Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2c53b348-0209-3f66-866a-b32152c4895b.roa
File:                     2c53b348-0209-3f66-866a-b32152c4895b.roa (raw, json)
Hash identifier:          gaOb1FeFu/BnRIlorQdl7jo8knsmB9oFTQOAvxo0opg=
Subject key identifier:   C1:DD:EA:3F:B1:89:61:EA:E7:21:C0:15:02:C0:44:99:53:FD:E4:B2
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584965E97AEEE6540F4DB79C5FE0
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2c53b348-0209-3f66-866a-b32152c4895b.roa
Signing time:             Thu 03 Apr 2025 01:00:46 +0000
ROA not before:           Thu 03 Apr 2025 01:00:46 +0000
ROA not after:            Wed 02 Jul 2025 01:00:46 +0000
asID:                     14711
IP address blocks:        66.103.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:e9:7a:ee:e6:54:0f:4d:b7:9c:5f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Apr  3 01:00:46 2025 GMT
            Not After : Jul  2 01:00:46 2025 GMT
        Subject: CN=c0a30e90-66cf-497a-986d-b2b9c29bf34b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:53:87:1f:9e:7a:5a:41:37:11:3f:2a:ef:87:
                    82:9f:9f:3c:a6:44:af:5f:23:ce:c8:90:43:7e:3a:
                    aa:75:4c:d6:76:ca:96:da:9b:cc:80:38:6c:66:47:
                    b8:80:2f:05:3e:77:b9:78:82:74:c9:bb:fa:35:14:
                    4b:c1:9c:2d:ab:16:83:d0:cd:e1:c9:05:af:b5:af:
                    c0:88:dc:04:20:5e:bd:c3:05:e8:c3:b6:1a:e6:4d:
                    8c:12:25:ba:14:57:9a:bb:a7:46:a8:ab:92:16:42:
                    19:75:3f:18:0d:6b:d4:d1:69:d5:8e:4c:fa:a8:e5:
                    e5:56:72:af:a0:1e:dc:57:f8:30:eb:8b:6e:e1:39:
                    f9:65:fc:d2:16:13:dc:de:2c:c8:10:48:69:ca:0b:
                    91:82:72:1f:74:a8:64:e9:b6:ad:72:d7:2a:83:98:
                    20:7e:c9:4f:af:db:43:d5:24:ed:18:d9:c7:e1:85:
                    22:6a:8c:ea:70:cf:4b:2e:70:3f:03:37:f8:d3:50:
                    40:47:00:15:c7:ae:cc:06:89:47:98:7e:f1:59:3e:
                    9f:c3:df:3e:e9:69:d5:35:d9:7c:69:9d:d2:23:3a:
                    6f:8b:40:92:c2:fb:1d:fb:e5:5b:94:a2:c3:90:c9:
                    54:35:8a:ee:19:0c:32:32:76:81:1e:da:34:f8:0b:
                    27:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:DD:EA:3F:B1:89:61:EA:E7:21:C0:15:02:C0:44:99:53:FD:E4:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2c53b348-0209-3f66-866a-b32152c4895b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.103.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:24:42:9a:9f:c3:57:a0:b1:3d:ff:8a:2d:cb:ba:45:31:2c:
         7e:f5:fa:2a:5e:fb:4a:e7:80:09:42:e5:be:1f:1b:39:c8:5a:
         f5:c8:65:53:c9:a6:ac:0f:8b:0b:6a:d1:c6:c7:f5:f2:0e:7c:
         1e:9a:05:d6:de:59:6d:a6:1f:fc:b4:b0:e1:3c:ea:32:a8:59:
         f5:77:bd:75:25:01:2b:85:83:96:53:43:17:1c:6a:8a:31:e1:
         26:0d:fe:74:c2:be:ef:25:aa:e6:5f:53:e5:d6:6f:e5:72:0f:
         9c:b1:75:a7:38:23:e4:f1:0f:16:95:7e:a0:82:16:a7:04:3a:
         d4:df:3f:a6:6b:09:94:1b:8e:00:1a:9d:b9:b3:72:a0:4c:79:
         53:53:c3:5c:a0:3a:ca:b5:49:6f:ab:f5:32:77:49:75:77:da:
         f3:d7:bb:59:56:74:88:59:81:5d:43:7d:90:55:e6:7c:ba:74:
         23:cd:68:af:bb:22:df:1c:68:d4:59:64:65:5f:41:60:60:97:
         b9:b2:0a:a3:10:8c:b5:a8:55:bc:db:90:bf:ff:c5:a7:31:8f:
         8e:1d:2a:5b:00:e7:d5:6f:2f:eb:eb:cf:c6:0f:97:9f:45:d6:
         e7:c9:67:85:de:7d:a0:64:55:cb:9d:d4:53:70:76:12:02:98:
         e6:56:65:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:35 2025 by rpki-client on console.sobornost.net