Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/283c0d8b-5b84-3a4b-a51f-908522912b26.roa
File:                     283c0d8b-5b84-3a4b-a51f-908522912b26.roa (raw, json)
Hash identifier:          8LW0E7DQmFLH5d6IeTLqNY2c0+sAu1RWM2SYLtDX1S4=
Subject key identifier:   28:3C:4E:0D:D2:56:76:C8:4A:20:83:36:07:19:EE:30:F9:47:8A:67
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584839EABD0FB2BD3A7BA7F90680
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/283c0d8b-5b84-3a4b-a51f-908522912b26.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     55429
IP address blocks:        68.142.68.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:bd:0f:b2:bd:3a:7b:a7:f9:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=3e5239d0-73fe-47c2-b404-a364b75544bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:04:bd:4f:0c:e6:f1:40:6c:63:20:f2:56:8a:
                    be:04:ca:e5:52:44:66:fb:6d:cb:2e:f5:47:77:1a:
                    72:a0:df:25:f4:f7:66:3a:6f:a7:91:16:d9:4b:4a:
                    97:91:b5:d8:d4:a6:02:3e:22:1a:3a:e2:ae:20:03:
                    38:30:ab:8e:7c:31:d7:0e:2a:41:95:62:cd:8c:11:
                    19:71:a1:0a:6a:27:44:5c:1e:c9:bc:7d:0a:53:88:
                    05:2d:2f:01:90:2f:18:5c:26:80:fa:2e:ca:af:e6:
                    67:d4:ae:e5:d1:e5:b0:71:c4:91:1f:65:91:f0:87:
                    85:04:e9:05:1b:fa:c7:92:f8:a9:66:16:2f:60:68:
                    a9:5c:e7:af:8e:17:10:76:94:92:1f:84:0d:91:1f:
                    53:45:33:99:b5:fa:50:28:21:0b:a9:e7:ad:cc:d1:
                    df:86:79:ed:d2:d9:cd:db:bc:75:49:cb:03:5b:29:
                    8b:a9:f9:31:dd:d9:5e:f1:04:c7:b6:e0:9d:e6:8f:
                    3b:d7:05:7e:0f:76:d9:fd:ba:f6:67:66:04:7d:5f:
                    7b:c3:cc:22:70:58:2e:e4:da:aa:73:86:1a:dd:f0:
                    d6:14:6c:73:f8:bb:1c:cd:83:34:63:4f:4a:db:8b:
                    4b:b2:3d:1b:9f:aa:4e:b5:c2:4e:d0:e1:c4:4a:fb:
                    cf:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:3C:4E:0D:D2:56:76:C8:4A:20:83:36:07:19:EE:30:F9:47:8A:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/283c0d8b-5b84-3a4b-a51f-908522912b26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.142.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:05:53:2c:e6:ec:2a:4d:7d:40:fc:f6:e2:dd:5b:57:3d:af:
         b0:9d:8c:53:fd:df:b1:e4:fa:54:8d:c3:58:45:6b:f4:80:41:
         a8:7e:22:33:60:6e:84:a6:fd:36:3a:33:66:5c:ed:a4:6f:8a:
         48:c3:d6:ea:2b:f8:a8:7c:6a:f6:7f:04:57:cf:aa:a8:71:0c:
         82:97:59:db:a1:f2:c8:8d:88:f5:50:8c:1b:54:63:96:d7:71:
         6f:fe:d6:44:aa:54:3d:29:f6:18:94:2e:c2:08:77:40:46:6b:
         2b:d7:fa:64:38:50:49:e0:48:b9:a1:1f:20:67:cf:84:f7:02:
         52:53:39:23:5e:f5:94:01:50:fa:f2:53:19:ef:06:a0:92:f7:
         5f:64:ba:9f:b6:b8:12:71:d8:e7:fd:2f:7c:d7:f4:22:96:21:
         72:c7:bb:59:e3:9c:21:07:b6:f1:c5:d6:0b:3b:7f:70:bd:08:
         ba:85:8c:8a:d0:8a:31:2b:dd:77:08:56:78:7e:97:56:6e:0f:
         15:b8:44:7e:e7:b7:64:a9:85:d5:53:c5:1a:5c:76:32:0c:fc:
         2e:03:d3:59:81:d5:a4:7e:49:90:ca:86:89:f5:84:d0:a5:c9:
         64:9a:4c:4a:2f:21:1c:ec:f3:cd:47:a1:fc:4a:bf:5b:86:32:
         2c:32:36:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----