Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/2895d8b0-687a-3f45-aed1-2df64ae5fb25.roa
File:                     2895d8b0-687a-3f45-aed1-2df64ae5fb25.roa (raw, json)
Hash identifier:          tTovhf0KiO/iWpfgyWHn2qD7gM9htE/UNcyDfIYSlTM=
Subject key identifier:   F4:CB:44:41:41:1E:7C:94:83:C1:72:C7:19:2B:BD:98:C9:9B:46:9C
Certificate issuer:       /CN=0538ef3c-e342-4e27-a075-8167bc73c054
Certificate serial:       010D0C9F43285848EF6167CD98609C3036423800
Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/2895d8b0-687a-3f45-aed1-2df64ae5fb25.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     11260
IP address blocks:        66.103.32.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:67:cd:98:60:9c:30:36:42:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=e204c041-3fd5-4fcc-a673-c553505cc65e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:cf:1d:75:eb:90:8d:ab:28:82:cf:95:ae:22:
                    11:b7:e9:7f:49:c9:8e:0f:b6:f1:83:00:84:64:4f:
                    1d:be:77:57:a5:51:4c:3f:d3:6d:aa:6a:e2:b5:cf:
                    90:45:97:33:07:89:76:6e:ec:73:cb:33:30:71:28:
                    1d:85:48:ed:e0:99:c8:2f:ad:45:9b:65:c3:a3:e1:
                    93:ed:27:4b:bd:d9:c1:70:86:1a:32:21:ae:29:ed:
                    6e:44:9a:3a:37:27:52:fc:0c:4d:74:07:c9:b1:70:
                    2d:b3:c9:5f:2d:68:c8:57:fb:29:85:29:64:34:11:
                    f9:17:77:91:e8:0b:48:19:e0:95:54:12:dc:7c:98:
                    8d:bb:60:dd:ea:db:2a:7d:54:29:7a:ba:fe:62:ba:
                    21:ff:6d:58:d5:1a:93:fa:ec:c2:fd:52:1d:71:24:
                    c3:5a:8b:4f:12:f1:64:75:96:6c:29:94:61:66:81:
                    8c:f7:ca:4b:4b:70:2a:02:f0:b6:3b:c5:a9:3b:ee:
                    e9:0f:26:a7:65:93:af:02:15:46:68:b1:e0:97:59:
                    69:6b:c0:1c:14:eb:77:bf:9c:a7:ee:d5:5f:aa:ae:
                    75:30:45:5a:d0:29:c3:8c:3c:e0:e3:f4:1f:31:da:
                    c1:a1:b9:d5:27:43:81:4c:e0:d8:6a:05:b1:14:a5:
                    04:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:CB:44:41:41:1E:7C:94:83:C1:72:C7:19:2B:BD:98:C9:9B:46:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/2895d8b0-687a-3f45-aed1-2df64ae5fb25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl

            X509v3 Authority Key Identifier:
                keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.103.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:ea:ce:7b:ad:b8:eb:94:4c:95:82:07:43:04:8f:79:81:d1:
         19:e8:c9:41:28:ce:4c:fe:7d:7c:2c:ad:2c:cb:ab:69:a7:86:
         6c:df:75:26:6d:c0:cf:4c:5e:a9:d0:e3:90:ec:6e:cd:f0:ee:
         1e:03:3e:d7:f8:2b:cf:4e:12:27:84:d0:04:dd:31:da:f2:a3:
         70:67:2c:1d:84:0e:4e:a7:f7:b9:b2:f3:88:91:4c:25:28:85:
         45:71:12:86:e2:af:b6:fa:b3:c8:31:28:5e:9b:a8:0b:1e:25:
         06:a4:e1:8d:bd:fa:9f:c6:19:e3:7f:c6:da:57:33:55:98:13:
         4b:f8:f0:3d:0a:8f:d3:aa:2b:d9:a8:83:c6:ff:de:76:a8:53:
         66:83:b0:fb:23:e7:49:8d:20:25:42:36:1c:21:50:8a:0c:26:
         0b:4a:d4:0a:fc:6f:1f:ba:0c:b0:9d:08:e7:6d:bd:ed:47:ed:
         7b:15:26:57:0c:47:24:a1:32:eb:69:7b:9f:9e:25:f3:c5:dd:
         74:37:06:0b:e1:b1:d0:cd:8e:bd:01:ae:0f:3c:a2:8a:e1:ed:
         4c:db:61:e8:c6:18:6b:47:55:fc:26:5e:99:43:da:09:08:8e:
         c7:b5:d3:ec:a0:64:ea:8f:4a:51:2e:2d:68:bc:b4:72:bb:a2:
         30:5f:f3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:58:27 2025 by rpki-client