Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/81d93bf0-78f9-3f1f-ba8b-1846c075d797.roa
File:                     81d93bf0-78f9-3f1f-ba8b-1846c075d797.roa (raw, json)
Hash identifier:          YtZIyOlhbNK91ajc2fsXE1plDoyvsMVUPAxNhc8Ax3o=
Subject key identifier:   83:A6:19:ED:F0:83:60:1D:1B:D0:E2:C1:38:96:D2:B4:63:6C:E2:FE
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F432858484EDAC99AE47A7623FB68E6B0
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/81d93bf0-78f9-3f1f-ba8b-1846c075d797.roa
Signing time:             Tue 24 Dec 2024 02:00:38 +0000
ROA not before:           Tue 24 Dec 2024 02:00:38 +0000
ROA not after:            Mon 24 Mar 2025 01:00:38 +0000
asID:                     25369
IP address blocks:        68.67.197.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4e:da:c9:9a:e4:7a:76:23:fb:68:e6:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Dec 24 02:00:38 2024 GMT
            Not After : Mar 24 01:00:38 2025 GMT
        Subject: CN=b2dd590e-056d-48fb-8031-563093f349a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:57:75:c8:c7:c9:23:18:5d:6d:f3:b8:31:fa:
                    63:4c:39:e9:96:a1:bb:31:52:3f:dc:6a:da:6a:64:
                    27:38:1c:1d:ef:14:a5:d4:e0:82:97:aa:2c:d3:ab:
                    8a:5f:75:1e:e1:d9:96:6e:a7:a4:22:c6:2e:b9:b1:
                    32:4e:f2:3a:7e:cd:c8:3e:84:ca:24:77:f8:87:b9:
                    4c:02:9f:1a:2e:b0:13:7f:fa:ff:b3:a3:74:20:d1:
                    7b:3e:81:ef:7e:b7:1b:8e:ec:bd:e9:24:c1:03:2b:
                    2b:f7:57:1a:4e:cc:8c:a0:bf:6d:77:bc:61:8a:0f:
                    99:9e:33:97:27:db:f5:62:e8:98:0b:6b:f5:f3:3d:
                    22:8e:6f:f6:d0:59:1e:e4:b3:2a:50:45:3e:b9:13:
                    64:53:e8:e4:5a:a6:b3:4e:a3:b3:11:45:0d:5a:9a:
                    97:ad:91:9a:5f:ac:a1:70:eb:a8:fe:e3:13:bc:18:
                    3f:fa:ca:d6:13:3a:c4:89:1e:a5:bd:23:08:2b:6c:
                    66:8c:1d:82:e6:82:0b:4f:89:53:8c:c9:a6:2f:94:
                    49:e4:86:93:27:31:b5:fd:0b:dc:59:ed:1b:02:2d:
                    96:71:3e:0d:7b:c7:e5:b8:a4:bb:0d:37:9d:7b:ca:
                    87:ab:32:d0:03:48:8a:d6:61:43:6b:8f:ed:00:80:
                    cb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A6:19:ED:F0:83:60:1D:1B:D0:E2:C1:38:96:D2:B4:63:6C:E2:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/81d93bf0-78f9-3f1f-ba8b-1846c075d797.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:20:3e:f3:55:6c:c4:64:1b:63:69:bd:59:3d:7c:3e:f8:12:
         cc:ec:cc:02:bd:5e:a8:7b:f8:cf:22:b7:d8:8e:92:3c:b9:4f:
         41:b0:a5:08:16:7c:63:91:d4:ef:75:a4:29:ce:a6:30:6f:b7:
         ba:f3:76:69:00:96:50:8b:40:93:ba:2e:12:af:c7:df:2d:c7:
         1c:4e:f5:77:1b:76:4e:2e:36:4a:1b:24:b7:05:67:47:63:a9:
         f7:98:e3:42:42:84:11:fe:fe:63:42:b1:d2:cf:79:72:3d:22:
         df:ae:21:4c:08:f5:b2:53:a3:32:c4:6f:5a:6e:32:17:fb:e1:
         01:34:0b:34:e6:13:d4:c0:86:e0:a4:5d:65:fe:2e:b3:6c:ce:
         25:13:a5:4e:c7:96:f0:b9:f3:dd:f9:29:0f:53:5f:a5:4d:e2:
         8b:96:ad:75:04:a0:7c:e2:d1:60:1b:63:1f:83:52:12:89:0e:
         c0:9b:c9:f0:2d:97:09:09:f2:bb:f3:30:e7:6a:fb:71:53:54:
         61:31:a6:c5:b4:6d:80:38:b8:62:13:fb:28:f2:0c:ae:ba:04:
         98:04:fc:90:51:16:52:12:88:35:73:1e:93:89:84:c9:6d:cb:
         7e:7c:6d:c6:ee:6c:9a:fd:e2:1d:a6:52:33:f0:c0:83:a6:64:
         11:9f:43:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:15:27 2025 by rpki-client