Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8b794a88-29d1-3a9b-b2b7-ba20c3f095ba.roa
File:                     8b794a88-29d1-3a9b-b2b7-ba20c3f095ba.roa (raw, json)
Hash identifier:          4cOZ6UCzdzb/bXHv+nWWpopEb3+8XQg7iLpmSutfRjk=
Subject key identifier:   F8:21:DF:D1:8C:77:07:88:16:FD:F4:F7:7D:B5:B1:B2:1B:C4:B6:E2
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584909E694DAD09346DF27BDF860
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8b794a88-29d1-3a9b-b2b7-ba20c3f095ba.roa
Signing time:             Sat 01 Mar 2025 02:00:39 +0000
ROA not before:           Sat 01 Mar 2025 02:00:39 +0000
ROA not after:            Fri 30 May 2025 01:00:39 +0000
asID:                     398885
IP address blocks:        66.160.185.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:09:e6:94:da:d0:93:46:df:27:bd:f8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar  1 02:00:39 2025 GMT
            Not After : May 30 01:00:39 2025 GMT
        Subject: CN=56d64998-30aa-424d-a3c3-c71aa5a84462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9e:50:b9:13:5c:e9:ed:23:06:20:dc:20:a4:
                    4c:0e:95:77:ef:7d:b5:33:b0:17:ca:05:4d:bd:ed:
                    a1:c3:61:9e:dc:94:37:73:ad:89:09:62:e8:f8:d6:
                    f5:dd:9d:d2:9d:42:8e:3d:c7:75:6f:07:ad:fa:ca:
                    97:34:de:be:30:39:a0:51:8d:36:0f:ab:e4:8a:65:
                    81:f2:b2:9b:82:6b:32:61:bc:2b:ea:48:07:24:01:
                    8a:8c:eb:77:cc:b9:be:e6:ab:f6:f7:78:76:ca:e4:
                    b7:0a:bd:be:85:10:0b:c0:c5:b5:0c:c8:a4:47:be:
                    44:07:29:24:e1:c1:d0:db:de:41:ab:20:a0:64:27:
                    92:3b:28:b1:8a:24:53:dd:d2:ad:3f:06:34:c6:62:
                    65:b4:d3:5a:10:53:7b:f6:0c:ea:33:65:0d:36:bc:
                    24:39:6e:1e:89:c0:47:87:5f:5c:af:5f:de:7b:1d:
                    ac:a3:ff:c7:66:e5:a9:fb:87:34:74:c0:0c:82:fd:
                    0f:fe:bf:3d:b7:c5:b0:c4:1a:7a:3e:b6:05:9c:68:
                    af:94:7d:26:d3:f6:09:2f:47:d4:5e:e2:7d:16:5a:
                    f1:6d:31:81:6d:aa:d6:93:7d:98:9e:11:22:80:88:
                    bb:37:e0:ac:fb:de:a2:78:6f:f4:3b:74:1a:e1:8c:
                    63:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:21:DF:D1:8C:77:07:88:16:FD:F4:F7:7D:B5:B1:B2:1B:C4:B6:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8b794a88-29d1-3a9b-b2b7-ba20c3f095ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.160.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:96:39:dc:f0:f7:cb:6d:a5:ce:b9:91:49:15:60:8c:4d:86:
         eb:39:2b:82:12:14:ae:a8:6c:bf:c4:47:2d:16:22:62:c2:2d:
         ef:ef:c6:26:9c:00:65:62:48:f1:84:d9:ed:fc:e1:a6:b0:ff:
         9d:eb:fb:cc:e8:32:a2:1b:ab:2d:dd:d3:17:7b:65:ad:22:6a:
         76:e4:97:07:55:46:28:3a:3a:e5:c7:0d:8f:f1:7c:1d:18:75:
         a2:d3:e2:24:3e:bb:8b:28:b8:aa:ee:fe:e2:af:d2:34:3b:0f:
         93:ba:6e:0f:87:cc:08:95:b9:7c:ce:52:9f:4f:b8:3c:fc:f9:
         25:55:c5:01:2f:21:7c:6c:df:6e:ba:5c:27:12:6c:07:a9:35:
         a0:8e:3c:15:0b:a5:b9:5e:87:8b:9f:15:24:a2:a3:74:3b:57:
         99:1b:ae:46:09:55:ae:6b:b5:5b:79:26:d1:fd:b4:dc:9f:66:
         08:4f:bf:48:48:11:b6:17:60:80:37:a4:f3:16:19:fa:39:66:
         e6:c9:e4:c8:3d:62:b1:a9:6c:42:d0:e7:94:aa:b9:a5:cd:51:
         52:a4:54:0d:e4:45:a5:eb:d8:98:b8:4f:b9:a9:fa:0c:aa:12:
         be:61:bf:7b:56:d6:4c:e9:a2:c9:74:65:6b:79:40:5c:bd:dc:
         2a:2c:48:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:56:49 2025 by rpki-client