Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/047692f9-4c45-3534-9455-58a8a7660d58.roa
File:                     047692f9-4c45-3534-9455-58a8a7660d58.roa (raw, json)
Hash identifier:          pAapVfKeoWt5ptuE5sAZa2pvAuUhe6HnzUNJxpFmcjM=
Subject key identifier:   79:B2:57:3A:0D:B1:8E:82:28:12:37:9F:CD:62:45:17:35:DA:62:CB
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285847E62B39DC03B3F5491CBA4280
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/047692f9-4c45-3534-9455-58a8a7660d58.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     15169
IP address blocks:        208.76.68.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:39:dc:03:b3:f5:49:1c:ba:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=ec70e34e-bdac-4531-bb13-d937d5f992de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9c:7a:44:3a:b5:8c:fc:de:99:8a:65:d6:b0:
                    a4:0a:55:4b:78:11:68:28:c3:12:e3:c5:bd:23:03:
                    42:e9:75:c7:da:6c:b3:f8:6c:44:10:09:c4:65:59:
                    3b:60:47:61:c0:26:38:2a:62:62:81:bf:80:e2:a4:
                    78:e1:09:6e:98:98:d1:cc:7a:96:81:da:89:14:1a:
                    14:03:c8:38:ba:ac:2d:5c:69:ac:a0:2a:73:5c:69:
                    36:aa:c5:e9:8f:de:22:3a:be:85:9f:79:10:53:eb:
                    3a:67:00:7e:7e:6b:93:b8:b8:47:a6:7f:ed:f9:73:
                    ed:dc:2c:d2:92:9f:7b:41:c7:b0:26:8f:46:a6:f0:
                    7c:83:7a:69:20:da:46:25:11:a6:07:01:26:62:55:
                    8d:4d:ba:18:f9:55:fb:57:a1:6b:02:b8:60:3d:cf:
                    6a:70:35:9e:0c:46:0c:de:6d:72:4b:de:0f:88:6b:
                    95:f9:6d:8e:08:a7:c7:07:e1:38:6a:0e:66:5c:56:
                    5e:3a:ae:b1:ed:b0:27:0a:28:8f:71:9a:fa:85:89:
                    9d:f7:58:ef:0a:fd:8f:41:76:f2:42:fd:4c:1f:98:
                    9a:82:09:0c:8b:07:cc:1d:0b:eb:5b:c5:48:9c:6c:
                    fd:bc:3e:7f:08:33:06:34:e6:a9:9e:0d:bb:06:9e:
                    20:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B2:57:3A:0D:B1:8E:82:28:12:37:9F:CD:62:45:17:35:DA:62:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/047692f9-4c45-3534-9455-58a8a7660d58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:fa:a0:ca:1d:e5:48:b5:43:19:32:18:db:5c:88:ad:d1:ef:
         db:90:db:6a:99:51:28:22:ef:09:d0:24:c2:e5:57:c0:d8:ea:
         72:94:c5:af:c7:18:86:b5:c3:40:7a:d7:8a:82:31:48:c4:6f:
         80:43:d2:b0:60:79:91:06:68:8e:6c:98:9b:7d:ab:d0:b8:c7:
         6b:4e:e8:f0:34:81:02:63:1b:47:e1:d7:e8:44:0e:c2:e5:74:
         b9:78:3b:fb:b7:37:b5:cd:1e:4b:98:72:6b:ed:1c:e5:bb:21:
         c2:a2:47:47:3f:92:3e:d5:c7:b0:9f:93:06:c7:b3:d5:c3:7f:
         f7:39:52:aa:12:94:ae:b2:4a:88:a5:67:a6:82:a1:b8:f0:81:
         95:92:28:f9:c1:75:d9:1a:52:0b:3e:f9:ef:c5:72:08:db:f2:
         9a:9d:ff:32:5a:52:45:f6:e7:a7:72:51:a8:c7:cb:41:a3:e8:
         95:11:b9:58:87:67:e4:b1:ba:ef:ec:e1:78:2a:c6:49:20:b8:
         57:85:d8:e9:f7:e9:b7:72:1f:3d:d4:5e:90:48:71:ee:43:19:
         e3:38:48:4b:23:e7:bb:5f:99:06:a6:74:dc:1b:b0:e1:85:7c:
         29:4b:cf:48:03:4a:66:fb:f4:18:dd:35:72:54:3b:fa:e4:6b:
         9d:cf:d7:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKzncA7P1SRy6QoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZWM3MGUzNGUtYmRhYy00NTMxLWJiMTMtZDkzN2Q1Zjk5MmRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Zx6RDq1jPzemYpl1rCkClVLeBFoKMMS48W9
IwNC6XXH2myz+GxEEAnEZVk7YEdhwCY4KmJigb+A4qR44QlumJjRzHqWgdqJFBoU
A8g4uqwtXGmsoCpzXGk2qsXpj94iOr6Fn3kQU+s6ZwB+fmuTuLhHpn/t+XPt3CzS
kp97QcewJo9GpvB8g3ppINpGJRGmBwEmYlWNTboY+VX7V6FrArhgPc9qcDWeDEYM
3m1yS94PiGuV+W2OCKfHB+E4ag5mXFZeOq6x7bAnCiiPcZr6hYmd91jvCv2PQXby
Qv1MH5iaggkMiwfMHQvrW8VInGz9vD5/CDMGNOapng27Bp4gfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHmyVzoNsY6CKBI3n81iRRc12mLLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDQ3NjkyZjktNGM0NS0z
NTM0LTk0NTUtNThhOGE3NjYwZDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ExEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD/6oMod5Ui1QxkyGNtciK3R79uQ22qZUSgi7wnQJMLlV8DY6nKUxa/H
GIa1w0B614qCMUjEb4BD0rBgeZEGaI5smJt9q9C4x2tO6PA0gQJjG0fh1+hEDsLl
dLl4O/u3N7XNHkuYcmvtHOW7IcKiR0c/kj7Vx7CfkwbHs9XDf/c5UqoSlK6ySoil
Z6aCobjwgZWSKPnBddkaUgs++e/Fcgjb8pqd/zJaUkX256dyUajHy0Gj6JURuViH
Z+Sxuu/s4XgqxkkguFeF2On36bdyHz3UXpBIce5DGeM4SEsj57tfmQamdNwbsOGF
fClLz0gDSmb79BjdNXJUO/rka53P13s=
-----END CERTIFICATE-----