Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/c67e4875-b105-3ca8-8cee-f734076c4a54.roa
File:                     c67e4875-b105-3ca8-8cee-f734076c4a54.roa (raw, json)
Hash identifier:          MYXhbZ6LZ7qXveV+v8IeiNEcPiDWWFfgDDBOT3Zg/go=
Subject key identifier:   C6:9A:98:B8:98:FF:35:DC:6F:A2:4D:2C:DD:35:98:78:50:F5:79:E3
Certificate issuer:       /CN=6c86d366-9f08-4852-b060-53c54ef6dda0
Certificate serial:       010D0C9F4328584883E5C3C273E61BC73F7AC340
Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/c67e4875-b105-3ca8-8cee-f734076c4a54.roa
Signing time:             Sun 12 Jan 2025 02:00:38 +0000
ROA not before:           Sun 12 Jan 2025 02:00:38 +0000
ROA not after:            Sat 12 Apr 2025 01:00:38 +0000
asID:                     16276
IP address blocks:        164.153.166.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:83:e5:c3:c2:73:e6:1b:c7:3f:7a:c3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0
        Validity
            Not Before: Jan 12 02:00:38 2025 GMT
            Not After : Apr 12 01:00:38 2025 GMT
        Subject: CN=45fd43e6-1839-42c7-8140-bd0cd8235c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b2:56:b0:8e:bd:d4:27:4c:ae:b3:4a:90:8b:
                    79:f7:f7:ff:a2:c3:ff:19:9a:6d:bc:d0:76:67:e8:
                    b4:c9:fc:58:43:5c:5c:54:d6:62:7f:ef:4d:ae:f9:
                    71:80:a1:a5:22:66:0b:6b:92:07:31:5f:dc:5c:a8:
                    90:03:e0:e6:dc:66:24:5d:13:80:b3:79:ee:3e:c4:
                    3d:21:a4:4b:a0:23:18:91:aa:f6:9f:a8:7f:6f:52:
                    d5:08:a2:20:3f:76:41:97:1e:58:57:a0:b9:60:e2:
                    86:1a:f4:cd:7e:04:e9:d1:50:ca:45:fc:53:46:57:
                    45:e3:6f:70:fc:ca:e4:ca:10:df:04:93:c9:a3:d7:
                    0b:52:d0:bf:d5:5d:4a:b5:83:8b:b3:38:37:ce:a2:
                    97:31:44:70:0d:d3:9a:50:a2:ef:88:d0:49:0b:33:
                    97:00:b5:c2:1b:97:1a:a7:ff:5b:ad:8f:25:de:a3:
                    7f:45:21:de:7a:fb:a0:fb:ad:32:22:fd:6e:8b:0f:
                    34:73:bb:65:35:d1:ca:5d:17:80:a7:7f:7d:b2:b0:
                    d9:fe:6e:e9:6a:5e:34:61:02:64:5b:32:b5:50:8a:
                    3a:cd:b8:7d:27:56:e3:3f:02:49:45:f4:ff:ff:ad:
                    13:5f:30:5a:22:b4:fb:b6:c6:4d:52:45:48:83:2a:
                    13:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9A:98:B8:98:FF:35:DC:6F:A2:4D:2C:DD:35:98:78:50:F5:79:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/c67e4875-b105-3ca8-8cee-f734076c4a54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl

            X509v3 Authority Key Identifier:
                keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.153.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:15:e6:73:0c:ac:85:d2:d9:98:81:1e:8b:6d:de:ca:49:d4:
         8c:27:0f:03:03:ba:97:8d:38:a9:20:49:2d:f1:78:fa:06:4f:
         25:2f:c8:39:8f:4e:42:93:5d:28:8e:ce:4a:1f:59:87:11:51:
         22:f1:cc:9e:76:b7:1a:fb:16:1a:a3:a7:a0:d0:ec:4b:c3:74:
         cc:2e:b4:2e:cc:ce:56:60:bb:97:f6:3f:e5:3d:7e:87:70:42:
         bd:2a:ef:c7:da:13:b4:e1:f9:ca:0d:83:15:6f:57:d1:ee:fd:
         96:83:ad:47:0c:58:bd:18:f5:60:67:42:a2:45:50:76:c0:19:
         de:8b:e9:b6:96:b5:a9:01:fe:c2:77:5d:79:de:2d:0c:89:13:
         3b:a8:74:8e:1d:56:b2:85:e9:a9:93:d9:10:0d:67:23:5f:80:
         75:70:bf:c8:ef:90:b9:6a:9d:cd:2e:37:df:3d:e7:d7:88:f6:
         d3:33:50:53:26:77:b8:f7:62:f8:de:e7:53:7d:07:e5:57:b7:
         01:1a:2b:3d:45:ec:0a:af:fc:8f:05:a2:bd:34:de:76:c5:c3:
         5a:42:5a:a9:c6:4d:f7:ca:ff:f1:7b:23:e9:b4:24:30:14:0b:
         20:bb:5e:aa:cc:db:4b:a6:5a:8f:fa:a1:4e:7c:87:09:6a:49:
         21:44:99:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:06:53 2025 by rpki-client