Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/aea246dd-f02e-3e52-8187-f1cf2722c6a2.roa
File:                     aea246dd-f02e-3e52-8187-f1cf2722c6a2.roa (raw, json)
Hash identifier:          //Ywh/yoo/IAnqBm96U+ohmC8yy3SCsolJMCH0oTnuk=
Subject key identifier:   10:40:3F:00:7D:1C:D7:C4:49:E4:D1:2E:9A:F0:01:26:FE:93:FE:B9
Certificate issuer:       /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Certificate serial:       010D0C9F43285847ED24C84EB401FC82E36F3040
Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/aea246dd-f02e-3e52-8187-f1cf2722c6a2.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     14618
IP address blocks:        68.233.40.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:c8:4e:b4:01:fc:82:e3:6f:30:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=3f517875-473a-41ed-95a1-a76bfe69d0b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:83:99:65:d5:47:a8:fd:95:4a:1e:ec:c8:76:
                    4b:85:42:2e:eb:1b:91:20:44:d5:81:ea:6b:e9:f6:
                    25:01:bf:ee:5b:ab:dc:f7:62:42:68:ce:9c:74:ce:
                    91:f4:4c:0e:b5:09:91:dc:bb:67:38:da:e9:7f:39:
                    2c:96:54:e0:8f:77:f8:72:36:ca:61:b1:6d:8c:6b:
                    92:eb:19:8d:75:bb:fb:10:ed:10:de:20:82:2a:9e:
                    ce:67:8a:95:a0:c3:b4:c9:d0:63:69:54:3e:e0:29:
                    c9:8e:b3:3e:46:91:4e:1a:f0:e2:52:89:36:15:2b:
                    a0:89:f1:6a:88:8c:1f:e4:5d:d1:2f:9d:6c:52:95:
                    e6:e7:20:4f:82:0e:62:05:b0:2c:a1:16:32:9b:41:
                    a0:3c:d1:30:aa:b1:dd:46:c3:60:8f:cf:eb:c0:1d:
                    b4:48:bc:37:9e:72:7f:b9:19:03:bb:1d:ff:f1:0c:
                    29:d7:21:8a:ca:b3:4a:18:42:7a:d0:1d:ac:b3:56:
                    da:f7:6e:33:9c:31:76:24:01:fe:23:79:fc:28:7c:
                    b7:3b:cf:47:44:94:dc:8c:b4:a7:e3:ae:51:b9:37:
                    d5:f3:6b:2d:52:60:ba:b9:ed:b0:6d:ee:fb:bc:1e:
                    da:77:78:8c:36:da:2e:b9:61:b7:db:3d:ce:37:e7:
                    d7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:40:3F:00:7D:1C:D7:C4:49:E4:D1:2E:9A:F0:01:26:FE:93:FE:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/aea246dd-f02e-3e52-8187-f1cf2722c6a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl

            X509v3 Authority Key Identifier:
                keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.233.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:9a:fc:f0:51:31:c0:59:60:29:51:bd:03:98:b2:59:da:7a:
         1c:7e:10:70:b4:1e:cf:bf:9f:04:7d:4b:e3:18:62:a2:d8:bc:
         f6:86:c3:2f:c6:c4:d5:cf:a0:dc:5f:27:24:03:d6:61:05:e7:
         00:26:41:3f:8f:44:65:69:fa:64:15:9c:92:0d:93:89:21:2b:
         b2:ec:86:70:6e:29:25:a7:7d:c5:ea:8f:2d:02:44:8f:53:6e:
         68:a1:55:a5:13:da:2b:85:20:ca:34:e0:17:26:30:34:2a:04:
         b6:96:1f:0b:5e:eb:ee:93:f7:c4:3e:6a:ca:32:e3:8b:20:af:
         cd:a0:28:70:f4:ff:c2:19:9c:10:48:a1:c7:d4:55:7f:80:54:
         f3:7c:18:36:08:e0:37:af:e4:c4:73:73:1c:17:8a:8c:5d:85:
         8a:5f:9f:1d:e3:be:af:d7:9d:74:c9:1e:a0:92:c7:a9:a4:c6:
         79:37:a2:8f:47:de:1f:33:41:e1:72:4d:b9:d6:74:3c:cb:0e:
         6d:47:69:87:62:ad:54:ae:9b:63:5c:b0:a4:69:43:23:67:78:
         df:d9:ab:7f:03:6f:e7:4b:f4:5b:86:c7:df:e3:fe:9f:9a:12:
         9a:44:fd:44:0e:08:8f:66:f7:5d:e9:88:09:cc:39:f3:56:9c:
         3a:e6:4b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:47 2025 by rpki-client