Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a153cfa6-cf85-3cc1-a9c0-7af65cf593b3.roa
File:                     a153cfa6-cf85-3cc1-a9c0-7af65cf593b3.roa (raw, json)
Hash identifier:          YCFQK3+f8CnujGChUgseDQLATg7ONFijfJ15xvi/ugg=
Subject key identifier:   DA:12:8E:A7:EC:8E:3E:B4:BE:C3:35:8E:B3:1E:05:7B:DC:34:B6:7E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858482BF55F79B1307C96D3D35340
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a153cfa6-cf85-3cc1-a9c0-7af65cf593b3.roa
Signing time:             Wed 11 Dec 2024 14:00:52 +0000
ROA not before:           Wed 11 Dec 2024 14:00:52 +0000
ROA not after:            Tue 11 Mar 2025 13:00:52 +0000
asID:                     701
IP address blocks:        68.237.192.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2b:f5:5f:79:b1:30:7c:96:d3:d3:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 11 14:00:52 2024 GMT
            Not After : Mar 11 13:00:52 2025 GMT
        Subject: CN=54d5bdf9-6c68-48a0-9648-6bc5641ebe7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fd:bf:64:ba:da:ae:c1:65:0b:bf:25:9f:47:
                    5c:00:48:62:ec:9d:80:82:ba:e5:4e:f9:5b:98:62:
                    97:75:e5:de:c0:6d:43:59:f2:5f:85:3a:6d:fa:d2:
                    12:61:8e:30:9e:0a:e3:6b:73:3f:02:9a:88:76:84:
                    7f:03:2c:a9:61:a7:3c:df:84:72:9d:51:dd:d0:82:
                    c6:92:0b:df:cd:2b:1e:19:42:2d:8d:c4:0a:78:33:
                    37:c6:c2:c1:5c:cf:a3:da:8e:1b:89:ff:11:ac:dd:
                    d5:2f:ce:7c:07:90:7f:8d:8c:fe:8a:9f:68:5b:ac:
                    cc:79:1d:09:26:c1:86:59:ec:ca:a5:24:04:c7:37:
                    f6:6f:45:50:0e:5b:b3:ff:b0:dd:2a:aa:29:0b:c3:
                    63:0a:71:df:b1:92:d9:98:13:6b:aa:b7:78:8b:f7:
                    de:70:06:96:b3:53:9e:f3:b4:cb:63:39:56:a2:d5:
                    77:5c:1a:5d:45:5c:fa:98:2f:68:98:eb:83:73:50:
                    2d:21:fe:ef:d5:69:01:39:7f:93:b0:2a:ba:7e:2a:
                    06:c4:07:47:c8:5c:4e:67:a9:49:8b:3e:a0:7b:e2:
                    42:35:9f:63:9a:94:52:79:5b:4d:41:93:2e:24:3c:
                    eb:ff:54:85:a7:e9:08:d4:e9:8d:a5:4d:97:a2:07:
                    0b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:12:8E:A7:EC:8E:3E:B4:BE:C3:35:8E:B3:1E:05:7B:DC:34:B6:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a153cfa6-cf85-3cc1-a9c0-7af65cf593b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.237.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:24:49:01:bf:c5:34:a8:b7:94:d4:1e:02:0a:48:f0:d8:1b:
         f6:29:05:75:68:6f:91:ad:73:0f:22:b0:0b:e9:62:09:e7:c6:
         cf:bb:27:f0:2c:ff:37:93:77:3f:60:16:2a:16:40:91:7c:96:
         bb:54:fb:b3:11:1f:48:fd:ae:83:6e:e6:f7:ed:63:ee:34:c4:
         86:de:2d:01:4b:cf:b5:08:49:e3:02:71:2f:70:43:bc:7e:f6:
         cc:f5:54:93:74:06:19:06:3a:00:b9:10:2f:d0:52:50:88:69:
         c6:29:7c:89:69:21:e4:bb:52:20:4b:60:ca:5d:e8:c2:4d:f5:
         c4:90:d8:5b:0c:a9:3b:21:f8:ba:01:4e:05:68:a2:4b:34:17:
         fe:08:86:06:ce:76:65:b4:b8:b0:3a:c5:fa:aa:ef:48:05:90:
         52:63:72:a8:cc:86:f6:50:75:ea:14:0d:bc:12:65:6a:04:fe:
         bd:d0:a8:5c:9c:a9:37:b6:4c:f6:dd:1d:0e:4e:26:db:38:74:
         32:a1:0b:36:e5:83:f0:31:57:8a:5d:fb:f3:21:83:99:4f:71:
         bb:01:de:82:1e:d4:80:8a:bf:fb:0d:c4:0f:7b:b7:da:1e:70:
         6d:74:1c:1e:25:a3:97:d3:92:6c:51:89:92:be:f9:4a:2e:5f:
         ba:bb:27:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:11:04 2025 by rpki-client