Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/755e284d-86ed-37d3-acf1-c76b054b77e4.roa
File:                     755e284d-86ed-37d3-acf1-c76b054b77e4.roa (raw, json)
Hash identifier:          y8tgHclHuWYbB/93huXmMSxmXNzCuj5/ZUqgU+HXsj0=
Subject key identifier:   4A:CB:8F:CF:92:3B:79:29:B7:EB:49:DB:B6:B0:7E:CA:1A:C0:1B:1B
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F43285848388553F1AB06750E19CA0280
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/755e284d-86ed-37d3-acf1-c76b054b77e4.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     38622
IP address blocks:        68.142.68.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:53:f1:ab:06:75:0e:19:ca:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=3248b723-ad8a-46b0-a48e-187ef346690b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f1:bb:ff:51:52:2b:9e:e3:e7:05:ac:85:25:
                    7c:83:fd:2a:64:7b:49:79:55:f4:34:09:3e:88:17:
                    75:46:8f:49:7b:5b:22:86:2a:71:0d:3b:ca:3a:74:
                    59:14:72:49:f0:7c:f8:15:2e:78:d2:0e:db:e9:74:
                    28:c2:18:0b:3c:b0:b5:3b:ea:5f:e8:11:bc:31:73:
                    ac:81:d0:c8:04:28:74:4a:19:db:72:5e:8e:53:41:
                    af:8e:b9:34:4b:cc:2d:73:f7:25:12:3e:22:18:f0:
                    8f:09:ba:23:f0:fb:a7:aa:8c:f1:9e:03:74:d7:6d:
                    a1:f8:96:e1:47:e4:26:e2:b4:54:f3:fa:2e:62:85:
                    8a:57:ac:89:15:50:e9:9d:8d:02:a1:43:a9:2c:4a:
                    28:57:9d:8f:7c:b4:02:5d:7f:2d:be:cd:75:c9:43:
                    02:5a:1a:7f:04:54:ed:3e:21:2b:19:1f:51:f3:69:
                    54:4a:bc:f0:af:8a:91:04:c1:89:4e:c3:62:3f:97:
                    ba:28:85:eb:d1:d4:64:8c:94:68:75:c3:6c:a8:56:
                    7e:76:9d:e0:e1:e0:57:e3:4d:0a:c7:5e:e8:89:81:
                    b1:0f:3f:61:6d:fe:68:34:ab:51:ad:dc:79:cb:b2:
                    1c:cd:52:1c:8b:e0:16:a4:6d:78:9f:c5:26:7c:5e:
                    e9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CB:8F:CF:92:3B:79:29:B7:EB:49:DB:B6:B0:7E:CA:1A:C0:1B:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/755e284d-86ed-37d3-acf1-c76b054b77e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.142.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:c0:3a:00:93:0a:e2:8b:00:cd:46:1d:7a:bf:09:6e:75:f4:
         3c:d6:1a:35:47:58:07:85:1a:23:f9:3c:93:4c:d2:98:e9:dc:
         2b:e3:34:2b:9d:63:c8:fa:63:bf:de:ab:1a:1b:6e:a3:52:02:
         55:78:11:b0:e3:52:c5:9c:d5:9e:1c:55:bb:da:26:8d:94:f1:
         38:c6:6d:17:43:89:6f:c9:81:c3:4d:2b:ed:4d:1c:e1:84:72:
         66:74:08:b6:b3:d8:93:f9:ae:97:44:4a:cd:55:b4:8e:44:c8:
         d9:3a:e2:dd:0e:6f:22:33:a7:26:67:5a:b0:56:df:ec:ad:ed:
         95:fc:19:85:50:2c:19:8b:79:71:fe:6b:5e:a3:aa:25:01:b4:
         38:fd:3f:b1:9c:d9:38:d8:fe:e7:10:3c:f7:43:71:27:4d:fc:
         49:0b:08:af:a2:19:4a:93:59:ce:81:05:a1:ec:d0:c7:19:c2:
         1a:fd:3e:b6:86:8a:2e:4e:05:d0:8a:17:71:b7:20:50:05:be:
         7d:88:74:61:64:cf:a4:15:38:f4:7d:80:85:b3:ad:bb:da:88:
         6c:55:da:7f:06:01:6e:a6:b0:c3:c3:db:b0:23:a1:3c:c3:95:
         82:94:7e:6d:e1:da:cd:38:50:53:ec:60:41:45:93:fc:ca:54:
         98:1d:2b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:25:07 2025 by rpki-client