Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/22a52b37-56b5-3343-98d8-ac658dd9d9fa.roa
File:                     22a52b37-56b5-3343-98d8-ac658dd9d9fa.roa (raw, json)
Hash identifier:          mWqnYNT02Ep5cNT/6hFzzrYOPxWSFThGiEQC45SRef4=
Subject key identifier:   D2:99:95:4B:C0:78:94:4C:05:1E:5F:6C:13:A6:EF:C8:EA:92:EB:16
Certificate issuer:       /CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c
Certificate serial:       010D0C9F432858493A5C9FDFFF0515A38261378E
Authority key identifier: 62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/22a52b37-56b5-3343-98d8-ac658dd9d9fa.roa
Signing time:             Tue 18 Mar 2025 10:37:20 +0000
ROA not before:           Tue 18 Mar 2025 10:37:20 +0000
ROA not after:            Mon 16 Jun 2025 10:37:20 +0000
asID:                     29789
IP address blocks:        66.254.115.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3a:5c:9f:df:ff:05:15:a3:82:61:37:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c
        Validity
            Not Before: Mar 18 10:37:20 2025 GMT
            Not After : Jun 16 10:37:20 2025 GMT
        Subject: CN=284dbd46-cb6e-4136-81ae-d5fbddf57b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cd:b3:ba:f6:1d:b5:a0:86:b3:5c:5a:2a:e0:
                    b8:21:92:fc:b4:73:1e:c4:23:27:5c:57:83:19:c3:
                    11:73:63:81:55:b0:dd:15:97:41:5a:1c:0c:17:a3:
                    e7:9d:7a:8c:4a:49:d4:99:63:1a:ce:62:cf:91:66:
                    8e:87:d5:b0:87:95:f0:3e:53:0d:92:ca:aa:64:0a:
                    05:b6:64:3e:a7:72:ca:7c:63:68:9e:10:ae:14:25:
                    33:11:25:89:84:f2:07:f2:74:fd:06:2f:14:36:c8:
                    7c:89:fa:48:7b:c9:a9:24:d7:81:0e:92:f3:3b:23:
                    8a:a5:95:dd:50:ba:3e:5b:6b:bd:88:4e:96:08:4a:
                    91:b3:af:36:b3:f3:ab:a7:e1:cf:2d:44:01:ac:f9:
                    bd:2b:2c:f2:44:3a:40:5b:da:eb:b9:c3:02:a0:50:
                    f0:ec:b3:3d:23:2f:33:00:3e:78:b7:3b:fb:ab:5d:
                    90:4e:12:5f:b4:6d:e3:2f:ad:c4:bf:89:5f:e1:56:
                    dd:ca:57:8c:42:80:16:79:10:ae:0a:54:a8:48:31:
                    e4:c6:ad:4d:c0:d6:bc:ec:72:15:7c:91:a4:e8:87:
                    b3:25:20:a9:4a:b0:e9:35:3b:76:04:ad:e2:2a:7c:
                    d4:77:5e:7b:10:38:4d:76:04:fc:9c:9c:8d:9d:de:
                    c2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:99:95:4B:C0:78:94:4C:05:1E:5F:6C:13:A6:EF:C8:EA:92:EB:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/22a52b37-56b5-3343-98d8-ac658dd9d9fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl

            X509v3 Authority Key Identifier:
                keyid:62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.254.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:48:5b:de:eb:af:3d:95:db:d7:2c:12:51:67:1c:a7:1f:99:
         e8:61:0d:bd:21:dc:6c:95:48:76:19:93:68:79:8b:a8:7a:87:
         9e:b7:e3:30:95:a4:1f:9c:89:d2:a7:de:c3:3d:f3:8a:84:01:
         06:4f:f7:7d:78:df:53:f7:d8:68:99:10:7e:54:60:64:40:14:
         f4:9f:01:92:77:11:bc:47:9d:e6:88:8e:85:a8:eb:ae:f0:f0:
         97:13:8a:af:d1:66:d2:97:ee:f4:58:f0:e8:95:90:01:67:7f:
         c5:f5:53:d2:b7:6a:2e:07:5c:77:02:43:79:2e:f1:f1:9c:ae:
         9c:f9:28:f1:a8:d2:93:d3:d5:ad:53:2f:e5:36:b8:91:6d:e9:
         8d:50:a6:47:e8:10:e5:bf:1a:d7:74:e6:32:40:29:a4:b7:64:
         15:f4:e4:31:b4:a3:ad:58:90:a5:0c:2a:93:01:f6:76:4a:5c:
         d2:3d:ba:90:a1:a1:ef:4a:1a:12:5c:16:68:ab:2c:91:95:65:
         1e:f7:30:6a:3b:c6:0e:d6:55:0d:be:bb:7a:7d:5a:c5:6c:f6:
         06:23:29:68:a9:66:c5:9e:fb:6c:87:84:21:32:79:0c:94:6d:
         ad:26:c9:ba:ae:67:57:56:53:ea:13:3f:5d:57:7d:4c:d3:bd:
         bd:23:b6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----