Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ac003f3-1e3b-3263-b261-66709d4b2012.roa
File:                     8ac003f3-1e3b-3263-b261-66709d4b2012.roa (raw, json)
Hash identifier:          IsEe4HgX9N7XF3ciTpBe3uO060p3SGCZHf0S4R2fRwU=
Subject key identifier:   87:CC:B2:87:AD:5D:72:25:F9:B2:C1:54:F0:5C:16:6C:C0:80:67:76
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C122B39BB7741936C794500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ac003f3-1e3b-3263-b261-66709d4b2012.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33287
IP address blocks:        68.80.122.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:12:2b:39:bb:77:41:93:6c:79:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=dc4f8ee3-5108-4d9d-8ac2-e95d3c590a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:87:b1:35:5b:ef:d1:ee:bd:88:37:2b:5f:f3:
                    ec:90:6d:0e:8b:d0:35:9e:3b:cd:ae:5f:0b:0f:29:
                    5b:53:e3:9e:f3:09:2d:71:cb:bc:7a:9a:36:5a:54:
                    33:61:0a:3b:75:ec:72:17:47:8d:da:5d:4a:e6:1b:
                    65:d9:02:e0:4c:fb:77:45:03:e9:f3:a3:a9:13:a7:
                    06:c5:fc:95:e1:5a:3e:e7:0a:ce:29:47:95:29:4f:
                    a7:01:79:bc:94:e3:23:f4:62:dd:29:a2:6f:bd:3f:
                    69:9c:4c:24:21:fb:c8:7a:be:fe:26:0c:8e:0f:61:
                    02:df:cc:9a:9a:5a:5b:33:bf:fe:a3:48:3c:03:27:
                    54:25:ba:89:79:ff:93:48:fd:75:db:56:46:57:2a:
                    ee:2b:01:f0:a7:df:5c:13:bd:a7:ce:a0:cb:09:cf:
                    7d:e3:d3:64:58:92:f3:45:67:d7:31:d0:a2:33:50:
                    c7:7e:36:94:de:d4:b7:d2:bd:53:d0:a8:64:ae:04:
                    1a:33:60:c0:9e:f3:59:26:26:56:05:7b:65:4b:8b:
                    d0:b1:5e:99:b5:48:53:83:a9:cd:dd:5f:7a:47:75:
                    e6:95:a2:99:3f:74:68:6a:2d:a8:7e:3f:48:09:a7:
                    5d:c4:bd:47:51:a2:5e:c6:f4:8f:88:d4:46:0c:c9:
                    c0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CC:B2:87:AD:5D:72:25:F9:B2:C1:54:F0:5C:16:6C:C0:80:67:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ac003f3-1e3b-3263-b261-66709d4b2012.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.80.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:f0:b8:68:17:44:12:d6:4d:3d:25:ee:8d:14:6e:69:9e:d8:
         5e:74:7d:46:31:2b:51:b2:be:e4:ba:f1:46:e0:51:e5:61:f6:
         79:6c:65:35:db:36:25:a2:83:3f:27:a0:71:66:1e:fe:ef:11:
         49:05:93:5e:6e:16:b8:09:1f:b9:4d:18:25:d1:cc:c1:5c:88:
         a3:5a:e7:56:85:bc:56:1b:8e:6b:28:7b:e4:ea:48:20:e1:30:
         cf:83:79:5b:6a:37:32:c5:9a:d2:46:d8:b1:9f:36:d7:8d:75:
         e7:f9:5c:4c:39:ea:fb:59:4d:ce:3c:ea:28:34:0f:21:b1:15:
         d1:73:bb:e8:3f:90:90:8d:5c:5e:ac:e4:a5:a1:b4:6c:79:d0:
         c5:fa:fc:07:0e:30:36:cf:16:08:e0:83:ac:3b:c3:1f:1f:d8:
         ab:01:2a:7b:8d:8f:4f:6a:31:ed:89:72:ed:9e:53:e6:60:0f:
         da:30:62:11:ca:6c:06:64:d4:c8:dd:ba:cc:a8:9a:f6:c2:fb:
         77:22:7b:cf:b5:34:92:3d:6a:a6:0a:52:5f:61:8f:56:d1:24:
         26:3c:39:d0:d6:c7:f3:e3:02:4a:a7:da:97:75:04:f5:e9:ad:
         72:7c:5f:c1:ea:c5:9f:44:c2:e4:6b:aa:6a:48:90:7a:e1:a7:
         ae:f5:8b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----