Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76e54696-0529-3857-ae3f-98d5ca481ea3.roa
File:                     76e54696-0529-3857-ae3f-98d5ca481ea3.roa (raw, json)
Hash identifier:          qo368sy22oCjcMt8lS/+vXZsOtv8iuoQljLDWepNgq0=
Subject key identifier:   6D:EE:A9:E8:91:C2:20:E9:C5:29:09:80:12:AA:A1:9D:39:9C:9B:CB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143F28EB44EC6F24BF9F6590
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76e54696-0529-3857-ae3f-98d5ca481ea3.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33668
IP address blocks:        68.37.66.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3f:28:eb:44:ec:6f:24:bf:9f:65:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=4c940231-40a0-4672-8d6a-d452532b735b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0f:e6:a7:78:47:8c:d0:eb:54:99:a0:c5:3e:
                    97:57:fc:e6:89:d4:29:f2:db:8e:b6:a5:37:ca:b4:
                    fd:8e:f4:16:48:63:72:0e:c3:68:76:5f:98:37:ff:
                    e1:c7:eb:4c:bc:b9:fa:87:db:02:59:60:1b:e2:aa:
                    67:f7:aa:98:cd:4d:88:b5:6c:af:06:94:b5:4c:82:
                    83:05:58:3f:e8:8f:08:c0:d3:84:77:c7:eb:49:35:
                    3c:b2:ae:2a:fb:5e:9a:ff:d5:1f:9a:06:15:d5:5d:
                    db:83:c7:3a:85:7d:92:4e:dd:a4:e0:d3:78:9d:2e:
                    ad:99:6f:15:58:d7:f7:d4:f7:7e:aa:98:ea:3c:dc:
                    2b:30:78:df:c0:bf:ec:91:b6:35:a3:c5:60:46:84:
                    cd:d5:f6:77:15:49:4f:a5:03:9f:8b:60:85:cc:86:
                    25:a1:0b:17:e1:66:26:cd:36:82:97:9d:37:81:ff:
                    02:62:72:dc:33:d3:bb:1e:fe:bc:b7:59:6d:f6:59:
                    1d:38:51:2f:37:37:2c:b1:58:33:51:a3:0a:68:40:
                    88:53:b4:23:de:70:59:6e:93:21:37:dd:3e:4f:c1:
                    2e:7b:40:2f:5e:53:4a:30:a0:73:8f:d2:e6:ef:81:
                    72:8f:4a:3f:35:d9:93:74:61:46:a0:d1:25:b0:6c:
                    e7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:EE:A9:E8:91:C2:20:E9:C5:29:09:80:12:AA:A1:9D:39:9C:9B:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76e54696-0529-3857-ae3f-98d5ca481ea3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.37.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:11:2c:f5:40:47:69:d2:8b:27:23:48:3b:5b:0d:96:7a:9a:
         02:7c:45:e0:3c:15:2c:23:3f:54:47:ec:b3:bf:88:a1:af:6b:
         7b:f1:a6:67:8b:e5:c3:a2:d9:62:51:b1:ec:b5:c0:d6:66:67:
         2b:e8:26:0f:49:99:a1:c6:a1:4c:fd:32:ac:58:8a:74:b8:b3:
         21:f5:2a:24:29:d2:17:e6:13:22:14:53:0f:9b:00:a4:41:39:
         1b:0e:94:89:e3:5c:ac:cc:8b:39:ed:0c:f7:9d:ec:9b:c5:5e:
         cf:25:86:e3:78:b1:c4:f4:db:1d:1f:ea:c9:07:52:68:31:de:
         34:64:89:2e:62:de:13:14:82:e8:02:8b:f0:2d:6e:2b:03:00:
         c4:30:58:38:3e:4a:d5:a5:bd:21:75:7d:15:6a:fd:92:3f:a5:
         47:a6:a4:72:ea:9b:79:be:8a:49:c2:3d:d1:7f:6b:fd:39:4e:
         5a:fd:a1:8e:e6:73:97:f9:ec:4d:e9:25:f9:f2:5d:b3:bc:ef:
         9c:d3:75:25:f9:36:ac:99:ec:60:ee:65:77:24:e8:48:cd:52:
         36:37:d5:26:74:5c:91:1b:ec:2a:ee:88:9c:76:7d:66:cc:07:
         38:cf:52:84:86:36:d2:1f:20:14:0a:30:99:3d:1b:bd:5c:fe:
         47:13:e3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:08:33 2025 by rpki-client