Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/69c02369-8473-3172-b3c3-8caf437637dd.roa
File:                     69c02369-8473-3172-b3c3-8caf437637dd.roa (raw, json)
Hash identifier:          VLWgJ21XC85W7Nko8FrIPmL/xqaTKhH1DsbiUoXg9fU=
Subject key identifier:   F9:77:0F:F9:5E:70:9F:4B:6B:19:3E:62:73:AA:9C:AF:DB:10:C4:0F
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F43285848DA70F870A6F4604380C36CE0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/69c02369-8473-3172-b3c3-8caf437637dd.roa
Signing time:             Wed 12 Feb 2025 02:00:39 +0000
ROA not before:           Wed 12 Feb 2025 02:00:39 +0000
ROA not after:            Tue 13 May 2025 01:00:39 +0000
asID:                     174
IP address blocks:        66.71.224.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:da:70:f8:70:a6:f4:60:43:80:c3:6c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Feb 12 02:00:39 2025 GMT
            Not After : May 13 01:00:39 2025 GMT
        Subject: CN=65b3332c-901b-42af-b6da-96031e887cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:51:46:e4:2a:e1:7e:60:90:1b:d5:e9:d4:26:
                    5b:a7:ff:6e:b0:5b:dc:eb:aa:ed:01:0d:ef:16:bc:
                    62:ae:cb:82:e5:09:6d:3b:53:a9:98:83:f7:e1:b2:
                    85:a0:41:97:2f:a8:74:1b:8a:37:67:73:e4:bb:51:
                    9f:08:ec:23:0f:16:87:8d:48:01:3f:74:5b:1d:11:
                    1d:ad:95:7a:f6:22:cd:4a:1a:45:18:5e:00:29:49:
                    a7:a9:c9:eb:45:eb:63:9f:bd:e8:e0:fc:2b:ee:67:
                    f1:48:ee:85:ad:4c:aa:2e:06:a7:a5:79:c2:a4:ff:
                    63:52:80:76:98:bc:2f:55:a7:9f:56:e7:29:41:2f:
                    0f:63:47:a2:3d:37:a9:b7:4c:21:e8:55:75:3a:40:
                    18:e3:67:21:33:21:33:29:13:a5:3c:58:c2:e6:e9:
                    66:dc:91:47:9a:c3:af:f9:73:9b:fa:b2:0c:8f:fb:
                    a7:a8:a8:8a:f2:78:42:0c:24:77:fc:d9:72:7d:38:
                    0a:72:b6:13:32:8e:3c:3f:3a:8b:ee:09:09:32:69:
                    5e:ae:b1:37:99:47:3e:b0:de:31:b5:43:5d:81:8a:
                    2a:01:7e:98:cd:92:02:f4:ff:47:ad:ec:6a:0a:73:
                    58:f8:66:7c:e9:3b:76:07:2d:39:49:84:b5:49:0f:
                    cf:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:77:0F:F9:5E:70:9F:4B:6B:19:3E:62:73:AA:9C:AF:DB:10:C4:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/69c02369-8473-3172-b3c3-8caf437637dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.71.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:a7:00:cf:b5:89:f3:24:65:f2:d5:d6:21:ee:21:64:8f:aa:
         ba:93:51:f8:dd:45:42:1d:5b:94:68:00:46:7a:37:37:a9:58:
         48:ac:c4:b3:36:bb:cb:0a:b7:c2:95:0c:94:67:9b:85:47:de:
         67:70:03:07:d3:4a:f9:6d:fe:e0:79:39:b5:a1:b3:62:b5:66:
         08:71:43:ab:da:7b:e2:e7:b3:96:ab:fc:95:77:58:bb:39:58:
         23:38:44:70:9c:95:df:6e:e7:d6:19:98:d2:5d:32:6f:58:36:
         01:dd:e1:cf:07:41:8c:7c:ae:53:6f:33:aa:0d:11:a6:0a:38:
         08:55:5e:87:b7:34:61:b4:a3:a7:99:99:c1:bd:c9:dd:23:f0:
         e6:3e:1d:96:75:b4:59:36:ed:18:76:3c:4e:b7:7d:00:24:37:
         e6:ae:55:0f:35:e7:fb:07:1f:1f:c9:22:78:dc:01:fe:c0:2c:
         0e:b0:81:15:3c:2c:bf:76:83:48:d5:5c:24:d1:f7:fa:db:11:
         8b:52:d4:9a:f0:be:11:b7:ef:ac:0b:a3:0b:a2:b0:2d:53:a6:
         68:6d:ac:ab:a8:76:5d:e8:67:c7:3a:6f:ab:5c:44:09:a3:02:
         91:71:c7:c3:77:b0:5c:6e:05:41:f9:23:7e:05:33:e4:9a:77:
         1f:1c:0b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:18:49 2025 by rpki-client