:F0:75:BD:06:85:42:A6:5C:50:B4:FF:4B
Certificate issuer:       /CN=a05c180d-6db0-4307-bc39-264e11bb765c
Certificate serial:       010D0C9F432858494E2EB16ADBE478590A5D7B80
Authority key identifier: FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/7fab2202-8ae7-3fe8-b290-e87605fb2cb4.roa
Signing time:             Tue 25 Mar 2025 13:00:51 +0000
ROA not before:           Tue 25 Mar 2025 13:00:51 +0000
ROA not after:            Mon 23 Jun 2025 13:00:51 +0000
asID:                     12684
IP address blocks:        66.119.84.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4e:2e:b1:6a:db:e4:78:59:0a:5d:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a05c180d-6db0-4307-bc39-264e11bb765c
        Validity
            Not Before: Mar 25 13:00:51 2025 GMT
            Not After : Jun 23 13:00:51 2025 GMT
        Subject: CN=859adf28-88b0-4c0b-a962-e3a55c03dacb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d5:be:02:69:ac:f5:46:6d:79:f7:b3:ba:15:
                    7a:0d:e4:2f:3d:00:74:d6:3e:0c:0e:16:eb:9c:96:
                    ae:cd:83:70:fd:52:75:fe:05:d4:95:0f:60:22:c6:
                    75:35:30:ee:3b:a5:f6:8c:28:36:fa:92:f2:4f:63:
                    28:47:70:d7:38:38:ec:c3:35:ff:d6:9b:39:4a:2c:
                    94:8c:31:b1:31:b1:87:77:71:27:4a:6a:01:23:44:
                    e2:b1:06:e0:41:05:74:49:85:f8:55:58:03:a7:cd:
                    df:f4:dc:99:10:99:e3:59:f6:d8:ca:09:66:1a:e4:
                    e7:1a:3c:3a:48:62:9f:31:31:76:d2:fb:57:c8:f9:
                    1a:d9:88:89:19:97:85:8e:e7:33:a7:ae:1f:92:af:
                    a1:00:ea:79:2d:52:07:37:44:e4:f5:a8:70:c6:24:
                    97:f3:b9:a3:2e:bf:11:1e:9a:6c:e6:8d:c0:ce:b8:
                    ea:cc:e0:e9:08:68:e4:01:08:c9:b2:69:43:3f:66:
                    54:b9:ed:ab:cf:47:21:17:de:9f:ce:4f:e8:64:ed:
                    26:7b:3d:68:a1:7d:0c:4b:73:a9:d8:ee:62:a7:80:
                    77:64:cc:42:81:8a:9f:78:5b:8e:88:39:31:04:1e:
                    e4:16:0e:f9:65:9d:9f:71:c1:b3:1c:e9:1b:8d:4a:
                    9a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EF:EC:27:03:1E:30:FF:F0:75:BD:06:85:42:A6:5C:50:B4:FF:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/7fab2202-8ae7-3fe8-b290-e87605fb2cb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl

            X509v3 Authority Key Identifier:
                keyid:FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.119.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:0d:1a:57:83:98:cc:f4:92:4d:93:a2:7c:b0:7d:2c:45:69:
         0b:2e:8b:77:11:58:3e:50:c3:2a:18:6b:7a:05:86:28:17:31:
         90:f3:b2:de:ec:d8:a6:3d:74:11:58:8d:b7:3d:b9:9e:47:a3:
         9a:7b:96:f0:6e:77:c3:aa:80:4d:32:27:a1:dd:f0:6b:a3:83:
         d9:24:6e:e5:c5:5f:1b:92:db:f7:68:ae:8b:20:8f:e4:d3:bc:
         ee:6a:8d:d8:16:d8:d8:53:57:43:63:ba:d1:a6:ad:66:b7:d8:
         a7:69:ff:5c:92:a6:1b:27:27:2a:a5:d6:8e:b9:bb:ba:1d:5a:
         cd:8a:64:2f:90:45:d4:b1:9a:ab:6f:3c:0d:a8:d3:4b:fb:f6:
         76:f6:49:7a:db:8c:70:1f:dd:cc:41:44:62:f2:ce:ab:f1:e9:
         f2:54:5a:7a:56:be:16:b7:0c:61:38:3d:e2:2c:06:3d:b6:66:
         b3:ab:8f:8d:6e:94:fe:3e:be:37:ae:9c:8f:41:5a:df:6c:8c:
         a6:51:02:d8:a1:62:9a:50:fe:06:33:ad:24:28:9d:73:50:91:
         ce:f7:0b:6b:3a:6a:96:14:6d:7e:5b:96:fa:6a:35:5c:85:5c:
         07:0b:ca:e9:b9:0d:3b:9e:2f:59:a2:ae:93:40:08:fb:49:3e:
         49:27:e4:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLrFq2+R4WQpde4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTA1YzE4MGQtNmRiMC00MzA3LWJjMzktMjY0ZTExYmI3
NjVjMB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk
ODU5YWRmMjgtODhiMC00YzBiLWE5NjItZTNhNTVjMDNkYWNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9W+Amms9UZtefezuhV6DeQvPQB01j4MDhbr
nJauzYNw/VJ1/gXUlQ9gIsZ1NTDuO6X2jCg2+pLyT2MoR3DXODjswzX/1ps5SiyU
jDGxMbGHd3EnSmoBI0TisQbgQQV0SYX4VVgDp83f9NyZEJnjWfbYyglmGuTnGjw6
SGKfMTF20vtXyPka2YiJGZeFjuczp64fkq+hAOp5LVIHN0Tk9ahwxiSX87mjLr8R
Hpps5o3AzrjqzODpCGjkAQjJsmlDP2ZUue2rz0chF96fzk/oZO0mez1ooX0MS3Op
2O5ip4B3ZMxCgYqfeFuOiDkxBB7kFg75ZZ2fccGzHOkbjUqaMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEbv7CcDHjD/8HW9BoVCplxQtP9LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMDVj
MTgwZC02ZGIwLTQzMDctYmMzOS0yNjRlMTFiYjc2NWMvN2ZhYjIyMDItOGFlNy0z
ZmU4LWIyOTAtZTg3NjA1ZmIyY2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTA1YzE4MGQtNmRiMC00MzA3LWJj
MzktMjY0ZTExYmI3NjVjL2EwNWMxODBkLTZkYjAtNDMwNy1iYzM5LTI2NGUxMWJi
NzY1Yy5jcmwwHwYDVR0jBBgwFoAU+pb0gpyNY4Nb+8DqdIVg9ekxZVgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMDVjMTgwZC02ZGIwLTQzMDctYmMzOS0yNjRl
MTFiYjc2NWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQndUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH0NGleDmMz0kk2TonywfSxFaQsui3cRWD5QwyoYa3oFhigXMZDzst7s
2KY9dBFYjbc9uZ5Ho5p7lvBud8OqgE0yJ6Hd8Gujg9kkbuXFXxuS2/dorosgj+TT
vO5qjdgW2NhTV0NjutGmrWa32Kdp/1ySphsnJyql1o65u7odWs2KZC+QRdSxmqtv
PA2o00v79nb2SXrbjHAf3cxBRGLyzqvx6fJUWnpWvha3DGE4PeIsBj22ZrOrj41u
lP4+vjeunI9BWt9sjKZRAtihYppQ/gYzrSQonXNQkc73C2s6apYUbX5blvpqNVyF
XAcLyum5DTueL1mirpNACPtJPkkn5PY=
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:38:12 2025 by rpki-client