Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/5a4f6c8b-ca35-3056-98c3-f88b0b1b631f.roa
File:                     5a4f6c8b-ca35-3056-98c3-f88b0b1b631f.roa (raw, json)
Hash identifier:          4jFRVhYJRnrN8zrcgmvYnT9KKKwt8oQiWNhl+lRinaU=
Subject key identifier:   15:F6:FE:C2:21:1E:8F:B4:80:EC:36:A5:01:6E:D5:2B:0F:86:93:E9
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F43285848FD56AA6E15479363AC0DFB80
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/5a4f6c8b-ca35-3056-98c3-f88b0b1b631f.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        66.22.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:aa:6e:15:47:93:63:ac:0d:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=afb576c2-f239-4ca8-afc5-73fa1421eb65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5e:0b:6c:ea:7e:cc:6f:9f:51:d4:00:f1:81:
                    f5:ae:16:77:b2:6f:11:f3:5b:93:ba:bd:ef:7a:49:
                    11:00:c5:1e:d9:33:ca:3a:ca:a8:5e:e5:2d:6b:7d:
                    b4:16:28:2d:14:f2:37:c5:fd:44:48:8c:33:28:73:
                    74:87:af:a4:26:88:a6:a6:36:4e:86:62:42:11:4f:
                    06:ac:0b:89:aa:0a:a1:a2:fd:d3:95:5d:5a:37:08:
                    77:9f:62:d5:a4:62:76:8d:ce:e8:d3:92:ed:a1:ea:
                    90:4c:dc:e0:71:05:0e:cf:51:54:e3:fb:9a:9e:d7:
                    a4:22:2d:bb:54:4b:e3:6e:e3:0a:d7:dd:b8:9c:28:
                    85:cf:f5:58:4b:60:fe:b3:80:f5:ad:83:27:16:31:
                    44:6f:3c:09:8e:0a:c5:8a:d7:60:71:3d:69:f1:52:
                    0b:80:be:63:25:c2:a2:0e:d7:d5:dd:d6:97:43:73:
                    f7:b7:69:34:d3:b4:ea:e0:44:29:26:c2:20:c8:37:
                    56:81:a6:a1:ad:1c:cb:d4:fb:bd:87:79:e6:2f:61:
                    8a:7c:6e:36:48:76:a8:a3:da:9a:62:34:6c:89:81:
                    d6:27:3a:35:2d:f6:39:bb:ce:5e:c6:50:fb:e4:18:
                    44:50:eb:03:c9:68:36:32:68:7e:cd:2d:18:9c:a4:
                    a0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F6:FE:C2:21:1E:8F:B4:80:EC:36:A5:01:6E:D5:2B:0F:86:93:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/5a4f6c8b-ca35-3056-98c3-f88b0b1b631f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.22.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:bd:9b:42:4b:fe:a6:9f:0e:e6:7a:83:d0:2c:92:e9:53:da:
         b5:01:ba:78:cd:21:4a:18:aa:46:96:b6:0f:28:7a:99:a4:8f:
         46:ed:f2:f7:34:22:4c:75:cb:05:d5:8a:67:9c:52:15:a6:53:
         2e:14:c3:9b:bf:58:cc:ca:3e:17:bb:c4:e6:b8:e7:ab:b2:32:
         b8:14:95:72:03:af:92:31:37:e5:ed:3d:99:e9:9c:6d:ae:e1:
         be:ba:49:00:79:88:1c:8b:a4:68:9f:67:0c:1d:49:64:69:02:
         cc:fe:66:79:2f:98:ef:30:e6:39:4a:18:f8:0c:9d:a1:40:70:
         b3:1f:06:ae:cf:f7:78:78:c6:ab:54:80:67:f5:c3:ae:cc:89:
         a6:f5:b3:94:95:d6:59:fa:20:10:a2:4d:81:49:82:91:2f:da:
         dc:32:98:8f:34:3e:82:60:cb:5f:4c:c9:ab:bb:94:39:af:48:
         9b:bd:14:b1:8e:80:f2:ab:fc:0b:69:a4:e4:10:48:68:ed:38:
         22:b2:d0:46:88:e5:c9:a5:11:3a:16:31:26:d1:d5:b6:9f:3d:
         e7:f2:8e:49:6f:64:01:7c:42:3a:7f:78:7f:e6:76:7d:f9:d7:
         d3:40:77:5e:75:8c:38:0f:a4:07:2b:2e:b9:9a:9e:24:b8:9d:
         c9:b8:3a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----