Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/c66f8dab-484a-3cbe-8820-e423a3150bdf.roa
File:                     c66f8dab-484a-3cbe-8820-e423a3150bdf.roa (raw, json)
Hash identifier:          V/CZ0mmRIQhVNL8cc7td0W+k9pO6oD9Akn67jvb84iw=
Subject key identifier:   D6:32:2D:87:22:C6:78:EF:C6:F8:E0:9D:C0:E8:0D:AD:03:2B:F8:69
Certificate issuer:       /CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c
Certificate serial:       010D0C9F4328584940D3A7E4E3DAD23213123880
Authority key identifier: 62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/c66f8dab-484a-3cbe-8820-e423a3150bdf.roa
Signing time:             Thu 20 Mar 2025 18:12:01 +0000
ROA not before:           Thu 20 Mar 2025 18:12:01 +0000
ROA not after:            Wed 18 Jun 2025 18:12:01 +0000
asID:                     29789
IP address blocks:        66.254.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:d3:a7:e4:e3:da:d2:32:13:12:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c
        Validity
            Not Before: Mar 20 18:12:01 2025 GMT
            Not After : Jun 18 18:12:01 2025 GMT
        Subject: CN=d7e978de-f059-4d06-9fab-a9b019bef7e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f2:78:5b:dc:cd:3c:f8:e8:74:10:ca:4a:bc:
                    b7:3d:9c:af:28:01:5b:cb:b5:9b:4e:3f:ac:69:26:
                    7b:41:d5:3e:f7:bc:8f:c5:e2:e4:50:e4:81:1f:48:
                    b6:7a:56:9e:58:89:83:74:2d:b0:5b:98:c8:7f:76:
                    46:60:8d:4d:21:d7:98:78:3f:83:2c:21:2b:2c:52:
                    8c:d4:85:42:9d:d0:1f:16:58:5d:9f:b4:7a:b4:69:
                    18:fe:93:60:ec:7f:0b:a4:e4:78:82:75:b9:01:4a:
                    68:34:d6:50:ff:72:a2:fb:26:9f:f4:3b:76:a6:47:
                    70:22:ca:05:bb:11:c5:56:9d:b3:84:84:42:ee:6d:
                    69:17:c2:f7:52:00:0a:32:30:86:f2:31:19:66:4a:
                    d4:bc:9c:29:17:90:c1:bd:59:aa:09:9d:28:9a:f9:
                    aa:5d:8d:f7:23:4f:30:a0:45:a8:f4:ea:1e:f0:91:
                    80:17:db:eb:ed:1b:aa:f2:c0:da:de:7c:6e:51:02:
                    4e:9e:81:f5:af:e3:78:df:dd:a8:0a:ce:e8:d8:ab:
                    5f:12:ec:3b:35:d0:e9:10:4c:bc:4a:c3:2d:7a:33:
                    9c:88:b3:65:4d:30:89:eb:21:93:2a:1b:ea:4d:58:
                    66:bd:ad:b7:c6:89:bd:69:75:d6:62:a0:8c:1a:9e:
                    f8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:32:2D:87:22:C6:78:EF:C6:F8:E0:9D:C0:E8:0D:AD:03:2B:F8:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/c66f8dab-484a-3cbe-8820-e423a3150bdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl

            X509v3 Authority Key Identifier:
                keyid:62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.254.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:ff:1e:bf:1d:38:d3:ae:d8:eb:8f:17:a3:d7:0b:02:e4:98:
         42:1e:58:b7:ea:1f:27:eb:48:24:99:70:fc:78:c3:1e:b9:ce:
         07:a6:ba:a6:9d:0f:91:ff:a2:69:13:1e:e9:d4:a8:e7:3f:b0:
         26:10:b0:2a:78:d3:71:48:e2:9e:44:83:6f:ea:9d:90:dd:d1:
         aa:c8:14:4a:81:2e:c8:5b:48:99:8b:d2:93:c7:a9:34:0e:a5:
         be:86:29:fd:56:70:57:9b:7d:b2:a0:62:a5:c5:2c:85:d6:6d:
         6e:45:15:b6:61:67:6a:0b:49:42:a8:e1:21:03:a5:02:d7:39:
         5d:3e:06:4b:1e:29:48:b9:ad:cd:84:9c:3f:74:03:5c:50:46:
         ac:02:e2:66:41:52:7c:cb:c3:6d:17:31:53:1f:52:3f:53:49:
         f3:58:31:a2:1e:56:c8:e0:e0:8e:40:50:3e:40:27:1e:37:9a:
         20:f9:6f:cd:7c:aa:b4:e6:50:1b:43:7d:fd:e9:44:c8:2a:3f:
         b4:b7:a5:56:aa:dc:1b:bb:25:8b:22:48:54:30:e3:8d:9c:ab:
         6a:c0:db:60:11:7e:2a:3b:50:66:33:a5:b6:22:ec:a8:04:68:
         8d:05:23:b0:e4:6b:ba:06:ed:29:9f:ac:be:92:23:2b:ba:b7:
         35:7f:32:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----