Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff1d2422-32b3-3282-9e2f-b185dafd9911.roa
File:                     ff1d2422-32b3-3282-9e2f-b185dafd9911.roa (raw, json)
Hash identifier:          0ffXYKrE+l0idoDcbDqLXs3K+v4/6XImXWAzNEBhYZo=
Subject key identifier:   70:8B:68:D5:72:26:A5:07:F4:FF:5F:F6:A3:CE:D2:67:FA:C5:7C:F1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143F20EC56994E0CB105CA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff1d2422-32b3-3282-9e2f-b185dafd9911.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33668
IP address blocks:        68.36.46.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3f:20:ec:56:99:4e:0c:b1:05:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=65b69847-a22c-4f56-994e-72245062f43d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ac:8c:ac:8b:a8:84:4c:12:cb:1c:be:37:32:
                    2d:70:3e:6c:da:2e:41:de:56:43:39:0b:93:3b:01:
                    bf:ce:60:d2:5c:a6:67:3a:0a:6f:42:ae:5e:2b:a5:
                    1e:a3:4f:27:3a:f7:1d:2b:ec:31:9e:fa:8a:9b:b4:
                    66:0b:30:d6:b5:9e:27:91:d5:76:eb:f0:69:96:35:
                    2b:54:9e:27:d6:db:3d:66:cb:3f:26:ee:a6:90:16:
                    36:0a:e9:16:4b:67:ff:65:48:43:e6:81:a1:d0:a6:
                    d3:b7:60:f1:97:9c:f5:43:be:ae:1f:da:f6:15:2d:
                    0b:4f:31:42:52:3d:ea:14:78:0b:ba:c9:f0:6f:fe:
                    71:91:37:ab:2c:fd:ad:98:3f:68:ae:4c:a3:26:07:
                    ee:f1:44:a4:d5:df:91:f4:0a:3f:a9:69:13:5f:a1:
                    58:9a:a5:1d:39:11:df:d4:aa:b0:6b:0b:e7:ac:23:
                    ee:67:38:c8:f7:cd:f8:18:a1:08:24:8c:3a:6d:b6:
                    2b:4b:d8:43:1c:7f:87:5c:3c:c7:9b:79:18:ea:0a:
                    1f:7a:f4:12:e2:28:80:67:32:ad:71:7a:79:54:ec:
                    43:71:69:7f:53:03:b9:93:3b:b3:05:2c:12:8d:b3:
                    fd:28:32:86:31:9c:de:8e:bd:97:79:37:88:11:5a:
                    17:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8B:68:D5:72:26:A5:07:F4:FF:5F:F6:A3:CE:D2:67:FA:C5:7C:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff1d2422-32b3-3282-9e2f-b185dafd9911.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.36.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:81:d0:91:21:0e:34:95:46:10:6e:5b:8c:da:f1:f3:0a:d3:
         cd:17:e9:d6:3a:6e:27:7c:51:aa:cd:f4:93:c4:36:e6:8a:6e:
         1e:74:d8:bc:b1:4f:fb:f5:30:99:19:2b:ea:a7:dd:32:0e:bf:
         0e:9d:7f:07:95:cb:59:56:e4:a3:6d:f4:3d:8a:c4:c3:2b:89:
         e9:26:0c:92:b0:06:40:62:ad:d6:c1:76:04:07:85:27:0f:6b:
         88:8d:ac:6e:3d:b0:d4:7a:22:ce:9a:f5:7b:eb:8b:63:5e:44:
         38:bd:b9:16:5e:5f:dd:fa:61:76:8b:ee:6a:4a:89:98:a2:9e:
         d9:90:94:52:90:00:12:49:00:9a:21:92:23:44:47:a2:f9:27:
         0a:b6:0d:93:7b:a5:fd:93:24:d9:1d:8f:f7:0f:be:ff:3c:98:
         e8:fc:7d:2b:4b:53:1f:0e:d6:f1:64:2e:91:43:3a:47:1e:d6:
         36:b5:29:0e:c2:3f:37:87:36:81:f0:a5:cd:0f:21:c4:ed:5e:
         96:c0:60:54:38:32:36:1e:cf:09:26:06:53:e0:18:bc:3f:71:
         5a:e9:b2:e0:2d:45:9d:76:2b:c9:13:e9:b8:ae:43:64:1a:b2:
         69:0a:d7:03:a0:26:aa:dc:61:fe:ba:83:ef:31:f2:dd:0c:ff:
         45:e0:03:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPyDsVplODLEFyoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
NjViNjk4NDctYTIyYy00ZjU2LTk5NGUtNzIyNDUwNjJmNDNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46yMrIuohEwSyxy+NzItcD5s2i5B3lZDOQuT
OwG/zmDSXKZnOgpvQq5eK6Ueo08nOvcdK+wxnvqKm7RmCzDWtZ4nkdV26/BpljUr
VJ4n1ts9Zss/Ju6mkBY2CukWS2f/ZUhD5oGh0KbTt2Dxl5z1Q76uH9r2FS0LTzFC
Uj3qFHgLusnwb/5xkTerLP2tmD9orkyjJgfu8USk1d+R9Ao/qWkTX6FYmqUdORHf
1KqwawvnrCPuZzjI9834GKEIJIw6bbYrS9hDHH+HXDzHm3kY6gofevQS4iiAZzKt
cXp5VOxDcWl/UwO5kzuzBSwSjbP9KDKGMZzejr2XeTeIEVoXDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHCLaNVyJqUH9P9f9qPO0mf6xXzxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmYxZDI0MjItMzJiMy0z
MjgyLTllMmYtYjE4NWRhZmQ5OTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCQuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKCB0JEhDjSVRhBuW4za8fMK080X6dY6bid8UarN9JPENuaKbh502Lyx
T/v1MJkZK+qn3TIOvw6dfweVy1lW5KNt9D2KxMMriekmDJKwBkBirdbBdgQHhScP
a4iNrG49sNR6Is6a9Xvri2NeRDi9uRZeX936YXaL7mpKiZiintmQlFKQABJJAJoh
kiNER6L5Jwq2DZN7pf2TJNkdj/cPvv88mOj8fStLUx8O1vFkLpFDOkce1ja1KQ7C
PzeHNoHwpc0PIcTtXpbAYFQ4MjYezwkmBlPgGLw/cVrpsuAtRZ12K8kT6biuQ2Qa
smkK1wOgJqrcYf66g+8x8t0M/0XgAzA=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:46:18 2025 by rpki-client