Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb089a7d-113f-34a8-96c1-c2cf980330a7.roa
File:                     fb089a7d-113f-34a8-96c1-c2cf980330a7.roa (raw, json)
Hash identifier:          75EcrxPWQSzLJGlpdpvWcWIE857hIldpECx7JKvhe1A=
Subject key identifier:   2E:86:52:24:17:DB:A8:46:0A:2F:96:29:1F:C8:55:BE:21:9E:43:B9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6CD1C721F9A78B9F8BF180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb089a7d-113f-34a8-96c1-c2cf980330a7.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     53626
IP address blocks:        107.1.68.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:d1:c7:21:f9:a7:8b:9f:8b:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=a1ca30f9-c9bb-4fa4-a4a8-de4811feb263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:91:12:33:77:73:6e:f0:c5:a1:d5:62:34:08:
                    8c:8f:b5:d8:1c:7d:26:8e:76:01:12:f4:19:fd:30:
                    5d:7a:2d:a5:0f:70:7c:74:db:1a:85:95:ba:7c:71:
                    bf:3b:04:25:05:e6:41:6f:39:d8:7f:d8:0d:ef:9d:
                    fd:10:e0:31:2f:fe:f8:27:36:8a:23:fd:ab:20:e1:
                    84:ca:fc:95:bb:5e:dc:7a:26:eb:f5:43:bb:c0:b1:
                    19:4c:1c:99:51:b3:87:68:72:50:39:b1:46:49:2d:
                    c5:de:5d:8e:55:54:fd:28:33:7d:eb:fa:5d:98:aa:
                    da:a5:7e:70:ca:a8:7f:fc:58:01:38:98:f5:53:7e:
                    d5:1e:64:49:d4:72:8f:df:02:f0:f4:e0:86:1a:80:
                    bb:b4:1d:11:f4:06:25:4d:ad:8b:7f:3b:78:ae:9d:
                    0e:17:a6:df:46:6f:94:11:f4:34:09:5e:9b:c5:79:
                    7d:b2:cf:b6:66:4d:49:c3:83:af:56:25:a0:f4:33:
                    13:50:20:6f:e0:e8:b8:a9:77:46:a8:26:d8:20:6e:
                    e2:12:a2:9d:c3:85:49:bd:b1:74:b6:2b:c4:ad:40:
                    09:df:06:3b:0e:77:b3:d2:80:4a:f0:02:69:d0:27:
                    a1:94:c7:af:6f:a0:67:35:f4:b9:44:f8:4d:78:4d:
                    1d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:86:52:24:17:DB:A8:46:0A:2F:96:29:1F:C8:55:BE:21:9E:43:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb089a7d-113f-34a8-96c1-c2cf980330a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.1.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:93:17:fa:a8:98:6b:de:4b:a6:7d:e6:6a:08:fe:af:35:29:
         05:fa:5b:8b:72:6a:4a:2a:39:9a:4d:db:a7:96:b1:ed:9d:b2:
         b8:a7:aa:52:2f:18:27:56:76:91:1a:99:e5:a4:55:df:5e:d5:
         5f:64:8e:d1:39:b2:51:87:6a:63:50:a1:4a:07:16:85:1c:ff:
         ca:16:53:0c:ca:5c:c0:d3:7a:80:ac:f8:84:10:0e:bc:30:ca:
         3c:b8:20:e8:55:67:ba:3a:f3:30:32:30:04:95:24:7f:b4:70:
         e8:4d:14:90:74:60:f3:19:f8:04:40:cf:4a:d4:a2:63:c2:01:
         1c:f3:18:66:f2:82:50:06:2c:47:21:24:98:f5:cd:9e:19:49:
         d2:55:02:fe:4c:e6:8e:2b:4d:13:71:fa:e0:ce:f4:73:42:1c:
         f5:1a:4d:1c:07:cd:6d:08:a5:7c:50:f4:1c:15:01:97:93:ec:
         52:0b:cf:31:31:b3:5b:39:26:65:b7:3a:a6:b2:fa:27:76:cd:
         98:55:a6:6e:0a:d3:67:83:40:6b:98:41:70:a3:40:a8:2d:53:
         54:cf:90:01:36:8b:9a:e0:a1:78:4e:df:5a:ba:6c:b3:1c:b9:
         a8:db:69:9c:2b:30:25:ca:c0:4e:64:a4:3b:90:9b:02:4d:4d:
         58:8f:29:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----