Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/a6c46de6-44a0-300d-bf19-e635e93471d5.roa
File:                     a6c46de6-44a0-300d-bf19-e635e93471d5.roa (raw, json)
Hash identifier:          slUlYI3HZgkPkqvb+SxZN/IshBVKBNGnFXNBNOw78/E=
Subject key identifier:   39:83:84:D7:48:86:E1:15:54:79:71:54:42:6E:36:9F:86:54:94:D0
Certificate issuer:       /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
Certificate serial:       010D0C9F4328584839EACB08778C60B00347DC00
Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/a6c46de6-44a0-300d-bf19-e635e93471d5.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     16509
IP address blocks:        68.71.239.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:cb:08:77:8c:60:b0:03:47:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=1e344de5-9454-4610-a09a-a8eb865819de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:54:e8:4d:54:39:6d:09:99:17:c9:a6:33:0e:
                    68:d3:27:ab:43:b5:85:b8:f7:3d:86:a0:d9:dd:17:
                    73:65:c6:46:0e:8e:89:68:ac:cd:36:63:0f:56:ba:
                    24:1b:76:36:c2:31:21:5e:b7:e2:d8:a0:e3:83:d1:
                    d2:31:61:83:2b:31:39:a8:86:44:da:9c:61:f7:f2:
                    e9:9d:9c:17:bb:2b:24:40:5d:4d:41:72:2f:97:0d:
                    18:e6:27:9e:9b:69:6b:9e:03:45:d7:44:f0:82:90:
                    ed:1c:bb:5a:85:0c:f0:bb:a7:9f:12:12:3b:94:45:
                    b4:e0:6e:62:60:f3:f5:22:42:aa:0d:a1:e8:47:9b:
                    1c:d5:4c:e9:32:87:c4:f7:57:e1:2e:3b:3a:78:99:
                    7c:11:1e:57:78:09:d1:15:03:76:a1:17:fe:f9:9d:
                    6e:e3:f0:ff:65:ef:7d:08:02:79:b0:cc:b5:22:cb:
                    ee:1e:97:e0:16:7c:56:bc:fa:c2:c6:f9:f9:c2:28:
                    8c:71:23:07:51:4e:51:3e:aa:05:67:a7:aa:a2:9c:
                    09:e4:73:e4:35:77:d7:ce:4d:98:3b:dd:80:d7:05:
                    7d:83:53:1b:97:49:60:7f:aa:3e:61:f0:5d:ee:7e:
                    52:ec:4a:10:53:0e:1b:ae:e5:2c:93:0d:39:58:97:
                    12:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:83:84:D7:48:86:E1:15:54:79:71:54:42:6E:36:9F:86:54:94:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/a6c46de6-44a0-300d-bf19-e635e93471d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl

            X509v3 Authority Key Identifier:
                keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.71.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:a6:79:83:76:13:1f:27:b8:9b:6e:b0:bb:d3:88:56:b3:9f:
         fc:7e:b7:4c:0d:2c:8c:1c:20:1a:68:ca:58:a8:ec:f5:86:26:
         e4:33:dc:f4:6e:71:69:33:24:40:bd:ae:8c:f3:2c:b3:29:1d:
         e2:fb:07:b9:b1:1f:51:53:cf:a5:04:76:c2:6c:bd:6b:11:d1:
         fc:06:4a:14:2f:f6:33:1d:1c:3b:0a:e9:18:b7:26:f7:aa:7a:
         78:6c:ab:0f:60:a4:e4:08:05:a1:9c:4f:f8:da:e1:d9:f0:c6:
         f9:10:52:58:bc:9b:76:0a:d7:ba:85:15:79:10:9d:1d:3b:a0:
         2f:ce:70:25:27:39:1e:4e:eb:7d:96:af:da:43:80:6c:7b:bf:
         d9:5a:5c:2b:b8:98:97:94:6b:8a:17:9f:93:61:cd:89:18:b2:
         12:ca:dd:ab:4a:a2:81:85:40:2b:46:de:bc:e5:1d:37:d2:f2:
         dc:de:9a:e7:7a:5e:3a:04:ce:0e:73:b9:9c:5f:7a:df:90:46:
         21:01:8c:6e:c3:40:c8:98:56:8c:cc:bf:fa:d1:0b:97:26:3e:
         60:fd:5a:a9:3c:14:2b:5d:a0:33:53:d5:e6:dd:29:37:12:0a:
         22:21:51:0e:50:f3:f8:1e:99:db:32:7d:2b:e4:d8:8a:a3:35:
         17:c1:50:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:22:37 2025 by rpki-client