Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4100d234-1a2b-3285-9f6f-102630868c99.roa
File:                     4100d234-1a2b-3285-9f6f-102630868c99.roa (raw, json)
Hash identifier:          nAFNBdHruHxgN4dNrqeYrOqBbXjjsjxQHlyS57uTb5U=
Subject key identifier:   B8:63:82:61:65:0C:C4:73:BB:6F:E5:2F:F7:8C:6B:F5:01:F4:CF:39
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848037B45D3ED60596282371EC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4100d234-1a2b-3285-9f6f-102630868c99.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20115
IP address blocks:        68.117.32.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:45:d3:ed:60:59:62:82:37:1e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=d80bd74f-5bc1-436a-808e-9e65136cd777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ff:ba:f6:93:08:25:17:d6:62:3b:b2:67:40:
                    1e:31:03:f2:c7:fb:21:77:01:8b:03:58:af:b6:a4:
                    ea:a6:db:2c:b1:d0:2b:60:6e:cf:13:41:38:94:eb:
                    ca:5f:1b:2b:41:3f:57:18:d5:1d:a3:cb:74:8b:d8:
                    d6:7c:19:08:11:13:49:15:b1:75:db:52:07:82:64:
                    b2:b4:d4:a1:cf:bc:e7:f0:4f:50:06:14:e0:72:44:
                    69:a9:19:5b:cd:d8:46:61:28:20:d0:8f:cb:18:74:
                    d9:98:a8:f0:24:50:61:e2:54:ad:77:8c:a7:e8:43:
                    63:55:e0:20:87:fb:2f:d7:23:f6:19:bd:73:85:52:
                    be:41:88:06:33:ff:f4:93:2b:fe:7c:dc:f1:1b:88:
                    4b:68:2f:e4:81:5b:34:93:c3:fa:6d:90:7b:e3:ef:
                    c0:06:53:96:83:d9:d7:01:1f:01:3b:da:1c:28:68:
                    f8:cb:97:03:4e:b0:2b:b7:13:18:1b:ee:c7:6c:ee:
                    62:f4:23:8e:46:76:3d:9b:d0:e9:f7:18:10:92:84:
                    80:fd:66:38:06:08:c4:da:1a:11:b7:86:9e:a6:57:
                    2e:46:1c:2b:61:b4:6e:4e:57:83:20:ed:e0:ff:57:
                    0a:47:7f:83:2f:5d:e0:30:35:2e:f8:d9:ac:0a:76:
                    db:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:63:82:61:65:0C:C4:73:BB:6F:E5:2F:F7:8C:6B:F5:01:F4:CF:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4100d234-1a2b-3285-9f6f-102630868c99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.117.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:7f:b5:99:92:32:71:15:1d:d5:89:a4:b5:79:eb:13:d0:b8:
         09:9c:47:8b:6b:52:05:d4:bd:28:b4:0f:3e:93:99:15:ff:be:
         99:94:43:ea:37:c8:14:89:c9:8d:76:ef:cc:66:b7:67:64:9f:
         07:fb:fe:3e:5d:a9:4b:ca:fb:23:2c:31:8f:44:7c:8d:4c:13:
         ae:ef:8c:27:b9:ba:b0:e2:5e:59:de:9b:de:35:0d:19:94:e3:
         5f:a7:48:f4:e3:f3:e3:81:f6:ee:63:59:7c:59:9c:5e:d8:cd:
         98:7d:b1:a1:71:2f:0e:50:ae:4a:23:cf:12:d4:b1:a4:23:6d:
         81:ac:fc:5b:ce:67:b0:3c:96:8e:70:0c:14:30:34:47:ea:30:
         91:21:3f:92:5e:ab:e8:44:99:5c:80:7f:73:26:28:4a:b1:ed:
         93:26:60:c3:ca:0e:40:1c:79:0f:66:a6:c1:06:53:45:0d:2f:
         f1:47:cc:51:05:5d:c6:ad:b7:51:47:85:9d:fe:26:ac:a5:6a:
         0d:22:69:71:71:d6:57:17:f8:29:80:b0:05:d1:7d:a5:6b:7a:
         d5:25:14:ea:35:22:43:b8:4b:fc:aa:0e:95:54:95:f5:7c:e7:
         4b:ae:4d:4a:11:80:46:58:f5:27:0b:c2:24:a1:9c:2d:54:f5:
         eb:44:39:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:42:58 2025 by rpki-client