Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/c656a03d-64a4-38aa-b0d4-7954c1e7e076.roa
File:                     c656a03d-64a4-38aa-b0d4-7954c1e7e076.roa (raw, json)
Hash identifier:          5V/QozFhk5kmseDWv3dgcjf8Z3zQsqC6JLD3q5ePCPk=
Subject key identifier:   D3:02:97:7E:55:00:2D:3B:A5:10:54:FC:61:C9:F8:BA:74:96:ED:5D
Certificate issuer:       /CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3
Certificate serial:       010D0C9F43285848DD3BA93E982377F482166F00
Authority key identifier: E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/c656a03d-64a4-38aa-b0d4-7954c1e7e076.roa
Signing time:             Thu 13 Feb 2025 02:00:40 +0000
ROA not before:           Thu 13 Feb 2025 02:00:40 +0000
ROA not after:            Wed 14 May 2025 01:00:40 +0000
asID:                     400610
IP address blocks:        66.219.126.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:dd:3b:a9:3e:98:23:77:f4:82:16:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3
        Validity
            Not Before: Feb 13 02:00:40 2025 GMT
            Not After : May 14 01:00:40 2025 GMT
        Subject: CN=616203b8-a0ad-4b71-913b-3c6dc89e8859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:34:e4:ac:be:31:63:ad:ef:f4:76:d4:76:26:
                    19:a3:fd:18:5d:c2:82:42:81:72:73:54:44:95:b1:
                    53:cf:a9:e2:f5:4a:dc:66:c7:ca:5e:68:4d:ec:2f:
                    f3:98:9d:6c:f2:d9:61:1c:37:97:e6:2c:24:62:8c:
                    78:c1:aa:7a:15:21:13:72:5d:5f:38:c4:be:73:4e:
                    69:84:b1:48:96:6a:5f:21:58:1c:26:49:41:d6:13:
                    3b:5d:2a:63:82:32:ce:d0:e6:21:8e:2d:2b:55:63:
                    79:45:32:98:05:7d:d5:10:37:03:1f:2b:f1:79:8b:
                    57:91:0c:ae:9b:6b:05:27:54:6e:9a:9c:be:4a:52:
                    bd:d4:c3:7f:1f:cb:8c:ed:3b:f0:84:d0:5c:f1:d4:
                    09:04:a0:94:2a:dd:53:02:91:6d:7b:a0:8e:d9:09:
                    07:5c:20:86:c7:9d:21:cd:5d:99:0a:68:20:73:d9:
                    31:03:51:ad:de:5c:a4:c1:41:27:16:4c:60:7c:d5:
                    28:5d:be:82:06:20:bf:11:af:1e:17:b1:2e:cd:a5:
                    e7:39:98:22:82:4a:4e:50:52:33:af:ad:cb:d6:04:
                    f1:14:5f:7a:55:98:48:80:eb:26:1b:6c:cc:f1:d6:
                    68:5a:84:9b:b0:75:56:5d:47:69:21:28:ed:32:ce:
                    a1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:02:97:7E:55:00:2D:3B:A5:10:54:FC:61:C9:F8:BA:74:96:ED:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/c656a03d-64a4-38aa-b0d4-7954c1e7e076.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl

            X509v3 Authority Key Identifier:
                keyid:E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.219.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:5c:32:10:6d:2b:de:61:36:7d:08:0f:d5:c1:e5:16:72:7b:
         44:08:05:55:22:03:5f:32:5d:74:9d:3f:37:2f:9c:fe:56:18:
         55:0a:c0:68:32:09:05:6a:2e:7c:b4:42:d4:43:5c:56:b6:28:
         6d:44:3e:38:1b:2a:d6:af:d9:25:b7:5d:0c:df:5c:c1:ac:53:
         8e:08:ca:8d:f0:8e:0c:24:14:14:5d:ed:a7:2f:e8:05:14:12:
         ab:ba:a7:6f:70:f7:d4:58:5a:d8:a1:f8:b3:e6:ee:a7:97:fe:
         8c:fe:d4:6b:a9:45:72:b8:c7:37:dc:79:33:6c:28:b1:d2:c3:
         7a:a9:8a:5b:4a:72:cb:47:e8:5b:86:37:35:ab:07:30:16:eb:
         07:3a:01:01:e5:96:3d:4a:c3:21:0c:5f:9c:7e:59:67:68:86:
         df:9a:1b:e8:61:21:40:ef:9b:a3:bb:ec:b8:14:bb:a3:86:b4:
         dc:a2:9d:db:47:02:8f:d0:fd:80:c2:05:92:e1:e5:4e:db:6b:
         85:a9:0b:c6:ae:05:ad:81:9e:15:09:bd:ce:a9:81:4f:e7:96:
         19:fb:41:7a:d9:bb:55:78:24:53:13:82:44:07:ab:62:dd:d2:
         d2:31:6d:4b:7b:aa:50:e5:fd:cb:96:37:35:52:4a:ea:33:b1:
         9f:c8:c3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:21:58 2025 by rpki-client