Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/181b294a-20d3-3da2-a4de-00045098b977.roa
File:                     181b294a-20d3-3da2-a4de-00045098b977.roa (raw, json)
Hash identifier:          boClvUW5LeCx/Nn7Fqe6Si6ARtpsbpsm72vAm4bSGn8=
Subject key identifier:   38:30:52:9E:A1:C0:59:AC:1C:A2:94:84:E2:4C:CE:D7:A0:CC:14:17
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143F1A9BC8015BC5B5D95F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/181b294a-20d3-3da2-a4de-00045098b977.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33668
IP address blocks:        68.34.28.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3f:1a:9b:c8:01:5b:c5:b5:d9:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=466968f1-a400-43b1-826d-d4d2eb369de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0c:03:5a:0a:fc:d7:21:cd:9e:b5:a7:6c:99:
                    25:1d:65:a7:fc:8b:e0:a9:b4:22:80:47:1a:05:2b:
                    3a:0c:3a:5e:dd:62:01:58:09:27:ad:71:1f:bb:43:
                    ac:4d:51:83:fc:26:e9:cf:c6:f4:86:71:a3:fd:bc:
                    57:b4:05:99:25:bf:76:56:d8:4e:63:e2:e4:7b:94:
                    9b:0b:fb:79:93:f2:27:af:bd:04:b7:25:fc:4b:c5:
                    ab:02:03:dd:02:c6:e2:f0:47:92:4b:6c:50:09:f3:
                    29:ab:e6:44:55:6e:63:14:22:d3:90:91:88:9a:6d:
                    4a:d6:64:ad:5f:90:4d:f6:06:4d:9c:71:cf:56:b1:
                    1b:82:e7:b9:fd:52:35:ea:78:43:24:71:5a:b6:80:
                    21:cd:70:4e:bd:41:38:a9:dc:67:23:17:0e:c9:79:
                    34:a0:a9:ee:0a:f2:61:d4:fb:db:26:39:6a:5e:80:
                    36:a5:10:fd:10:56:a2:df:4a:4d:44:12:e1:1d:14:
                    d9:50:d4:1b:52:ff:9c:83:45:fa:a7:67:a8:ea:35:
                    08:d0:0b:44:69:8e:84:19:ac:89:f8:0c:0e:09:ee:
                    71:fa:92:b4:2d:5e:b4:df:fe:c0:57:b5:bc:cb:85:
                    5b:0e:00:eb:79:49:e5:42:93:89:73:2d:0e:ae:0d:
                    dd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:30:52:9E:A1:C0:59:AC:1C:A2:94:84:E2:4C:CE:D7:A0:CC:14:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/181b294a-20d3-3da2-a4de-00045098b977.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.34.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:19:be:4c:01:61:3e:36:20:db:20:08:b2:b0:7e:2a:ed:54:
         c8:16:eb:04:b9:ec:13:21:a6:72:51:e0:2d:46:4f:69:e6:3b:
         e8:06:f9:5f:da:2b:d1:b5:ef:e1:1a:82:63:ca:24:94:4c:7a:
         76:4e:7a:59:0e:96:f3:1a:3b:21:10:62:6e:0d:04:61:77:05:
         57:21:0f:b7:88:82:8d:d2:49:d4:dc:2e:f2:76:00:3d:45:7d:
         62:87:b3:00:f9:e3:17:59:cf:37:6c:d0:d3:0e:4d:aa:ba:e9:
         8d:e0:f0:64:04:3c:8f:c6:ad:9b:ec:29:7d:a3:a5:bc:19:a9:
         60:b4:5c:ef:76:3a:2a:d2:40:0f:b4:b4:ce:a8:a8:45:d7:a7:
         68:6c:92:31:eb:c9:c9:c5:dd:30:19:08:6d:e3:93:f3:f4:e4:
         39:e8:42:46:7c:6b:26:f4:04:89:04:fa:6f:2b:bb:5b:ff:2c:
         3c:33:4a:c3:fd:5a:1d:5f:ac:c2:b9:55:3a:23:5e:64:3a:e4:
         47:25:0f:87:82:df:e1:bc:59:41:90:4b:4c:fb:12:a9:13:8d:
         33:74:ed:dc:5a:ea:ef:58:1f:fd:5f:43:dd:95:51:a4:06:66:
         a5:09:7f:11:89:94:0b:73:91:6c:cb:a3:b8:eb:f7:90:43:56:
         d2:4a:91:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:00:21 2025 by rpki-client