Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da3efc9f-d7c2-36ab-8ef3-f6fecd25b490.roa
File:                     da3efc9f-d7c2-36ab-8ef3-f6fecd25b490.roa (raw, json)
Hash identifier:          LxtcIkbcmyhju8eyX+4Oz4cBlfgFUL05Bvd3IZQand8=
Subject key identifier:   4A:E7:6B:C4:A4:C9:90:29:AC:02:D1:2B:48:5F:D6:8C:79:48:9F:9E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858480BDA57CC1E823BCD88110940
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da3efc9f-d7c2-36ab-8ef3-f6fecd25b490.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     7029
IP address blocks:        68.68.106.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:57:cc:1e:82:3b:cd:88:11:09:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=7760f05c-4b70-46b1-928f-dc5737de3d10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c4:55:96:c1:7c:a5:41:96:4d:47:1f:11:db:
                    d5:e1:6d:aa:5e:2d:44:23:b5:61:dd:57:bd:29:cb:
                    b7:44:13:fe:75:d7:d0:d3:fb:c1:82:30:53:db:ce:
                    15:34:69:eb:a4:36:bb:3a:62:2b:0e:74:64:20:66:
                    ec:12:ed:14:b9:0d:d8:9e:31:92:ad:4d:1e:1c:73:
                    37:53:6d:c8:d8:b1:e3:77:ca:e4:0f:90:ae:36:81:
                    c0:87:f6:02:2b:39:8e:2a:8f:59:c4:b8:d7:41:a5:
                    62:fb:07:1b:67:14:c5:8c:ac:a3:1a:98:a6:6f:27:
                    b7:55:68:93:88:0a:a9:51:fa:8c:73:c4:6e:67:cc:
                    f4:2c:1a:ed:c2:2d:a1:eb:8d:e7:91:5d:21:d0:70:
                    23:c5:74:1c:1a:38:da:d8:00:fe:c6:a4:e9:a8:51:
                    06:cc:0d:2a:6f:19:db:ee:94:a9:85:11:30:55:bf:
                    15:fa:90:b9:82:1b:04:d6:6a:93:01:59:c7:2b:c2:
                    50:d0:39:d4:2e:92:e1:6d:7c:ba:c6:96:c7:c1:fc:
                    85:65:3d:06:e0:03:13:a6:62:8b:67:30:3b:66:0b:
                    b5:26:d1:48:e0:92:cc:aa:4e:90:54:00:5b:ac:7e:
                    ad:5c:38:41:ac:81:03:c1:53:ec:e0:6f:33:a6:af:
                    b7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E7:6B:C4:A4:C9:90:29:AC:02:D1:2B:48:5F:D6:8C:79:48:9F:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da3efc9f-d7c2-36ab-8ef3-f6fecd25b490.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.68.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:e2:94:ae:ec:cc:2d:70:2f:34:72:af:3c:81:64:2e:0e:1b:
         d2:3d:2b:ce:32:22:8e:4b:30:02:7b:d6:0d:82:a3:bf:b4:52:
         20:de:62:98:84:43:fb:17:82:9a:5c:22:3f:72:d0:75:20:5d:
         2d:ed:f1:fd:d3:42:d3:a9:91:58:c9:cb:44:62:2c:6f:f2:f1:
         fb:40:46:c5:ac:27:9a:19:9e:63:46:3a:91:ac:11:c1:07:83:
         4d:bb:47:e9:7a:b7:11:82:c2:38:1a:2a:58:91:01:a0:86:bb:
         67:a1:a6:c7:03:dd:dc:19:b4:de:f4:a3:64:ff:a5:29:85:87:
         3c:79:28:c1:ce:19:62:ef:4c:0a:94:77:16:80:03:bb:64:83:
         3c:14:1a:27:fd:04:c1:36:48:cc:85:fb:6f:55:a2:e2:d7:38:
         3e:11:7a:81:5e:6c:9b:3f:ae:31:ca:14:a8:6b:61:76:cc:d4:
         1f:5e:5a:96:1b:91:d3:c7:50:2e:c3:b1:ad:e8:2a:01:2e:30:
         10:bc:d5:ab:86:e9:55:b4:69:35:ef:ea:6c:da:b2:d0:12:d8:
         99:a6:f5:e6:e7:fa:ee:b9:4e:b1:98:f5:ce:8a:21:96:c8:f1:
         86:20:8b:1e:30:f0:be:f4:ae:b6:87:c9:96:6e:6e:38:d2:31:
         ad:a9:d1:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgL2lfMHoI7zYgRCUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk
Nzc2MGYwNWMtNGI3MC00NmIxLTkyOGYtZGM1NzM3ZGUzZDEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sRVlsF8pUGWTUcfEdvV4W2qXi1EI7Vh3Ve9
Kcu3RBP+ddfQ0/vBgjBT284VNGnrpDa7OmIrDnRkIGbsEu0UuQ3YnjGSrU0eHHM3
U23I2LHjd8rkD5CuNoHAh/YCKzmOKo9ZxLjXQaVi+wcbZxTFjKyjGpimbye3VWiT
iAqpUfqMc8RuZ8z0LBrtwi2h643nkV0h0HAjxXQcGjja2AD+xqTpqFEGzA0qbxnb
7pSphREwVb8V+pC5ghsE1mqTAVnHK8JQ0DnULpLhbXy6xpbHwfyFZT0G4AMTpmKL
ZzA7Zgu1JtFI4JLMqk6QVABbrH6tXDhBrIEDwVPs4G8zpq+3dwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFErna8SkyZAprALRK0hf1ox5SJ+eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZGEzZWZjOWYtZDdjMi0z
NmFiLThlZjMtZjZmZWNkMjViNDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARERqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIjilK7szC1wLzRyrzyBZC4OG9I9K84yIo5LMAJ71g2Co7+0UiDeYpiE
Q/sXgppcIj9y0HUgXS3t8f3TQtOpkVjJy0RiLG/y8ftARsWsJ5oZnmNGOpGsEcEH
g027R+l6txGCwjgaKliRAaCGu2ehpscD3dwZtN70o2T/pSmFhzx5KMHOGWLvTAqU
dxaAA7tkgzwUGif9BME2SMyF+29VouLXOD4ReoFebJs/rjHKFKhrYXbM1B9eWpYb
kdPHUC7Dsa3oKgEuMBC81auG6VW0aTXv6mzastAS2Jmm9ebn+u65TrGY9c6KIZbI
8YYgix4w8L70rraHyZZubjjSMa2p0VA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:29:24 2025 by rpki-client