Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/67fb9365-155a-30e2-9cb0-ea2989748078.roa
File:                     67fb9365-155a-30e2-9cb0-ea2989748078.roa (raw, json)
Hash identifier:          xMKuM8u/r9x9G+XSq2ata8u/ctOmz62rAnMOXnOvKJ8=
Subject key identifier:   97:4D:A5:21:F6:22:4E:A3:E0:51:D3:6D:D0:41:48:CB:B7:34:FE:B7
Certificate issuer:       /CN=62ec8079-292d-409a-a736-bddf9af8d979
Certificate serial:       010D0C9F43285848494572F0B20DA5A3B95C3E00
Authority key identifier: 4F:1D:B2:21:08:86:59:09:1F:12:81:5A:33:08:93:1E:E6:08:97:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/67fb9365-155a-30e2-9cb0-ea2989748078.roa
Signing time:             Sun 22 Dec 2024 02:00:39 +0000
ROA not before:           Sun 22 Dec 2024 02:00:39 +0000
ROA not after:            Sat 22 Mar 2025 01:00:39 +0000
asID:                     46353
IP address blocks:        208.67.60.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:49:45:72:f0:b2:0d:a5:a3:b9:5c:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62ec8079-292d-409a-a736-bddf9af8d979
        Validity
            Not Before: Dec 22 02:00:39 2024 GMT
            Not After : Mar 22 01:00:39 2025 GMT
        Subject: CN=505bca79-f57a-4ba9-b36f-a883c1f01c5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:64:00:e5:82:77:46:d1:56:4d:ad:60:3a:ff:
                    f7:6a:8d:82:65:b1:40:e4:6e:a0:65:f4:98:2f:9b:
                    f7:36:a1:52:97:dd:41:fa:38:1a:0a:74:30:72:1f:
                    a1:1a:df:68:77:b2:5a:50:9f:5f:c9:25:a9:7b:14:
                    8e:4d:e3:4c:9a:7f:9c:94:c7:a7:9a:12:5d:d1:99:
                    8b:74:f8:a9:85:fb:bf:3f:8e:42:db:27:ad:99:23:
                    ee:4f:2a:3b:ab:7f:c7:da:24:cd:a5:5a:f4:72:d7:
                    07:60:e5:d4:5b:63:f5:f9:7f:b5:76:21:d6:f0:81:
                    87:c9:07:09:8c:fc:8c:74:c0:c6:8d:04:6b:16:cd:
                    12:d9:95:15:81:66:4d:63:0f:05:de:8a:71:3e:d2:
                    0d:2d:41:2e:90:66:57:1a:cb:db:f4:93:84:7b:48:
                    8c:97:78:5e:d2:ac:4c:1d:c0:2d:b0:e7:1d:23:57:
                    cb:aa:36:81:87:14:01:43:9e:7c:cb:ea:4f:39:0e:
                    ab:1d:43:f6:a3:88:8a:73:49:9c:2b:b7:4c:06:cf:
                    de:8f:85:93:90:2b:c0:db:a3:35:81:49:4c:17:8e:
                    e4:78:45:d3:14:a0:a5:ba:f9:69:53:b4:cc:4d:fa:
                    84:2e:38:19:bc:7f:d1:cc:37:23:bc:8c:91:9a:56:
                    ea:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:4D:A5:21:F6:22:4E:A3:E0:51:D3:6D:D0:41:48:CB:B7:34:FE:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/67fb9365-155a-30e2-9cb0-ea2989748078.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/62ec8079-292d-409a-a736-bddf9af8d979.crl

            X509v3 Authority Key Identifier:
                keyid:4F:1D:B2:21:08:86:59:09:1F:12:81:5A:33:08:93:1E:E6:08:97:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.67.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:56:8e:88:8f:03:e3:7e:e9:d9:e7:6b:aa:15:b9:5f:03:61:
         1f:fa:53:6d:32:4f:2c:c7:6a:df:c8:be:65:db:c5:9b:c4:3d:
         20:fd:4d:46:04:f3:ff:ab:4c:c5:b7:18:53:8e:b0:15:35:d6:
         42:f1:65:fd:15:67:7b:8b:f0:ae:0e:c0:ac:45:07:86:ad:bb:
         28:6e:cc:51:f0:c2:cb:c6:e3:cc:e0:6f:a4:85:a4:2e:d3:10:
         b3:49:d0:8a:5b:6e:17:43:35:ed:4a:f5:2a:c7:0f:95:a3:5b:
         4e:71:f2:3d:63:a2:1f:44:fa:3e:f9:16:10:af:e1:25:79:2d:
         9b:e8:e0:0b:cf:17:a2:31:11:b7:3d:f7:f4:92:80:7c:64:b8:
         4f:33:4c:c8:35:7c:50:65:c7:2a:54:ad:64:0f:2f:f5:d2:71:
         47:1e:a3:26:b9:a5:69:9c:0c:8c:c0:d2:e3:9e:80:87:93:a4:
         6e:69:b7:03:13:fe:ba:a7:68:d6:94:7c:41:0c:74:92:a4:80:
         69:4b:95:ff:f9:de:82:8d:11:ca:46:68:5f:d0:98:ef:0d:b0:
         53:e3:b3:6a:b7:e0:3c:61:84:3e:6d:a4:a3:f0:eb:98:3c:3c:
         7c:47:80:15:f8:59:24:7c:8e:00:50:33:c5:f9:92:83:e2:20:
         d6:e8:70:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:17:11 2025 by rpki-client