Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5/e3338de1-c785-34b3-8676-6220676a4943.roa
File:                     e3338de1-c785-34b3-8676-6220676a4943.roa (raw, json)
Hash identifier:          RrxPA7FoAGF9QRyjfTvMw+T9MgP2+3sM4cSlJtusyjg=
Subject key identifier:   57:0B:0A:0F:D0:93:CF:79:37:98:3E:AF:68:C0:1B:ED:A7:01:C1:7E
Certificate issuer:       /CN=472a2488-5465-4b11-8a3d-5dc990d29dd5
Certificate serial:       010D0C9F43285843D63E1E20DD659F5974A66480
Authority key identifier: 4B:95:72:F2:D4:4F:1A:3F:46:68:06:7E:41:82:73:59:2C:86:C0:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5/e3338de1-c785-34b3-8676-6220676a4943.roa
Signing time:             Fri 10 Nov 2023 02:00:15 +0000
ROA not before:           Fri 10 Nov 2023 02:00:15 +0000
ROA not after:            Thu 08 Feb 2024 02:00:15 +0000
asID:                     400061
IP address blocks:        66.118.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:d6:3e:1e:20:dd:65:9f:59:74:a6:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472a2488-5465-4b11-8a3d-5dc990d29dd5
        Validity
            Not Before: Nov 10 02:00:15 2023 GMT
            Not After : Feb  8 02:00:15 2024 GMT
        Subject: CN=3f4c0c1b-0475-491e-bdbf-a194108e8553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:24:b8:60:8b:bd:33:b3:56:05:2d:6d:24:25:
                    53:b5:da:65:42:eb:eb:cb:49:69:f9:45:b0:e5:c1:
                    37:16:2a:9e:e3:7e:68:6b:bd:56:3f:46:f6:3a:43:
                    f2:68:f2:80:4f:97:e9:45:01:fb:ba:0f:a7:01:6c:
                    3b:75:67:f5:53:70:44:c6:df:1c:dd:11:03:58:0c:
                    16:7c:a2:5b:79:40:0a:e2:e0:23:ca:6f:e0:55:2c:
                    0d:76:e4:aa:a1:de:c3:ae:38:9e:87:da:11:8e:13:
                    a1:6e:66:f1:b4:47:4c:b3:8e:ce:d7:6b:f3:4b:99:
                    3f:3c:f4:64:9d:47:b4:69:f1:8d:0e:89:01:20:99:
                    c6:d4:49:8f:82:f8:f9:29:5a:f8:58:21:f7:4d:59:
                    b0:e1:ab:67:19:d0:f9:c1:b1:07:4c:17:76:8b:90:
                    10:af:a2:ff:8b:80:08:b7:24:43:92:ae:6b:8e:4a:
                    cc:00:a0:0f:ae:d0:8c:c6:5a:a4:67:59:d0:43:49:
                    1e:dd:13:34:1c:5f:be:6a:fb:3b:14:00:39:0e:8d:
                    f0:70:ea:50:f1:6e:93:70:b8:8c:b5:12:9b:73:e6:
                    bd:08:25:63:4b:36:6c:cc:6a:00:9c:b7:7e:51:46:
                    95:33:6d:1a:11:91:8d:a1:e0:4a:2f:f0:9e:4c:3f:
                    2c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:0B:0A:0F:D0:93:CF:79:37:98:3E:AF:68:C0:1B:ED:A7:01:C1:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5/e3338de1-c785-34b3-8676-6220676a4943.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5/472a2488-5465-4b11-8a3d-5dc990d29dd5.crl

            X509v3 Authority Key Identifier:
                keyid:4B:95:72:F2:D4:4F:1A:3F:46:68:06:7E:41:82:73:59:2C:86:C0:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:29:63:24:c1:54:2d:26:f4:e8:cd:92:8c:6a:d3:3f:31:82:
         de:7d:1a:e7:67:fb:a3:fe:f9:b6:62:25:4b:45:70:5f:0a:50:
         b6:0f:1e:1c:8f:f3:e7:46:9f:6e:e8:c5:2f:02:63:ac:d8:41:
         07:f6:a2:11:9b:b6:ed:a6:44:be:14:8c:cb:9a:c2:35:7d:92:
         d8:15:a4:97:93:eb:15:87:68:f7:74:6f:db:c5:77:e4:23:09:
         35:84:12:3f:7d:a9:74:10:b6:1c:5a:b6:4d:81:d3:93:05:32:
         ef:2f:96:c8:23:c4:16:3e:a2:a7:5c:90:ad:20:67:2e:10:72:
         90:d6:54:34:b5:5a:a9:e9:3e:2f:0a:92:d6:40:9c:0a:8a:83:
         db:33:fe:e4:14:d9:1e:eb:89:59:91:b6:12:e5:2c:11:cd:b1:
         70:4b:41:5b:ea:36:ce:6f:51:21:c1:1b:79:c6:f0:5e:31:66:
         47:01:c2:29:4f:2b:29:61:84:5a:27:0a:b1:80:6d:ac:94:f9:
         9f:3e:0e:f6:3f:ae:63:4e:29:6a:95:6b:67:28:b5:e6:7a:ba:
         07:c3:3f:a7:18:d3:16:7c:12:49:7f:51:cf:7b:60:00:62:ad:
         82:1b:ce:72:9e:e2:44:a1:00:26:23:d5:9e:7a:ad:74:92:5b:
         48:e0:59:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:07 2024 by rpki-client on console.sobornost.net