Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c66a9244-41ec-36a1-befb-bb86da26c230.roa
File:                     c66a9244-41ec-36a1-befb-bb86da26c230.roa (raw, json)
Hash identifier:          q2vDrcg7CLhH9+22Kc+MzTxWb9JmlL4fpbwqA6gnZs4=
Subject key identifier:   54:B9:53:AD:54:F5:39:54:D7:B8:29:BC:C3:95:F6:41:D1:A2:99:E7
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926BA634C85914B229C5380
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c66a9244-41ec-36a1-befb-bb86da26c230.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     394996
IP address blocks:        65.19.132.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:ba:63:4c:85:91:4b:22:9c:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=71fe4d6f-aadf-48c4-bf67-3014a4b33572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d7:57:4c:ac:06:3e:50:82:43:59:91:17:71:
                    c0:3d:0d:96:6e:0f:40:b9:09:f2:ae:be:b2:31:46:
                    2e:47:ce:de:11:ff:f2:0a:9c:2c:85:98:0c:14:35:
                    2d:43:35:f1:d0:c8:f6:ec:e0:75:01:09:85:fe:a2:
                    08:76:8d:c7:f2:43:e8:76:83:4e:7b:78:ca:65:b6:
                    42:3c:e4:07:62:88:78:49:a4:36:67:9d:ac:b4:4f:
                    6f:4e:0e:64:83:f0:01:54:c1:42:88:c9:88:63:85:
                    49:c5:47:08:71:fb:2a:6a:6f:c3:07:8d:c6:cb:9e:
                    ca:4b:aa:12:35:0e:42:eb:ca:85:58:32:da:28:04:
                    71:c8:45:c1:1c:28:23:32:55:dd:b6:b7:03:38:0f:
                    57:ad:ce:8f:5f:08:f0:80:0e:81:aa:f2:35:7b:51:
                    e5:1c:08:41:b2:e1:74:29:89:19:ec:e8:bd:73:69:
                    02:39:1e:b1:75:35:7e:b1:c5:ee:a5:d0:93:9d:f7:
                    3b:0a:67:d7:7b:29:55:e2:32:5d:95:80:c1:7c:fa:
                    a1:f6:4c:11:bc:c5:9c:4f:7f:35:df:ee:4a:ff:0f:
                    c3:32:2c:39:ef:56:ee:8d:5a:19:41:6d:af:40:47:
                    cc:da:da:9a:8c:16:f0:43:85:63:32:5e:0d:c2:e1:
                    ae:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B9:53:AD:54:F5:39:54:D7:B8:29:BC:C3:95:F6:41:D1:A2:99:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c66a9244-41ec-36a1-befb-bb86da26c230.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.19.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:33:a6:12:47:d8:e3:54:55:5a:20:5a:3d:ad:b0:55:b3:15:
         0a:bd:a3:14:f1:ab:89:de:cd:ae:b3:dc:2b:21:60:02:48:7d:
         99:82:c2:d2:d3:23:09:a9:36:f3:47:ed:f5:db:24:20:ff:5e:
         d5:8b:c0:f0:10:7f:2b:2a:5c:ff:cb:97:3a:25:6b:e1:d3:f4:
         25:c9:ae:48:b3:e8:88:ef:b0:97:1b:5c:43:9d:9e:70:35:70:
         9b:f7:b7:a8:d5:28:04:2a:52:8e:4b:3c:16:1d:c4:30:2a:04:
         0a:71:d0:36:ee:8d:7d:f6:e3:f2:00:c5:44:b4:e9:f3:87:c8:
         dd:1d:d6:7e:22:a2:bc:dd:9e:7c:70:b9:02:ae:d6:e1:29:d2:
         0f:7d:02:10:b1:fe:6b:ce:fd:d7:e4:bd:7d:76:c2:66:7e:e7:
         fe:57:46:f6:86:78:d8:41:48:43:37:fd:a5:dc:8b:0f:0f:38:
         95:8e:58:f2:a6:fb:39:89:c0:84:7c:22:53:c6:fc:98:fb:36:
         93:89:da:4e:6a:cf:0c:aa:74:7a:17:50:10:97:46:2f:9b:10:
         d3:94:33:12:9e:ae:a2:22:44:08:6e:bb:1f:51:10:60:a5:c3:
         6b:b0:18:f5:b3:11:9d:83:cf:28:1a:f6:a0:34:9d:e2:80:e5:
         40:d0:b0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:46:08 2025 by rpki-client