Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4def27c-301f-3740-9dcd-1df2352990f8.roa
File:                     f4def27c-301f-3740-9dcd-1df2352990f8.roa (raw, json)
Hash identifier:          cPqkVMww3l1ZHOavgVtIyvA3QqfWi+wsPFV1IJfTGG0=
Subject key identifier:   1D:67:F7:F6:E3:6F:5D:D1:02:66:B7:55:1F:55:6F:DF:0A:03:BA:CF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143B5746091DD3F11B3E58FC
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4def27c-301f-3740-9dcd-1df2352990f8.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33668
IP address blocks:        68.42.168.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3b:57:46:09:1d:d3:f1:1b:3e:58:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=51aeca99-7f6c-4089-80db-f711db5fb7f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d1:c4:45:19:9d:6c:e2:ac:b2:d7:73:f0:38:
                    61:90:08:62:76:39:93:4b:37:1a:11:16:9b:e1:fc:
                    56:4f:49:db:d6:c8:77:8f:1b:d5:96:ab:e6:04:68:
                    b6:e2:41:f2:8d:25:cd:4a:a3:ce:f5:a7:f9:32:9b:
                    ce:b0:0f:c3:21:d1:1e:47:b9:9c:18:18:29:12:88:
                    ec:ae:89:91:53:0c:2d:b8:a0:df:36:8f:7c:74:97:
                    1a:29:f0:38:fc:b1:e8:c3:bc:7c:1a:c7:d8:67:83:
                    20:e3:a4:ea:7d:0a:9a:00:76:d2:b6:33:8b:e0:b6:
                    b6:94:b2:9b:ae:e0:ea:b8:96:19:35:7f:bb:8c:b0:
                    ed:83:e5:e9:b0:13:60:b2:45:53:02:da:56:1e:2a:
                    2c:23:72:ac:c1:a8:46:4d:df:14:67:b3:a6:99:76:
                    c9:3c:46:dc:82:55:5b:fa:f4:23:38:cc:83:03:48:
                    08:29:c3:45:53:91:94:55:29:91:39:1f:49:ee:cb:
                    ae:d9:bb:9c:d7:ea:41:10:0f:1e:71:14:30:30:48:
                    b5:0a:58:22:28:88:64:9c:20:0b:ce:01:f0:83:d5:
                    c9:5f:49:5b:9b:70:9f:45:f9:0f:09:cf:8f:4e:2e:
                    c2:32:e0:3a:3e:95:17:ae:c6:04:60:d3:a5:69:d8:
                    1a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:67:F7:F6:E3:6F:5D:D1:02:66:B7:55:1F:55:6F:DF:0A:03:BA:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4def27c-301f-3740-9dcd-1df2352990f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.42.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:95:c8:e6:1d:bb:f6:67:26:6c:96:2d:b4:1f:db:5f:76:16:
         12:13:52:59:0e:1c:71:d7:b1:67:77:5f:02:7d:e9:59:5c:16:
         d4:bf:bc:4c:35:7f:3c:9e:10:98:99:1a:92:38:22:81:46:41:
         f7:34:ff:2a:24:ec:14:22:b1:7e:d9:49:a7:ad:a4:b6:25:6a:
         1e:9c:2a:61:96:e9:21:e0:41:05:cd:72:ae:73:a6:e8:38:b0:
         1b:18:dc:33:03:0f:8f:64:23:18:bc:ea:2e:2b:79:82:20:10:
         f3:4c:ba:74:bd:fa:60:51:b0:5c:f2:15:f3:5e:e9:d3:81:0e:
         2d:e9:63:fc:74:60:96:c8:0a:f3:cb:de:ee:75:71:98:c0:fa:
         a1:6e:dd:36:ed:ae:f4:17:59:f9:79:a4:43:7f:a6:ff:50:2b:
         30:2e:24:75:4c:64:92:6a:fd:23:f8:10:5c:2a:15:b4:17:cb:
         58:e3:d6:8b:ed:fa:65:66:f3:79:d5:8a:de:62:f2:18:72:e8:
         6e:5f:7b:34:a3:df:20:d0:e0:3e:83:8d:8f:ad:cc:51:c7:3c:
         a4:86:c6:be:30:7d:01:08:b6:7f:cd:44:a5:a3:71:2c:f7:0b:
         23:fa:88:d5:d9:a6:45:74:6f:d5:f1:39:0e:69:25:26:c4:4f:
         7c:eb:c6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:11:27 2025 by rpki-client