Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30813ec9-6510-3ce9-9183-5659f31050fe.roa
File:                     30813ec9-6510-3ce9-9183-5659f31050fe.roa (raw, json)
Hash identifier:          bcNs39TwpXo34KrUwTbW5XzHnJfNznsajB+F2DavgG0=
Subject key identifier:   A1:B6:9E:FF:C3:84:64:BD:51:B8:39:A1:4D:53:16:97:8A:6B:FB:5E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C10EBC5FBD8FF07E0D641E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30813ec9-6510-3ce9-9183-5659f31050fe.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33491
IP address blocks:        68.58.77.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:eb:c5:fb:d8:ff:07:e0:d6:41:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=f00b4e3f-f397-4275-b9ff-8d4c10b72561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:50:1f:83:51:c2:c8:81:58:f5:6a:50:fe:91:
                    c3:cd:b9:c3:16:28:96:ed:b6:e5:3f:a5:46:1d:4a:
                    d3:8b:9d:24:5a:42:31:cf:f4:7e:75:10:1d:8e:d0:
                    bb:a0:94:da:21:72:7a:c8:9e:3f:d3:56:ee:19:dd:
                    26:e9:db:c1:b2:b3:83:b6:ac:a3:90:f7:af:e8:5f:
                    fa:90:0f:51:4f:16:24:ad:30:fb:42:cc:b4:6e:dc:
                    d4:8d:6b:01:b9:f8:d4:99:5d:65:8c:8d:a3:c6:da:
                    5f:c2:d3:c4:05:4d:15:57:66:42:f6:b4:ed:35:37:
                    cb:e7:90:3b:da:af:81:99:ac:f3:4c:72:8f:18:f5:
                    6e:7c:02:55:6c:0a:d3:f5:bc:9e:cb:0e:04:7e:ff:
                    33:06:c2:04:91:51:4e:39:f6:bb:55:6d:6f:ac:88:
                    d7:d9:a3:8a:2b:a5:6d:10:04:7b:ea:28:4c:f0:50:
                    99:df:e2:26:f4:71:e1:7a:62:19:b4:0a:0a:1d:3a:
                    0e:87:32:cb:01:2e:10:7b:ca:0d:7d:57:14:f4:29:
                    a7:40:06:98:bc:e9:5d:80:c8:b4:47:50:8c:53:b1:
                    46:38:dc:3f:45:ae:75:ac:fa:9f:e4:44:ea:99:2f:
                    c4:d5:49:c0:28:bb:b6:31:f7:c4:ce:00:31:76:14:
                    52:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B6:9E:FF:C3:84:64:BD:51:B8:39:A1:4D:53:16:97:8A:6B:FB:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30813ec9-6510-3ce9-9183-5659f31050fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.58.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:5d:f5:d6:a9:2b:74:a2:02:da:51:08:e7:87:d7:99:ab:77:
         a7:1a:e6:93:3e:37:8a:1e:10:c0:15:5a:91:85:56:9c:9a:57:
         9f:f5:5a:87:4f:fa:8c:a6:61:c3:ee:0f:22:a6:8a:19:40:6d:
         f6:d9:c7:de:14:7a:ed:5c:aa:5f:bf:72:07:53:28:ec:2d:9f:
         49:fe:af:e4:50:5f:1f:7b:4c:a4:ef:17:4c:0d:43:dc:32:16:
         12:a6:7b:f0:c1:ac:74:4e:e6:1d:b6:0f:4e:44:bf:f0:b1:f2:
         16:29:1c:5a:28:52:d8:37:72:10:d8:01:80:47:31:81:2c:d9:
         9b:9b:57:06:70:15:9f:b3:b8:10:2b:5a:30:45:08:81:aa:2e:
         5e:9f:08:78:af:06:8d:70:69:89:fc:62:49:4d:a4:6b:69:30:
         42:c5:f0:2a:d0:f7:03:e2:5b:4d:55:45:e2:ce:98:d4:a5:34:
         94:b6:59:cb:bb:d5:0e:1e:f7:2d:ed:d5:80:c5:66:2e:c7:47:
         1a:b3:da:39:26:a1:a6:e6:9c:d1:51:52:e4:27:3a:c5:3a:6a:
         93:34:c7:0d:73:ba:54:70:cd:2f:67:85:bf:09:77:8f:20:9a:
         bd:33:43:a9:02:b6:47:b3:98:68:cd:27:40:e8:f4:43:51:07:
         41:3a:70:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----