Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/598708f0-2bd9-3320-90cf-3f5ae34586cd.roa
File:                     598708f0-2bd9-3320-90cf-3f5ae34586cd.roa (raw, json)
Hash identifier:          lUDmS/l2mXNkpvU/wrTOUVB1LmmAdA1ypX5uYK7BZxA=
Subject key identifier:   07:DD:F9:6F:8A:F8:0A:B9:5B:94:EC:C0:16:1F:65:43:92:89:1C:F9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E5DCC4062D19F52F4E0180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/598708f0-2bd9-3320-90cf-3f5ae34586cd.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        68.46.199.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:dc:c4:06:2d:19:f5:2f:4e:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=cd747448-acc3-481d-9cc6-9dead05d83a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e7:b6:99:45:70:40:c1:84:23:ba:29:11:1e:
                    3d:10:b0:ce:57:ff:7d:ad:f3:fe:65:14:2d:3c:3a:
                    51:fa:a8:f6:98:7b:1b:1a:3f:8d:a5:86:28:56:49:
                    7f:85:cc:db:40:37:f9:a6:a8:9d:4a:d4:1f:c3:0d:
                    bd:70:9a:8d:26:f0:73:dc:04:65:2c:4d:86:37:df:
                    5e:86:5a:b4:1f:f8:b6:0c:d7:86:23:af:0e:42:33:
                    24:72:58:cb:2e:22:13:f7:de:2b:5d:f1:f2:cb:f3:
                    59:4a:13:f2:41:d2:e5:17:36:95:41:7f:70:f2:59:
                    2f:79:85:9f:4b:cf:5f:d9:c7:b1:5e:22:2b:08:38:
                    4b:dc:ed:e8:42:4b:07:95:69:4b:f8:7a:40:5e:da:
                    2e:79:0b:03:78:af:26:42:1c:bf:9b:6e:e4:91:1f:
                    ad:97:07:1d:26:f5:9f:6d:f4:3d:66:d5:4d:e4:7a:
                    d8:66:34:97:98:1b:bd:66:d8:d1:b5:81:1c:e0:0c:
                    82:a8:14:a4:10:52:cc:ab:44:89:37:d8:75:85:f3:
                    71:7b:2e:27:86:08:d1:2c:7c:23:c8:0e:c7:3f:35:
                    47:5e:08:d1:78:00:be:89:9f:14:85:d8:0d:bc:5e:
                    58:5e:f6:6f:cb:ad:53:2a:dc:72:0d:cb:20:ad:ec:
                    7b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:DD:F9:6F:8A:F8:0A:B9:5B:94:EC:C0:16:1F:65:43:92:89:1C:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/598708f0-2bd9-3320-90cf-3f5ae34586cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.46.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:56:af:71:4c:f0:92:f8:02:26:d8:5f:df:7f:a0:2d:01:f2:
         e7:12:dd:f9:37:40:1e:dd:17:f4:d6:7d:98:77:7a:db:d0:ad:
         bc:94:07:c8:c5:33:60:54:bf:ea:15:24:f0:3d:af:65:f8:d3:
         c8:b5:5f:96:bb:a5:85:86:c9:2f:f7:ca:7e:48:19:69:c0:dc:
         d3:ec:fd:d8:0f:27:39:2b:07:2f:1e:44:5d:f9:71:b3:fb:93:
         1d:59:5f:1b:a3:48:28:d7:34:bc:b0:b0:41:11:e3:1c:69:04:
         8f:8b:50:11:86:80:d3:8f:29:e5:46:9a:b1:a5:90:27:3f:18:
         f7:34:11:1c:eb:1e:58:83:64:e3:a4:5c:0e:ce:b4:3e:1e:c9:
         76:5e:3d:b9:b5:aa:1f:73:6f:68:6e:19:b0:1d:99:2c:6c:25:
         8c:78:eb:e4:f7:0d:04:b3:26:4d:49:41:99:ff:fc:2b:52:32:
         42:b5:02:ec:b6:4d:28:1e:10:3a:c9:b4:8c:ff:6a:d0:25:60:
         68:6e:25:7f:78:e7:a6:a8:4a:a0:a0:04:8f:e2:ef:a3:84:ec:
         eb:9d:a1:81:f5:1e:bf:72:21:f4:5c:9f:82:78:ad:1c:de:97:
         f4:72:6e:bb:40:1c:ef:33:29:6a:9c:40:68:d7:9c:d6:fb:76:
         9f:03:fd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----