Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291/c73f39ea-7ec1-3285-b8bd-b03e76b825cd.roa
File:                     c73f39ea-7ec1-3285-b8bd-b03e76b825cd.roa (raw, json)
Hash identifier:          lxCNFyH0yDmPx5um+ybSbVZ3oxfiPmg30s+Fw8rWPtw=
Subject key identifier:   A3:1F:73:71:FE:76:93:D8:3A:5C:DC:7C:52:69:E2:6D:56:F2:FE:04
Certificate issuer:       /CN=c3a36226-716b-451a-a34c-4a9038599291
Certificate serial:       010D0C9F43285848CC7B943FE68C8F3403AC8F00
Authority key identifier: F7:92:28:39:E5:D4:95:39:97:0C:B8:B2:14:90:97:65:29:F1:92:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291/c73f39ea-7ec1-3285-b8bd-b03e76b825cd.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     400516
IP address blocks:        66.220.37.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:94:3f:e6:8c:8f:34:03:ac:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a36226-716b-451a-a34c-4a9038599291
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=07495928-3bc1-429d-82b7-29c31f65cf00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:75:eb:f0:b6:de:aa:94:41:e9:4d:25:7f:2b:
                    1d:83:48:94:f1:9f:a8:e3:87:3c:44:ae:a8:25:dd:
                    9d:2a:7a:3a:78:2e:a9:71:ae:c3:f5:9c:55:09:d5:
                    d1:7f:30:a2:30:94:14:57:66:21:a7:19:06:1e:7b:
                    3b:25:82:2a:13:d5:45:89:21:10:a3:8a:14:ef:92:
                    7e:42:8f:17:fb:22:f1:00:db:7d:29:fd:d4:e6:36:
                    25:2f:51:c3:26:80:b7:7c:05:dd:80:26:0d:67:d4:
                    1d:46:f1:03:8c:87:19:e2:cb:56:4a:7e:ad:0e:e3:
                    17:c0:9e:56:84:5c:68:28:e7:49:06:e8:ca:4a:38:
                    7c:1c:95:c5:40:cd:d0:7e:fb:f3:ee:2a:00:a8:d8:
                    82:df:e7:88:28:a9:50:e6:be:17:e9:bf:8a:7d:da:
                    47:1b:28:c8:f8:08:ad:5e:96:52:91:fa:0b:29:a7:
                    8c:5a:d4:bf:99:5b:93:72:bb:16:69:e0:ae:42:da:
                    a8:ca:36:1c:2e:aa:4c:ef:c0:8e:52:4f:af:59:1e:
                    6f:c4:48:0d:9a:e5:fc:ae:68:c5:0b:10:51:e3:63:
                    39:7d:b1:c4:11:c2:56:9f:04:8e:5a:4c:73:51:c6:
                    6f:02:01:36:82:91:0a:ef:0d:93:3e:d3:d0:1f:bb:
                    74:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1F:73:71:FE:76:93:D8:3A:5C:DC:7C:52:69:E2:6D:56:F2:FE:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291/c73f39ea-7ec1-3285-b8bd-b03e76b825cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291/c3a36226-716b-451a-a34c-4a9038599291.crl

            X509v3 Authority Key Identifier:
                keyid:F7:92:28:39:E5:D4:95:39:97:0C:B8:B2:14:90:97:65:29:F1:92:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.220.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:d5:80:18:69:8b:80:3e:df:8a:8f:10:23:eb:94:c5:f9:16:
         f0:8d:0f:e7:1b:f0:55:ea:4a:d2:d9:e8:ce:f8:d4:da:73:3b:
         d9:73:59:31:29:4c:1e:3b:5e:df:51:70:d0:ac:43:b5:43:cb:
         4e:c0:ba:9d:ca:f4:d6:9b:6c:0d:9a:d8:df:8e:8c:4e:7b:27:
         7a:8b:c4:e2:d2:7c:2c:10:aa:58:56:77:e5:16:b4:a5:a6:47:
         95:4b:85:2f:7b:9c:da:3a:8f:33:b2:80:95:58:9f:8e:f6:13:
         f6:9b:6c:61:0f:21:a9:16:dd:ec:87:85:cf:8a:ff:56:66:5e:
         8a:79:59:79:a6:99:1f:24:7a:b1:2e:29:e0:f2:7f:9e:f3:cf:
         a0:16:54:50:6f:71:fb:a0:97:3b:21:77:62:ce:19:ae:ac:cc:
         ba:ea:a4:12:16:9f:09:6d:62:87:da:49:5c:51:df:65:41:ad:
         f6:ee:7a:7e:1e:22:2b:b9:dd:35:d0:c6:e5:d4:47:49:e9:a1:
         78:f1:8c:f1:50:af:f8:63:19:d9:d9:c2:fc:f0:f6:3f:f1:41:
         e5:ac:2e:b0:b6:c1:5f:46:2e:f4:27:0b:8d:3b:17:52:1a:00:
         0c:22:25:23:cc:e0:60:29:27:bc:1e:8c:30:da:6a:ec:c1:38:
         dd:11:f8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:48:00 2025 by rpki-client