Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/770edb79-903e-30a3-9028-652c938b0a72.roa
File:                     770edb79-903e-30a3-9028-652c938b0a72.roa (raw, json)
Hash identifier:          FkCY6+NQQyVmJ2ZZYkXQxGNygL869qOCzDRWdeGnm1Y=
Subject key identifier:   C4:2B:D3:05:C7:82:78:15:F4:40:1D:3E:34:B5:61:09:A0:99:4B:EF
Certificate issuer:       /CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3
Certificate serial:       010D0C9F4328584806450565214BA230D91D4BC0
Authority key identifier: EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/770edb79-903e-30a3-9028-652c938b0a72.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     19528
IP address blocks:        68.69.0.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:45:05:65:21:4b:a2:30:d9:1d:4b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=05043083-1e0e-4234-b7db-f4c5c6d46bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:43:3b:88:bf:26:38:f4:4d:37:76:0e:4f:f0:
                    c4:24:56:eb:bf:f7:d1:14:c1:6d:95:be:69:21:96:
                    c9:f7:1e:89:23:e7:0d:b6:d3:f1:a0:16:22:81:38:
                    38:95:25:28:a8:5b:87:84:10:1f:92:69:44:9a:48:
                    f7:f1:8b:a1:77:b1:52:c9:62:1e:fd:e8:4c:5f:26:
                    d5:2e:7e:01:9f:a0:0e:29:12:41:73:ac:08:ba:24:
                    f6:20:f8:34:5b:03:7a:bc:29:46:85:de:f5:22:e5:
                    80:ce:a1:83:ac:a9:3b:cb:9b:6d:88:86:27:31:cd:
                    77:3f:7a:90:01:53:6b:54:8b:8c:94:2a:8d:41:1b:
                    28:0a:ae:2b:3f:80:40:5e:b8:b7:15:da:b4:82:74:
                    50:9c:c2:92:eb:bc:fd:9b:a6:42:c3:80:42:d0:12:
                    03:21:21:f7:86:9a:85:96:f7:9b:27:1e:ab:28:26:
                    40:0c:9d:5f:7a:70:2c:e5:02:19:f0:36:66:e3:f1:
                    07:27:08:6a:e4:89:82:2f:d8:84:09:66:1c:f8:b5:
                    42:ca:01:8f:32:da:a3:e2:d2:8a:f2:de:a1:42:85:
                    f0:59:dc:37:bf:6a:a5:83:36:27:27:ed:fb:d7:be:
                    01:e9:62:32:7c:46:fe:39:0a:ba:e2:57:bc:1a:b7:
                    03:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:2B:D3:05:C7:82:78:15:F4:40:1D:3E:34:B5:61:09:A0:99:4B:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/770edb79-903e-30a3-9028-652c938b0a72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl

            X509v3 Authority Key Identifier:
                keyid:EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:c7:68:75:a9:34:42:10:e6:ff:1a:67:9c:e6:e6:ac:d0:b4:
         9d:33:a5:ba:7a:1d:89:ca:13:99:2b:26:8a:9f:93:63:1a:11:
         31:13:e5:05:08:8c:91:14:b9:60:af:cb:a2:e5:71:db:c0:23:
         73:ed:de:94:4a:4c:ef:62:59:a3:f8:ab:2a:4d:7b:17:ce:a5:
         b5:41:64:64:8f:07:68:5d:2e:34:1f:57:c9:89:73:91:23:4b:
         69:3b:8d:bf:93:24:c1:a9:9f:2c:04:39:a1:d8:16:a3:13:52:
         ca:fa:93:87:28:ba:69:cb:82:39:0a:b3:a7:e6:62:d0:09:10:
         c9:47:b1:19:e5:c3:85:a8:7e:c1:c2:42:67:5f:ee:c2:9b:73:
         88:03:40:a5:a2:01:76:e0:7f:84:e2:ee:18:78:1e:3e:d1:ce:
         3b:c7:11:ba:54:2d:2e:bd:6b:97:25:dc:8d:f8:1d:81:41:e4:
         12:b3:7f:f6:85:35:89:d4:67:ae:34:57:04:dc:7a:06:da:8c:
         c9:60:86:f0:3f:1d:48:0f:2b:f6:a2:d2:49:c1:06:b7:4e:52:
         84:4a:bb:b5:e8:e4:33:91:d7:f8:5f:db:1c:4a:c8:24:c7:0b:
         4e:1a:43:1d:40:d0:32:40:25:4e:18:fb:eb:32:46:d0:58:c2:
         a0:69:58:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:36:32 2025 by rpki-client