Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b657b35-313f-39c0-9ee2-1cdf5082e3c9.roa
File:                     1b657b35-313f-39c0-9ee2-1cdf5082e3c9.roa (raw, json)
Hash identifier:          SBagZurJPJHlgGMA2cE8DSTaRhMrw8ifbZXC9lyvjOQ=
Subject key identifier:   F2:3E:50:E2:F3:1B:CB:49:46:F6:FB:B7:CA:16:41:9C:A1:C6:78:30
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143B649755AB17B63F4B4D40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b657b35-313f-39c0-9ee2-1cdf5082e3c9.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33668
IP address blocks:        68.58.164.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3b:64:97:55:ab:17:b6:3f:4b:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=e28007ac-341d-4942-be37-86a7784f6e96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cc:d1:1b:d7:46:b0:a0:a4:ee:2e:29:9c:18:
                    5b:e2:6c:2a:c7:4d:3f:34:83:80:4b:cb:b9:94:c1:
                    98:c9:56:c1:5d:be:b9:2d:b6:c3:c7:bb:ca:b8:77:
                    57:a0:ff:d3:47:92:53:41:75:47:54:5a:20:43:e9:
                    9c:ca:21:69:c8:74:88:e8:d4:dd:c1:fa:2e:99:62:
                    47:36:80:91:26:c4:d7:40:ba:94:8d:5e:26:ba:99:
                    50:c9:99:8d:5a:f0:42:bb:17:6b:b1:51:25:c1:67:
                    32:37:d3:2a:34:c8:79:be:3b:3a:cf:98:78:2e:5c:
                    b6:23:c0:4d:bf:a6:c4:84:b6:56:d4:65:4a:fa:d2:
                    66:10:a6:6f:c8:3a:9b:4a:3b:8d:e3:55:3d:cd:45:
                    b3:81:9d:4d:1a:6c:b0:57:72:b9:2e:ac:c2:b9:37:
                    15:31:bc:12:6a:68:fe:b8:3b:1d:8a:31:c1:5d:9e:
                    c3:e4:4f:a9:95:b9:3a:a9:7a:23:c7:94:b6:f4:e0:
                    8f:58:d5:0b:a6:ff:0e:e2:2f:cb:09:ba:a2:1b:81:
                    9c:7c:e5:e7:76:4a:25:52:5a:e0:ee:17:83:f1:71:
                    ee:ff:02:44:38:44:8a:26:f0:dc:36:2e:16:a9:02:
                    16:b7:42:55:a3:bf:70:4f:bd:dd:bd:da:c9:3c:d9:
                    f4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:3E:50:E2:F3:1B:CB:49:46:F6:FB:B7:CA:16:41:9C:A1:C6:78:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b657b35-313f-39c0-9ee2-1cdf5082e3c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.58.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:92:e0:6f:54:ba:bb:8d:85:c1:6b:82:d7:5a:38:86:6f:36:
         32:08:21:84:ad:7d:86:4c:d1:cd:5c:37:c4:37:d0:46:8b:4a:
         df:78:12:9d:12:cd:14:71:79:ab:16:e1:3c:6e:01:5f:41:cd:
         f0:c2:7b:03:74:81:89:31:38:47:b5:9a:20:f4:4e:35:20:b3:
         de:ab:2f:58:9b:60:c9:ac:2f:97:c1:14:96:59:f7:3c:f0:ab:
         17:56:31:77:95:f6:9d:81:de:f0:6b:a3:3b:73:72:5e:f3:7b:
         33:f9:09:28:3a:49:3b:7e:45:e7:b6:52:3d:72:08:c5:a6:80:
         b2:d0:58:16:86:41:e6:0d:ee:77:4d:e0:b7:b2:a1:fb:35:75:
         6f:8d:a2:7d:0e:32:34:cd:b3:58:6b:b5:0c:92:41:c0:7e:24:
         f0:85:82:e2:ba:86:87:31:34:25:17:48:a4:45:13:7d:fc:e6:
         bd:2c:b0:1f:54:e0:ad:b5:60:c2:45:c1:cf:32:d9:e1:4e:92:
         ef:b6:ec:38:5e:0b:ba:38:72:80:c3:17:d1:d6:cd:d2:55:12:
         67:0c:9c:63:33:be:9b:68:d7:68:38:a2:a3:c4:0a:36:21:71:
         6e:14:6b:44:f3:ab:2e:2b:c0:c9:63:55:31:b9:99:20:f8:63:
         13:09:ba:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUO2SXVasXtj9LTUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
ZTI4MDA3YWMtMzQxZC00OTQyLWJlMzctODZhNzc4NGY2ZTk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMzRG9dGsKCk7i4pnBhb4mwqx00/NIOAS8u5
lMGYyVbBXb65LbbDx7vKuHdXoP/TR5JTQXVHVFogQ+mcyiFpyHSI6NTdwfoumWJH
NoCRJsTXQLqUjV4muplQyZmNWvBCuxdrsVElwWcyN9MqNMh5vjs6z5h4Lly2I8BN
v6bEhLZW1GVK+tJmEKZvyDqbSjuN41U9zUWzgZ1NGmywV3K5LqzCuTcVMbwSamj+
uDsdijHBXZ7D5E+plbk6qXojx5S29OCPWNULpv8O4i/LCbqiG4GcfOXndkolUlrg
7heD8XHu/wJEOESKJvDcNi4WqQIWt0JVo79wT73dvdrJPNn07wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPI+UOLzG8tJRvb7t8oWQZyhxngwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWI2NTdiMzUtMzEzZi0z
OWMwLTllZTItMWNkZjUwODJlM2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDqkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIGS4G9UuruNhcFrgtdaOIZvNjIIIYStfYZM0c1cN8Q30EaLSt94Ep0S
zRRxeasW4TxuAV9BzfDCewN0gYkxOEe1miD0TjUgs96rL1ibYMmsL5fBFJZZ9zzw
qxdWMXeV9p2B3vBroztzcl7zezP5CSg6STt+Ree2Uj1yCMWmgLLQWBaGQeYN7ndN
4Leyofs1dW+Non0OMjTNs1hrtQySQcB+JPCFguK6hocxNCUXSKRFE3385r0ssB9U
4K21YMJFwc8y2eFOku+27DheC7o4coDDF9HWzdJVEmcMnGMzvpto12g4oqPECjYh
cW4Ua0Tzqy4rwMljVTG5mSD4YxMJunA=
-----END CERTIFICATE-----
Generated at Tue Apr 29 12:08:25 2025 by rpki-client