Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b7cb823-2d73-30c4-9d5d-c716d805928d.roa
File:                     1b7cb823-2d73-30c4-9d5d-c716d805928d.roa (raw, json)
Hash identifier:          +uqRetyOiTIVLt+BLUjP2XCMzPLqGK49E5Mf+P0sO8c=
Subject key identifier:   72:FE:DE:99:65:41:3B:02:21:68:2F:90:AC:91:2B:1D:0A:A0:BF:A6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6D2DC1D89DFD6434320900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b7cb823-2d73-30c4-9d5d-c716d805928d.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     7725
IP address blocks:        68.86.41.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:2d:c1:d8:9d:fd:64:34:32:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=8ad47967-8135-4456-b9b5-858b4db95437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:14:4c:07:50:b9:e9:75:86:99:2f:17:cd:6f:
                    17:3f:88:c4:5c:ba:e9:dc:76:ea:f6:a4:48:c8:07:
                    db:6e:2b:50:ee:4f:c6:64:61:61:f1:1f:06:0e:98:
                    e3:66:69:55:74:6e:74:76:d5:6c:cb:7e:95:14:ad:
                    7e:23:a6:09:78:64:ef:60:7b:80:85:a3:34:95:58:
                    41:72:68:9d:a5:18:5a:1a:7e:d2:92:ac:b5:6c:68:
                    3d:66:1c:cc:ed:94:5b:fa:60:98:b3:32:4c:a2:f0:
                    ef:33:c8:cf:a7:dc:fd:cc:2c:f2:78:c7:ce:eb:cc:
                    f3:3d:cb:5d:c4:74:e2:32:e4:76:aa:2a:31:fb:fc:
                    4c:9b:f8:7f:08:ba:96:31:7c:38:5f:b8:db:a8:50:
                    e3:85:09:d7:c4:30:55:a4:78:cc:c9:db:67:11:f3:
                    72:51:3e:b7:d5:24:3b:54:b7:2c:b8:60:7b:c3:77:
                    1f:39:dc:24:89:60:a1:51:73:55:f5:71:89:3e:41:
                    7a:29:07:35:6c:74:df:7b:99:ab:d3:58:c2:fb:8e:
                    e0:91:4a:42:7b:e0:dd:ec:a4:58:fe:a2:5d:63:a2:
                    a6:28:e8:f4:e5:1d:bf:fd:59:50:e4:85:8f:6b:79:
                    20:ab:22:1a:78:e0:e9:bb:ce:78:ac:08:42:d8:fa:
                    fb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FE:DE:99:65:41:3B:02:21:68:2F:90:AC:91:2B:1D:0A:A0:BF:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b7cb823-2d73-30c4-9d5d-c716d805928d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.86.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:db:7a:67:e9:9d:17:fe:62:33:41:33:72:20:48:a7:ec:45:
         d4:32:17:8f:b0:84:01:25:d4:53:59:b4:26:3f:71:97:ce:88:
         f7:07:f9:45:5a:84:90:8a:b3:cf:c7:5c:21:db:09:9e:cf:c9:
         f5:f7:81:38:10:b9:a7:75:cf:8d:d3:a4:9e:84:c8:99:1a:ea:
         6e:91:65:94:53:76:de:26:70:15:34:fe:32:24:f2:a7:a8:c0:
         ae:31:fe:86:da:43:98:f3:16:c8:9e:d7:4f:4e:4c:35:15:52:
         7d:9c:ed:27:d9:86:7c:54:1e:0d:91:03:6d:26:08:fa:19:f4:
         f0:d4:fc:8e:70:84:2e:5a:28:27:7d:82:9d:1e:e1:86:26:19:
         fc:4f:e3:f5:9f:49:d5:4d:c4:6b:cd:7f:90:dd:67:ae:c1:88:
         8d:31:46:68:7b:8e:4e:72:6e:74:ae:77:e4:9f:ad:d1:99:70:
         cd:16:10:4b:14:60:bd:a9:97:d7:a8:96:c9:e7:b5:2c:71:f4:
         df:e9:c0:b2:c6:4b:39:7f:86:bf:2d:38:37:8c:e2:8a:bd:b4:
         65:1f:c5:07:a4:65:e1:dc:6b:a8:73:ec:1e:11:6c:20:24:f3:
         04:60:7c:2c:27:c5:77:2b:77:a0:48:bb:78:d0:8c:79:e3:d8:
         71:ef:76:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebS3B2J39ZDQyCQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
OGFkNDc5NjctODEzNS00NDU2LWI5YjUtODU4YjRkYjk1NDM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxRMB1C56XWGmS8XzW8XP4jEXLrp3Hbq9qRI
yAfbbitQ7k/GZGFh8R8GDpjjZmlVdG50dtVsy36VFK1+I6YJeGTvYHuAhaM0lVhB
cmidpRhaGn7Skqy1bGg9ZhzM7ZRb+mCYszJMovDvM8jPp9z9zCzyeMfO68zzPctd
xHTiMuR2qiox+/xMm/h/CLqWMXw4X7jbqFDjhQnXxDBVpHjMydtnEfNyUT631SQ7
VLcsuGB7w3cfOdwkiWChUXNV9XGJPkF6KQc1bHTfe5mr01jC+47gkUpCe+Dd7KRY
/qJdY6KmKOj05R2//VlQ5IWPa3kgqyIaeODpu854rAhC2Pr7dwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHL+3pllQTsCIWgvkKyRKx0KoL+mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWI3Y2I4MjMtMmQ3My0z
MGM0LTlkNWQtYzcxNmQ4MDU5MjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFYpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMrbemfpnRf+YjNBM3IgSKfsRdQyF4+whAEl1FNZtCY/cZfOiPcH+UVa
hJCKs8/HXCHbCZ7PyfX3gTgQuad1z43TpJ6EyJka6m6RZZRTdt4mcBU0/jIk8qeo
wK4x/obaQ5jzFsie109OTDUVUn2c7SfZhnxUHg2RA20mCPoZ9PDU/I5whC5aKCd9
gp0e4YYmGfxP4/WfSdVNxGvNf5DdZ67BiI0xRmh7jk5ybnSud+SfrdGZcM0WEEsU
YL2pl9eolsnntSxx9N/pwLLGSzl/hr8tODeM4oq9tGUfxQekZeHca6hz7B4RbCAk
8wRgfCwnxXcrd6BIu3jQjHnj2HHvdgE=
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:53:49 2025 by rpki-client