Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/37c28cd7-25f4-3373-b2f9-924b3fa5f188.roa
File:                     37c28cd7-25f4-3373-b2f9-924b3fa5f188.roa (raw, json)
Hash identifier:          SnpHsFVGJUlhV4P0JouPQtVfZvBwIAQlhK2Q/2CLCc8=
Subject key identifier:   35:9B:94:79:BF:E4:2A:34:57:5D:1F:DA:35:F5:8B:00:31:34:7A:0E
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F43285848424AE278092719C6CB7034C0
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/37c28cd7-25f4-3373-b2f9-924b3fa5f188.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     26744
IP address blocks:        68.170.248.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:e2:78:09:27:19:c6:cb:70:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=4e056bd2-65e3-4dab-9f1e-a096a4630732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ee:18:4c:4d:fa:cd:07:72:fb:a7:d7:c2:f1:
                    8f:98:ad:ac:e4:9c:96:97:68:21:e4:12:d4:4f:09:
                    7b:b0:17:c4:7f:7f:f4:61:db:ee:cc:0e:1f:b7:66:
                    3e:f2:2a:f6:f7:08:25:3f:49:62:7c:64:51:2d:8e:
                    05:a4:d2:82:96:c2:3e:6a:aa:a7:72:12:84:35:6c:
                    be:89:ee:c3:04:01:21:b5:54:9d:f7:6e:e6:8c:5d:
                    b9:20:4a:f0:6e:41:24:cd:ad:ff:34:69:2d:c6:7c:
                    fc:e8:0d:db:d3:f7:58:3e:0c:3b:c3:4d:68:ef:91:
                    32:6e:78:46:10:45:46:94:d2:e3:65:56:b1:46:31:
                    33:34:21:89:3b:30:e2:28:ba:b6:8b:8c:47:8f:b3:
                    ce:0f:48:0d:60:60:89:15:41:8f:79:74:cf:f0:8f:
                    49:e6:02:09:6f:c3:77:5e:fb:93:d5:87:9b:3c:12:
                    ab:a2:4f:48:71:4d:10:e0:e0:3c:6a:78:bb:ea:ad:
                    ba:a6:5d:91:36:94:3f:6e:38:cb:a8:a7:7e:da:31:
                    40:23:08:69:ac:fe:9a:6e:42:59:74:5f:0a:00:5f:
                    33:c2:01:f9:84:59:7d:39:11:85:85:2b:ec:78:cb:
                    38:21:d0:8d:4b:9f:f3:af:cc:44:01:a5:e0:4c:30:
                    17:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9B:94:79:BF:E4:2A:34:57:5D:1F:DA:35:F5:8B:00:31:34:7A:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/37c28cd7-25f4-3373-b2f9-924b3fa5f188.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:8f:36:00:e7:4c:25:41:75:b2:96:dd:8d:be:67:30:a2:f5:
         37:e3:ad:29:72:e6:01:e9:f3:6c:65:5e:10:d7:b4:2e:f0:8c:
         88:60:5f:d3:f3:59:b4:5c:d4:3a:55:ee:44:4e:e0:02:86:37:
         51:fb:66:72:5e:70:0d:3d:62:9f:8a:f0:ec:40:21:37:3f:2d:
         9a:c9:51:be:e5:87:88:88:b7:d9:fc:4c:5d:e8:0e:fe:fd:4a:
         d8:8b:7c:4a:e1:ce:e1:b7:d8:9a:2f:fb:78:c6:64:39:85:9c:
         67:80:6b:2e:22:17:a2:2e:ec:0a:12:a3:27:f7:a3:49:ba:7a:
         ca:7c:96:b2:b1:b7:56:00:17:3f:d3:6d:0f:32:88:47:be:89:
         08:05:17:b3:39:2b:ca:e5:4f:cc:8b:02:2e:53:11:43:e8:02:
         6c:31:8f:ee:03:dd:2f:04:0e:a4:4b:82:41:c1:b8:54:f0:a1:
         2e:4d:20:ee:e4:6b:25:ea:95:0d:b4:3b:68:13:80:28:6c:5f:
         61:01:52:a4:14:f7:8a:29:37:13:12:aa:07:aa:d0:63:d4:cb:
         b4:38:29:12:ec:38:8e:f6:86:99:45:61:32:e5:fe:ba:79:dc:
         a8:57:d2:ac:d0:3a:39:23:24:e1:88:44:88:12:62:76:26:a4:
         48:fd:20:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhCSuJ4CScZxstwNMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj
ZjFhMB4XDTI0MTIxOTE0MDA1MloXDTI1MDMxOTEzMDA1MlowLzEtMCsGA1UEAxMk
NGUwNTZiZDItNjVlMy00ZGFiLTlmMWUtYTA5NmE0NjMwNzMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApe4YTE36zQdy+6fXwvGPmK2s5JyWl2gh5BLU
Twl7sBfEf3/0YdvuzA4ft2Y+8ir29wglP0lifGRRLY4FpNKClsI+aqqnchKENWy+
ie7DBAEhtVSd927mjF25IErwbkEkza3/NGktxnz86A3b0/dYPgw7w01o75EybnhG
EEVGlNLjZVaxRjEzNCGJOzDiKLq2i4xHj7POD0gNYGCJFUGPeXTP8I9J5gIJb8N3
XvuT1YebPBKrok9IcU0Q4OA8ani76q26pl2RNpQ/bjjLqKd+2jFAIwhprP6abkJZ
dF8KAF8zwgH5hFl9ORGFhSvseMs4IdCNS5/zr8xEAaXgTDAXgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDWblHm/5Co0V10f2jX1iwAxNHoOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4
NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvMzdjMjhjZDctMjVmNC0z
MzczLWIyZjktOTI0YjNmYTVmMTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm
ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk
Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx
OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRKr4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ2PNgDnTCVBdbKW3Y2+ZzCi9TfjrSly5gHp82xlXhDXtC7wjIhgX9Pz
WbRc1DpV7kRO4AKGN1H7ZnJecA09Yp+K8OxAITc/LZrJUb7lh4iIt9n8TF3oDv79
StiLfErhzuG32Jov+3jGZDmFnGeAay4iF6Iu7AoSoyf3o0m6esp8lrKxt1YAFz/T
bQ8yiEe+iQgFF7M5K8rlT8yLAi5TEUPoAmwxj+4D3S8EDqRLgkHBuFTwoS5NIO7k
ayXqlQ20O2gTgChsX2EBUqQU94opNxMSqgeq0GPUy7Q4KRLsOI72hplFYTLl/rp5
3KhX0qzQOjkjJOGIRIgSYnYmpEj9IP8=
-----END CERTIFICATE-----
Generated at Mon May 12 14:00:37 2025 by rpki-client