Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/a03aef01-0070-379b-81cb-1850b2ef308d.roa
File:                     a03aef01-0070-379b-81cb-1850b2ef308d.roa (raw, json)
Hash identifier:          c/kW3y4vUhJX+jZHV+J0owTKFu0xn/+H9u0gZgvyiHk=
Subject key identifier:   90:5C:D7:83:C6:28:4A:C0:24:BC:49:E6:5E:CD:C8:29:FE:E7:E3:32
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F4328584847E02A6CD8305146BD223800
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/a03aef01-0070-379b-81cb-1850b2ef308d.roa
Signing time:             Sat 21 Dec 2024 14:00:52 +0000
ROA not before:           Sat 21 Dec 2024 14:00:52 +0000
ROA not after:            Fri 21 Mar 2025 13:00:52 +0000
asID:                     3651
IP address blocks:        68.24.0.0/13 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:47:e0:2a:6c:d8:30:51:46:bd:22:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Dec 21 14:00:52 2024 GMT
            Not After : Mar 21 13:00:52 2025 GMT
        Subject: CN=d069af60-0b90-4a83-8648-b486af0e384b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e0:46:86:ef:b3:50:10:68:59:6d:e4:78:de:
                    bc:36:09:ee:ea:94:d4:c3:00:d9:9c:4c:90:0f:4c:
                    fb:d4:74:ed:7d:70:41:1a:51:a1:14:01:9e:d2:af:
                    57:d8:10:ad:31:63:c7:fe:12:6d:7e:4c:aa:a5:b0:
                    7e:2c:94:9b:32:11:a2:ad:fe:2c:f3:4f:d5:64:a5:
                    a8:93:1c:39:dc:21:70:ac:f3:6a:2f:41:15:3e:3c:
                    d2:a5:6c:98:bf:e0:2b:5b:fb:0f:80:d7:b9:67:f0:
                    2a:68:54:2e:67:ba:81:2d:92:70:74:00:29:24:b5:
                    8f:c3:78:ea:f7:6f:8c:4c:1e:35:1c:51:04:7b:35:
                    d9:cd:8b:39:8f:a4:77:0d:61:84:11:42:a6:f3:1f:
                    e9:64:c6:4e:d8:a4:f8:67:14:d4:c7:54:16:5c:be:
                    8c:3e:8a:2a:9a:e6:f6:33:7b:12:d9:6f:0f:d6:9e:
                    8e:b5:75:7b:d4:b5:89:e6:82:2b:8e:6f:df:6c:04:
                    00:a1:4c:29:85:10:02:5f:b9:d6:7a:0e:31:d1:74:
                    04:3f:66:ce:48:d8:c8:1a:c1:20:d6:4d:7e:45:07:
                    59:ca:fd:76:02:72:a1:d9:1d:eb:ab:22:a4:b5:9c:
                    7d:83:5b:a9:ad:27:91:c9:85:be:ab:96:03:69:7e:
                    e6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5C:D7:83:C6:28:4A:C0:24:BC:49:E6:5E:CD:C8:29:FE:E7:E3:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/a03aef01-0070-379b-81cb-1850b2ef308d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.24.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:72:8b:e3:42:06:5d:b9:e5:93:33:49:2c:e9:1e:5f:08:57:
         25:72:81:d8:64:7d:13:9e:9d:d6:0d:fb:4a:09:ea:92:6b:7f:
         7d:bd:e5:0e:fe:a1:5f:b7:93:84:31:b5:64:cf:50:3a:82:08:
         1d:16:af:82:5d:6d:f9:94:b6:da:9a:b3:5e:6f:e3:fa:72:08:
         91:88:99:de:20:c9:d8:44:aa:8d:d7:90:76:99:c3:b6:fe:7d:
         83:b3:25:5c:14:d7:19:d8:1b:58:e5:db:ce:0e:9b:5a:bc:6e:
         db:f6:af:2c:a9:c7:26:8c:bb:27:73:15:0f:79:12:62:d0:8f:
         70:00:19:9a:3f:34:9f:ec:bd:ec:43:e4:6e:8f:8b:0a:b7:43:
         ab:2a:d3:3d:66:bd:ad:76:b4:a7:b5:de:23:b7:44:fb:f3:7c:
         ae:f1:d3:90:4a:da:64:ca:a3:f0:d7:ab:33:b6:85:cb:60:c0:
         36:16:ba:81:10:fd:27:cb:0c:f0:0d:d8:9f:b7:32:27:f5:58:
         a6:a8:ca:e1:e5:97:63:1b:66:4b:8c:69:d8:37:c1:97:f1:27:
         2a:87:7f:24:0a:a3:f5:c4:b9:20:0c:7c:de:e9:a2:b6:dd:13:
         60:03:5f:1e:1d:fd:8a:a8:56:d2:e0:f7:b1:d0:92:8f:8b:08:
         74:b7:7e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:40:52 2025 by rpki-client