Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7ba786eb-ddc4-3806-a03a-8f1c32827b53.roa
File:                     7ba786eb-ddc4-3806-a03a-8f1c32827b53.roa (raw, json)
Hash identifier:          Oq+vwYc/R4pOxlBHd9JvzeXEZkiUMXJWcPA+tiGApN4=
Subject key identifier:   C3:66:7D:59:81:6A:80:B6:01:99:5E:82:0B:52:45:12:6C:68:09:2C
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F432858485B6AF8A5EFEA19CC80042780
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7ba786eb-ddc4-3806-a03a-8f1c32827b53.roa
Signing time:             Sat 28 Dec 2024 14:00:52 +0000
ROA not before:           Sat 28 Dec 2024 14:00:52 +0000
ROA not after:            Fri 28 Mar 2025 13:00:52 +0000
asID:                     49999
IP address blocks:        68.67.205.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5b:6a:f8:a5:ef:ea:19:cc:80:04:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Dec 28 14:00:52 2024 GMT
            Not After : Mar 28 13:00:52 2025 GMT
        Subject: CN=703b5023-5202-4cf9-b519-c4ccc466486a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2d:13:2f:ad:e0:d4:9d:6c:43:84:60:af:40:
                    6d:e3:65:2c:3c:47:ef:80:2e:1c:19:df:5e:32:66:
                    27:41:f0:24:95:e0:ab:2f:cb:92:b7:b2:5e:9d:d4:
                    21:a9:76:6b:89:38:d0:89:4a:77:fe:12:6f:dc:13:
                    54:2a:2e:91:0f:e7:f2:84:db:ac:55:87:48:97:d2:
                    05:f8:9b:c2:fd:05:f9:22:1e:0c:b7:92:2d:6f:be:
                    91:01:51:01:34:b1:c7:22:4a:fd:d7:f5:51:f4:eb:
                    6d:ce:2f:ea:8d:58:b4:b3:10:8d:1e:07:a6:81:cb:
                    47:74:87:49:b8:3f:44:d4:4d:fa:11:e7:f4:39:6e:
                    de:02:f7:1e:92:86:00:8b:49:d0:c6:54:02:22:b8:
                    2f:c2:87:29:2a:44:30:25:90:6e:c8:84:50:1d:82:
                    ad:a9:3f:b2:d3:5a:f5:df:aa:9f:7c:74:ae:e0:d3:
                    8b:8a:fb:8b:c7:05:8c:fe:38:16:d2:ad:bd:1d:b2:
                    20:2e:37:c2:64:28:1d:35:f0:bf:b9:5d:72:6c:fe:
                    f0:07:9d:09:f0:18:4d:35:0b:0d:83:61:68:ef:3d:
                    f7:eb:e0:8e:15:fa:31:41:bc:2c:e3:f2:0c:b8:04:
                    bf:bd:99:b3:1e:39:7b:bf:fb:06:36:e2:8e:c0:3e:
                    cc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:66:7D:59:81:6A:80:B6:01:99:5E:82:0B:52:45:12:6C:68:09:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7ba786eb-ddc4-3806-a03a-8f1c32827b53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:88:da:49:df:35:d9:20:8a:a0:a0:68:f0:05:99:f1:5c:1d:
         58:1a:ef:05:d6:b5:f9:5f:a7:65:7d:0f:0f:ee:b7:e8:69:d2:
         49:15:b4:45:c7:80:0b:a0:24:53:ba:31:44:14:e4:3a:dc:af:
         cb:24:3c:26:7a:80:f2:91:57:43:f2:3e:b4:ed:ef:ca:f2:1a:
         bf:c2:95:ae:2c:d5:71:81:27:ea:96:02:97:1a:07:3f:84:73:
         51:57:ea:0c:6b:66:73:cc:65:13:97:9c:2d:9e:0c:4e:16:b6:
         48:75:b1:86:31:69:60:70:d4:45:71:1d:38:63:f5:db:61:3f:
         86:8e:70:92:11:44:46:6b:64:15:0e:87:b4:1b:31:71:3e:a1:
         5f:0c:1d:80:06:d0:18:e2:68:52:d8:6a:21:f0:56:8a:49:9c:
         cf:48:63:da:0b:53:c9:ef:d9:73:7b:d9:37:ae:23:4a:2f:f4:
         7e:06:39:ce:36:37:2c:b1:26:11:8f:e2:31:6c:c5:3c:48:74:
         00:7b:e9:43:c1:75:5c:38:27:84:09:f8:28:ac:c2:97:54:d9:
         98:cc:e9:06:d8:ad:fa:bd:3e:18:a1:a8:18:49:9a:dc:d6:a0:
         b7:23:a9:76:4e:ff:32:51:a6:3c:a9:08:ef:a8:eb:0c:3e:ac:
         35:41:3d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:13:25 2025 by rpki-client