Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6c8c3a4-746a-3b87-a671-9d207f0f6276.roa
File:                     f6c8c3a4-746a-3b87-a671-9d207f0f6276.roa (raw, json)
Hash identifier:          mIK1Job7ACmCmXY86c3HtbAiN/acDLZmAAtskQeWHUs=
Subject key identifier:   C5:CB:55:46:15:3F:F3:FC:C6:84:CE:2A:AF:FF:8C:7E:4C:46:F1:F0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C122D36CA27EA1FC179F000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6c8c3a4-746a-3b87-a671-9d207f0f6276.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33287
IP address blocks:        68.81.140.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:12:2d:36:ca:27:ea:1f:c1:79:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=56827098-9c4e-4567-94b6-a96d3dadbde1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:40:b1:cd:05:3d:92:8e:dc:eb:c4:91:e6:19:
                    5c:18:d5:1c:14:91:fa:64:6a:24:96:f5:88:05:d2:
                    17:b2:43:7b:b4:52:fa:11:cd:bb:8a:3d:e8:a6:79:
                    6c:00:6f:c3:84:1e:64:25:8f:ec:fb:0f:55:33:9b:
                    16:4a:d5:58:49:b8:e4:09:49:12:26:ff:a1:e2:79:
                    66:ac:2e:8f:fd:cb:79:05:f5:22:cd:e6:46:8c:03:
                    53:c9:0c:a4:f8:17:de:9b:e9:75:6e:ce:81:d2:5d:
                    ec:1b:95:a1:1c:82:cc:0b:f2:7f:10:98:bf:c7:2d:
                    7d:82:29:a5:b4:1b:9f:4a:3e:b3:56:87:7a:03:a7:
                    96:b4:41:b5:6c:96:6f:b7:8a:ee:5a:95:69:6b:7a:
                    f3:46:90:64:3f:50:84:8a:3d:01:b0:f7:01:bd:20:
                    c4:9d:80:a6:53:76:39:a0:f9:d9:20:1e:44:ef:cb:
                    80:95:95:13:41:d7:a1:34:7c:0f:84:43:36:fb:56:
                    b1:67:1b:26:dd:c0:f6:92:a9:05:39:1c:99:84:c2:
                    40:7c:1e:e3:19:c3:84:60:05:77:99:19:ca:db:bd:
                    a4:b9:c4:15:6c:2d:1c:3c:cc:d0:e7:fb:3c:bf:12:
                    5b:10:25:a1:ba:e4:55:f1:9e:9d:02:42:73:0d:cd:
                    4b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:CB:55:46:15:3F:F3:FC:C6:84:CE:2A:AF:FF:8C:7E:4C:46:F1:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6c8c3a4-746a-3b87-a671-9d207f0f6276.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.81.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:08:20:e8:6f:3e:3d:4a:ef:cf:4e:dd:74:05:a3:96:2d:26:
         36:d0:e4:f5:4d:2e:14:48:5a:9f:1a:b5:32:6e:f9:b6:45:40:
         58:c1:ea:2e:a4:ca:37:b6:a2:98:fa:60:15:a2:be:c6:30:eb:
         6d:15:73:65:60:f6:8e:f1:cc:74:ff:cc:7d:93:59:f3:57:56:
         ac:68:63:7b:ad:57:0d:6a:af:a7:a0:c6:05:83:6d:4d:80:56:
         83:70:b2:18:01:c8:d0:00:b0:8e:ce:ab:87:13:59:6e:e3:70:
         20:1b:2b:94:41:e2:e7:b5:f5:b8:5f:ea:8a:1c:c9:bf:09:d9:
         d0:34:7e:ac:e3:b3:38:66:96:db:44:e3:90:90:ff:2e:fd:c6:
         9b:33:7d:20:5a:c4:9c:7e:b4:f8:2e:8f:78:94:ce:0f:7e:0b:
         e7:bf:fe:7c:d4:4d:f7:a3:d5:c9:b0:8e:d5:b4:0e:30:0a:75:
         1c:31:4e:1c:71:36:32:a9:aa:d6:e8:e6:c1:a4:76:bb:59:c3:
         d5:a9:1c:77:1f:9d:4f:8f:ee:24:92:51:02:cc:a1:bf:4e:fb:
         8f:22:c5:2f:53:3e:0c:33:13:0a:9c:69:67:5c:b9:fe:27:fc:
         81:ec:be:9d:1b:5b:a6:b7:14:7d:06:db:5f:22:30:4c:15:3b:
         14:4c:ad:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:56:42 2025 by rpki-client