Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cc70c6a6-6b05-3666-be4d-a23f11e3b761.roa
File:                     cc70c6a6-6b05-3666-be4d-a23f11e3b761.roa (raw, json)
Hash identifier:          sYWXUfNUQNqg7nvNQ9vvgaqp+65+rtIrswMudQ2ui24=
Subject key identifier:   99:C1:D8:7D:94:D8:AA:65:4B:C6:56:2F:33:E8:63:44:AF:06:B8:60
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848E59BBBD5459F76EBE13A6660
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cc70c6a6-6b05-3666-be4d-a23f11e3b761.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     401152
IP address blocks:        50.114.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:bb:d5:45:9f:76:eb:e1:3a:66:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=821b144a-a38b-406d-8c3a-8e1c35d431ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fb:82:48:b4:fb:ef:41:b9:ec:86:0b:fa:a7:
                    d7:f1:7b:2e:33:7d:9a:27:07:8d:e6:87:3e:08:6a:
                    e4:8f:0a:66:17:3d:b3:03:a5:ac:3e:cd:3f:ff:70:
                    5f:36:67:b6:b4:65:d2:b6:ff:ae:cc:f1:7d:04:51:
                    9e:aa:d4:8f:d3:2b:6c:15:f2:ce:c7:aa:63:0c:aa:
                    81:7b:0f:05:7e:08:72:94:41:93:89:16:6d:be:79:
                    8c:92:e3:3c:1b:4d:2b:70:8b:a8:d3:2b:b8:76:ba:
                    44:a8:cf:76:e0:9a:f0:30:ac:86:89:24:f5:2c:40:
                    d9:10:71:d8:dd:4f:6e:5f:5f:48:fc:36:0a:d7:9b:
                    2f:7b:67:2f:d3:15:2a:b2:e4:de:3e:06:5a:42:c3:
                    34:12:8a:89:ad:48:28:49:0f:8f:41:7b:f7:5a:6f:
                    63:ca:65:ce:bd:68:b1:cb:21:ab:6e:b1:f7:e3:d3:
                    6d:ff:00:94:51:3a:ce:2b:26:0f:1e:43:ee:ae:3a:
                    66:98:c9:cc:b9:3e:33:a9:f2:15:d4:3c:63:f0:59:
                    81:1c:5f:a1:4a:87:54:78:f5:3d:14:4c:3c:40:6d:
                    41:d4:41:a8:94:f7:68:7c:38:89:6e:a8:ed:bb:da:
                    f3:dd:bc:11:6e:d0:65:b2:28:c6:62:79:ec:17:d5:
                    9f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C1:D8:7D:94:D8:AA:65:4B:C6:56:2F:33:E8:63:44:AF:06:B8:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cc70c6a6-6b05-3666-be4d-a23f11e3b761.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:73:fd:76:ae:0c:d4:27:cc:45:ba:f4:99:2e:6a:17:fb:b5:
         bc:9b:c9:ba:71:93:c6:7d:40:b2:bd:c1:85:e2:33:d4:18:8a:
         0f:58:a1:dd:d4:2c:94:00:46:85:9a:42:50:f2:ce:60:73:05:
         12:4a:22:4f:01:ac:ba:2e:23:da:05:a9:85:96:e0:30:e6:5d:
         29:65:e8:2c:a2:9e:31:19:b1:1d:b1:4b:ef:98:98:3f:86:7d:
         7d:84:79:f2:49:ee:48:0d:f0:14:c6:2e:2a:01:30:c6:a8:44:
         bb:0a:ce:72:95:f4:bf:88:0d:ed:59:b4:c1:8f:e7:22:36:9c:
         a8:91:3c:65:ea:c7:0b:3a:03:56:e3:cb:6c:14:9f:a7:c6:7c:
         c5:8a:28:60:f8:39:19:94:fe:be:ca:05:73:f2:64:9d:2f:23:
         54:3b:d3:43:7b:73:52:07:fa:99:80:8d:98:a8:a7:49:35:9e:
         35:3c:36:ed:2b:4e:81:f8:73:6e:71:78:5a:2c:ba:e4:83:74:
         ea:7b:ed:09:65:b3:79:fa:b8:4c:d9:93:f3:aa:90:4a:85:73:
         29:42:8a:1b:32:39:07:73:d6:5d:06:7e:d8:ec:22:d6:2b:69:
         d7:0c:df:80:87:90:ea:ca:ae:6a:d2:7f:f7:b5:3b:a5:5a:12:
         3b:24:05:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:25:43 2025 by rpki-client on console.sobornost.net