Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/d0ecbd7d-440c-310b-a91b-94e78857ace5.roa
File:                     d0ecbd7d-440c-310b-a91b-94e78857ace5.roa (raw, json)
Hash identifier:          PzUSuhcrFHZoiDdgnnT/jscHJoCCWJpjm8egLSZ3Zww=
Subject key identifier:   E9:63:40:8B:1B:1F:7A:DC:36:07:D9:35:41:3B:72:0B:06:63:AB:E0
Certificate issuer:       /CN=0538ef3c-e342-4e27-a075-8167bc73c054
Certificate serial:       010D0C9F43285848EF61680573F0CBABFEABB200
Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/d0ecbd7d-440c-310b-a91b-94e78857ace5.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     11260
IP address blocks:        66.206.224.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:68:05:73:f0:cb:ab:fe:ab:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=226f2607-36c5-4fb6-8da0-fd3b82b6e178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:02:fd:c1:ce:db:70:dd:7f:42:32:9f:94:b8:
                    b8:ad:ac:f7:18:30:ac:82:c0:30:0e:35:ed:e7:07:
                    66:3c:3c:f8:5a:1a:0d:6e:e1:a6:7c:f0:49:41:44:
                    35:a5:47:1e:cd:e8:ea:49:32:66:f1:f6:d2:10:c3:
                    9c:e5:bc:da:99:9c:12:84:ce:12:ec:ed:e4:84:de:
                    91:28:39:68:52:4d:2b:4b:82:df:8a:54:66:fb:e6:
                    dc:d7:ee:e4:40:31:94:2b:40:e4:a4:2f:b8:4c:aa:
                    17:ff:98:f6:7a:77:8c:95:b0:23:53:fc:59:e1:c0:
                    83:b7:4e:d6:c5:87:cd:69:f9:6f:34:94:63:a6:f2:
                    f0:38:95:6b:d9:f8:bf:9c:25:ff:c9:ff:b5:d9:1c:
                    a6:5a:3b:ca:46:aa:9b:d0:14:dc:ee:80:15:8e:e8:
                    47:eb:4c:cf:48:4f:9f:79:29:dc:f3:55:46:a2:32:
                    46:68:83:b4:de:18:71:b5:24:cb:ee:51:66:c4:d7:
                    30:b8:b0:c2:27:4d:00:44:54:8e:ac:31:35:93:e0:
                    0f:c3:cb:a6:61:6d:fa:c7:1f:d8:3b:51:f0:51:5e:
                    f7:de:03:0a:6d:30:e9:13:0f:78:5a:e3:93:65:1c:
                    d9:e7:db:54:e0:be:3c:8f:d6:22:4e:5f:d4:3e:89:
                    95:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:63:40:8B:1B:1F:7A:DC:36:07:D9:35:41:3B:72:0B:06:63:AB:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/d0ecbd7d-440c-310b-a91b-94e78857ace5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl

            X509v3 Authority Key Identifier:
                keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.206.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:a8:03:e5:5c:d0:48:06:15:d5:69:d1:29:2d:d8:b8:ae:3a:
         4c:b8:3e:9e:8e:8f:73:f7:2c:70:0b:dc:78:fe:3a:7d:3d:ac:
         9d:0b:97:59:e5:78:ff:c6:0f:9f:51:1a:b2:a1:1a:c9:52:99:
         ea:10:6e:b3:87:27:cd:ca:a1:8e:ce:18:41:dc:a1:20:17:33:
         6d:95:02:9e:57:b2:af:4c:b8:77:ab:5f:9b:76:3b:94:98:bd:
         75:eb:24:92:37:de:e4:e9:17:e6:a6:0c:28:06:3d:b3:12:f2:
         24:97:bc:96:9a:0e:1a:95:15:29:09:45:47:af:9a:20:00:c8:
         c2:23:38:b9:1c:7d:c2:aa:fe:0d:da:15:30:8a:e4:a7:1e:0e:
         c0:b5:18:3b:6f:20:6d:06:3a:fc:c8:98:29:0a:ed:47:08:20:
         07:ce:54:c1:f2:8c:1f:51:5b:3a:da:87:3b:61:90:46:9c:3a:
         03:40:be:08:77:ab:b6:38:99:65:14:f5:92:e3:fb:12:1c:58:
         a5:ae:c6:50:7c:30:59:b1:cf:26:d9:9f:98:48:5d:6d:9b:de:
         c4:9f:bf:02:6c:8e:e7:bc:29:88:f0:94:bd:c6:81:50:a3:b5:
         41:47:e5:1c:e5:86:fd:a4:cc:51:85:89:33:8b:52:9d:cc:76:
         9a:8f:af:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:56:43 2025 by rpki-client